Legal
Privacy Policy
Last updated: July 2026
Overview
BulkCert is a certificate generation utility. We take a minimal approach to data collection. This policy explains what we collect, why, and how we handle it. If you have questions, contact us directly at vnavin7714@gmail.com.
What we collect
- Account informationYour email address and name, used only for authentication and to identify your projects.
- Google OAuth TokensIf you enable automated mailing, we request temporary access tokens via Google OAuth. These tokens are used purely to authorize email delivery on your behalf.
- Uploaded filesPDF templates and spreadsheet files you upload for processing. These are stored temporarily in a secure container environment.
- Usage dataBasic server logs (request timestamps, response codes). We do not use analytics tracking, ad pixels, or third-party session recording.
How we use your data
Uploaded files are used solely to generate your certificates. We do not read, analyse, sell, or share the contents of your files with any third party. Generated PDFs are stored temporarily so you can download them, then deleted automatically.
If you authorize Gmail access, we only use the credentials to transmit the compiled certificate attachments to the email addresses you specify. We do not read, scan, store, or parse any other emails in your Google account.
Google Limited Use Disclosure
BulkCert's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Data retention
All uploaded files — PDF templates, spreadsheets, and generated certificates — are automatically purged from our servers within 24 hours of upload or generation. Google OAuth access tokens are handled dynamically and expire automatically.
Third-party services
BulkCert uses Clerk for authentication and session management. Clerk handles secure Google connection handshakes in accordance with their own policies. We do not use advertising networks, social media tracking pixels, or third-party analytics trackers.
Your rights
You may request deletion of your account and any associated data at any time. Since uploaded files are purged within 24 hours, they are typically already gone before any such request is needed. To delete your account, contact us directly at vnavin7714@gmail.com.
Contact
For any privacy-related questions, API usage inquiries, or requests, reach out directly via email at vnavin7714@gmail.com. We aim to respond within 48 hours.