Privacy & Terms
Privacy Policy and Terms of Service for Bulk Doctor. Last updated 15 August 2026.
Privacy Policy
Bulk Doctor helps merchants bulk-edit their Shopify products. We access product, variant, inventory and collection data only to perform the edits you request. We do not sell your data, and we do not use it to train machine-learning models.
What we access
When you install Bulk Doctor, you grant it these Shopify permissions, and nothing beyond them:
- Products (read and write) - to list the products you filter on and apply your edits.
- Inventory (read and write) - to read and change stock levels per location.
- Product listings (read and write) - to publish or unpublish products to sales channels.
- Locations (read) - to show which location a stock change applies to.
We do not request access to customers, orders, or payment data, so Bulk Doctor never sees them.
What we store
We store your shop domain, an encrypted Shopify access token, your plan and credit balance, and a history of the bulk edits you run, including before/after snapshots of the fields you changed so those changes can be undone. CSV files you export or import are stored so you can download them again. We do not store any customer personal information.
Who else sees it
Bulk Doctor runs on Cloudflare (Workers, D1 and R2), which hosts the app and stores the data described above on our behalf. Billing is handled by Shopify, so we never see or store card details. We do not share your data with anyone else.
How long we keep it
Your shop record and edit history are kept for as long as Bulk Doctor is installed. How far back you can undo depends on your plan, from 14 days on Starter up to 90 days on Pro (the Free plan does not include undo); older edits stay listed in your history but can no longer be undone.
Files are removed automatically once they have served their purpose: exported spreadsheets after 30 days, uploaded import files and preview reports after 7 days, and the working file behind a spreadsheet save after 2 days. Everything else is deleted when you uninstall, as described below.
Data deletion
When you uninstall, your Shopify access token is deleted immediately so we can no longer access your store. Your remaining data (plan record and bulk-edit history with its before/after snapshots) is then permanently deleted, along with any exported or imported CSV files, when Shopify sends the shop data-erasure request, which it does about 48 hours after uninstall. You can request immediate deletion any time at hello@cartworks.io.
Privacy requests from Shopify
Bulk Doctor implements Shopify's three mandatory compliance webhooks. customers/data_request and customers/redact are answered with confirmation that we hold no customer data, because the app never requests access to customers. shop/redact permanently erases everything we hold for your shop, as described above.
Your rights
You can ask us what we hold about your shop, ask for it to be corrected, or ask for it to be deleted, at any time and for any reason, by emailing hello@cartworks.io. We answer within 30 days.
Terms of Service
By installing Bulk Doctor you agree to use it to edit products you are authorized to manage. Bulk Doctor provides preview and undo features, but you are responsible for reviewing changes before applying them.
Availability
The service is provided "as is". We work hard to keep it reliable and to report every edit honestly.
Contact
Questions, concerns, or data requests:
Email: hello@cartworks.io
Bulk Doctor is published by CartWorks.io.