Bulma ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our workforce management platform. By using Bulma, you agree to the collection and use of information in accordance with this policy.
We collect information you provide directly to us when you create an account, add employees, set payroll details, contact support, or respond to surveys. We also collect log data, device information, and usage analytics automatically to help us improve the product.
We do not use your data to train AI models, build ad profiles, or sell to any third party — ever.
We do not sell, rent, or trade your personal information. We may share data with trusted service providers (cloud infrastructure, payment processors, identity verification) under strict confidentiality agreements. We may disclose information if required by law.
Bulma is SOC 2 Type II certified and ISO 27001 compliant. All data is encrypted in transit (TLS 1.2+) and at rest (AES-256). Sensitive fields such as salaries are masked by default and accessible only with explicit permission.
Depending on your location, you may have the right to access, correct, delete, or export your personal data, or to restrict how we process it. To exercise any of these rights, contact privacy@bulma.ai. We will respond within 30 days.
We retain your data for as long as your account is active. Upon closure, we delete or anonymize personal data within 90 days, unless a longer period is required by law.
We use essential cookies to keep you signed in and remember your preferences. We do not use advertising or tracking cookies.
We will notify you of material changes by email or in-product notice at least 14 days before they take effect.
Questions or requests? Reach out: