Privacy Policy
Last updated: April 26, 2026
1. Who we are
Bulkmark is a service operated by Moody Labs. This Privacy Policy explains what data we collect about you, why we collect it, how we use it, and the rights you have over it.
2. Data we collect
From X OAuth
- Your X user ID, username, display name, and avatar URL.
- An OAuth 2.0 access token and refresh token, scoped only to
bookmark.read,tweet.read, andusers.read. We never receive your X password.
From the X API
- Metadata and content of tweets you have bookmarked: tweet ID, author handle, author name, tweet text, tweet URL, and bookmark timestamp.
From signup and settings
- Your email address (provided by X OAuth).
- Your digest preferences (frequency, day of week, time of day).
From Polar.sh (if you subscribe)
- A Polar.sh customer ID, subscription status, and billing period. We never see or store your credit-card number — Polar.sh handles all card data under PCI-DSS compliance.
- Polar.sh acts as our Merchant of Record: it is the legal seller of the subscription, handles tax compliance (VAT and sales tax) where applicable, and processes refunds and chargebacks. See Polar.sh's privacy policy for how they handle your billing data.
From product usage
- In-app interactions such as bookmark sync timestamps, chat conversations you have with our AI, and digest delivery status. We do not use third-party advertising trackers.
3. How we use your data
- Deliver the core service: sync your bookmarks, generate AI summaries, send you personalized digest emails, power the chat feature.
- Bill you: manage your Polar.sh subscription lifecycle.
- Improve the service: aggregate-only product analytics (e.g. how many users open digests, how many bookmarks are synced per day). We do not sell your data and we do not use it to train AI models.
4. Third-party data processors
| Processor | Purpose | Data shared | Location |
|---|---|---|---|
| X (Twitter) | OAuth authentication, bookmark fetch | OAuth grants and API calls only | United States |
| Anthropic (Claude) | AI summarization of bookmark content | Tweet text; not retained beyond the request per Anthropic's API terms | United States |
| Polar.sh | Merchant of Record (billing, tax compliance, refunds) | Email, billing address, subscription status, payment metadata. Card data is handled by Polar.sh under PCI-DSS, not by us. | European Union |
| Resend | Transactional and digest email delivery | Your email address and digest content | United States / EU |
| Convex | Primary database and backend | All Bulkmark application data | United States |
| Cloudflare | Hosting | Request logs | Global edge |
5. Data retention
- Your bookmarks, summaries, digests, tags, lists, and chat history are retained as long as your account exists.
- Internal billing and cost-tracking logs are retained for the life of your account and are deleted together with it.
- When you delete your account, a minimal audit record is retained containing only a timestamp, your subscription tier name, and a boolean for whether a subscription existed. No email address, user ID, or other personal identifier is kept.
6. Your GDPR rights
If you are in the European Economic Area, you have the following rights:
- Right of access (Article 15). Use the "Export my data" button in Settings → Danger Zone to download a JSON file containing all personal data we hold about you.
- Right of rectification (Article 16). Contact support@bulkmark.io if you need to correct any data.
- Right of erasure (Article 17). Use the "Delete account" button in Settings → Danger Zone. Deletion is immediate and irreversible.
- Right to data portability (Article 20). The JSON export is structured and machine-readable.
- Right to object or restrict processing (Articles 18, 21). Contact us at the address above.
- Right to lodge a complaint. You can complain to the CNIL (France) or your local data protection authority.
7. Cookies
Bulkmark uses strictly necessary session cookies to keep you signed in. We do not use advertising cookies, third-party tracking scripts, or any other non-essential trackers.
8. International data transfers
Most of your data is stored with providers based in the United States (Convex, Cloudflare). By signing in with X, you consent to the transfer of your data to these providers. We rely on standard contractual clauses where applicable.
9. Children
Bulkmark is not intended for users under the age of 16 (which is also X's minimum age). We do not knowingly collect data from children. If you believe we have collected data from a child, contact us and we will delete it.
10. Security
All data is transmitted over HTTPS. OAuth tokens are stored at rest in the Convex database. We do not store passwords — authentication is handled entirely through X OAuth.
11. Changes to this policy
Material changes will be announced by email at least 14 days before they take effect.
12. Contact
Write to support@bulkmark.io.
See also our Terms of Service.