Privacy policy

How the Bulk Flow website and app handle information today.

Effective date: April 12, 2026

Who operates Bulk Flow

Bulk Flow is operated by Mehdi Bouhalassa.

  • Name: Mehdi Bouhalassa
  • Role: Owner and main developer
  • Contact:

Scope

This policy applies to:

  • the public website at bulkflow.pro
  • the Bulk Flow Shopify app

The app is not publicly listed on the Shopify App Store yet and is still being prepared for release.

Information collected on the public website

The public website does not currently use:

  • analytics
  • advertising pixels
  • newsletter forms
  • user accounts
  • contact forms

If you email Bulk Flow, the message may include:

  • your email address
  • your name or signature
  • the content of your message
  • any attachments you choose to send

Information processed through the Shopify app

Bulk Flow currently requests Shopify permissions for:

  • products
  • checkout validations
  • draft orders

Bulk Flow does not currently request customer-data scopes.

The app currently stores or processes:

  • shop domain and technical installation or session data received from Shopify
  • granted app scopes and related authentication or session records
  • app configuration created in the app, including ordering rules, selected products, product snapshots, and checkout-minimum settings
  • draft order IDs and draft-order bypass settings when a draft-order exception is used
  • installing-user fields that Shopify may include in app session data, such as name or email

How information is used

Bulk Flow uses information only to:

  • operating the Shopify app
  • saving and applying merchant-created rules and settings
  • keeping the app installed and authenticated securely
  • handling support, privacy, and compliance questions
  • meeting platform and legal obligations

Hosting and service providers

Bulk Flow currently uses:

  • WHC.ca for the public website and support email hosting in Montreal, Quebec
  • Railway for the Shopify app runtime
  • Shopify as the commerce platform and app-installation platform

No analytics provider is configured on the public website.

Outside-Quebec processing

The public website and support email are hosted in Montreal, Quebec.

The Shopify app runtime is hosted on Railway. Because the app uses technical infrastructure outside Quebec, some app-operation data or technical data may be processed outside Quebec.

Cookies, tracking, and profiling

Bulk Flow does not intentionally place analytics or advertising cookies on the public website.

Bulk Flow does not use personal information for profiling.

The app applies merchant-defined ordering rules to product pages and checkout minimums, but it does not make fully automated decisions about a person using personal information.

Retention

Bulk Flow currently keeps:

  • support emails for 30 days, then deletes them
  • app session and operational configuration data only as long as needed to run the app, support testing, or maintain an installation

If you want app-side data deleted, contact .

Access, correction, and deletion requests

To ask for access, correction, or deletion of app-side information, contact:

Bulk Flow will review the request and respond directly.

Loi 25

Bulk Flow publishes a separate Quebec-specific page here:

That page summarizes the Quebec-facing privacy position for Bulk Flow.