Privacy & Terms

Privacy Policy and Terms of Service for Bulk Doctor. Last updated 15 August 2026.

Privacy Policy

Bulk Doctor helps merchants bulk-edit their Shopify products. We access product, variant, inventory and collection data only to perform the edits you request. We do not sell your data, and we do not use it to train machine-learning models.

What we access

When you install Bulk Doctor, you grant it these Shopify permissions, and nothing beyond them:

We do not request access to customers, orders, or payment data, so Bulk Doctor never sees them.

What we store

We store your shop domain, an encrypted Shopify access token, your plan and credit balance, and a history of the bulk edits you run, including before/after snapshots of the fields you changed so those changes can be undone. CSV files you export or import are stored so you can download them again. We do not store any customer personal information.

Who else sees it

Bulk Doctor runs on Cloudflare (Workers, D1 and R2), which hosts the app and stores the data described above on our behalf. Billing is handled by Shopify, so we never see or store card details. We do not share your data with anyone else.

How long we keep it

Your shop record and edit history are kept for as long as Bulk Doctor is installed. How far back you can undo depends on your plan, from 14 days on Starter up to 90 days on Pro (the Free plan does not include undo); older edits stay listed in your history but can no longer be undone.

Files are removed automatically once they have served their purpose: exported spreadsheets after 30 days, uploaded import files and preview reports after 7 days, and the working file behind a spreadsheet save after 2 days. Everything else is deleted when you uninstall, as described below.

Data deletion

When you uninstall, your Shopify access token is deleted immediately so we can no longer access your store. Your remaining data (plan record and bulk-edit history with its before/after snapshots) is then permanently deleted, along with any exported or imported CSV files, when Shopify sends the shop data-erasure request, which it does about 48 hours after uninstall. You can request immediate deletion any time at hello@cartworks.io.

Privacy requests from Shopify

Bulk Doctor implements Shopify's three mandatory compliance webhooks. customers/data_request and customers/redact are answered with confirmation that we hold no customer data, because the app never requests access to customers. shop/redact permanently erases everything we hold for your shop, as described above.

Your rights

You can ask us what we hold about your shop, ask for it to be corrected, or ask for it to be deleted, at any time and for any reason, by emailing hello@cartworks.io. We answer within 30 days.

Terms of Service

By installing Bulk Doctor you agree to use it to edit products you are authorized to manage. Bulk Doctor provides preview and undo features, but you are responsible for reviewing changes before applying them.

Availability

The service is provided "as is". We work hard to keep it reliable and to report every edit honestly.

Contact

Questions, concerns, or data requests:
Email: hello@cartworks.io

Bulk Doctor is published by CartWorks.io.