Privacy Policy

Last Updated: January, 2026

1. General

Privacy and data protection are important to us at Bulkgrid AB, reg. no. 559465-9087 (“Bulkgrid”, “we”, “us”, or “our”).
This Privacy Policy aims to inform you about our processing of personal data and your rights as a data subject.
Bulkgrid’s processing of personal data is carried out in accordance with applicable legislation, including the General Data Protection Regulation (GDPR).

This Privacy Policy applies to the personal data we process in connection with:

• The use of our services, including our websites (e.g., www.bulkgrid.com, www.bulkgrid.dev), our web and mobile applications, and our software-as-a-service platform (the “Services” or “Platform”);
• Customer contracts and engagements; and
• Business contacts and relationships.

By using our Services and/or registering for an account, you acknowledge that we will process your personal data as described herein.

2. Personal data we process

2.1 Controller vs. Processor Roles

Bulkgrid AB acts as a data controller for personal data relating to user accounts, subscriptions, billing, communications, analytics, and platform operation. When users utilize our Services to crawl, monitor, or index third-party websites or domains, Bulkgrid acts as a data processor for any personal data included in the crawled or uploaded content.
In such cases, you (or your organization) act as the data controller, and Bulkgrid processes the data only in accordance with your instructions as described in our separate Data Processing Agreement (DPA).

2.2 Crawled and Indexed Data

Our Services enable users to crawl publicly available websites and index domains to our AI systems. Such activities may incidentally collect publicly accessible personal information (e.g., names, contact details, or other identifiers published online). Bulkgrid does not use, share, or repurpose such data beyond providing the contracted Services. Users are solely responsible for ensuring that their crawling or indexing activities comply with applicable data protection laws and website terms of use.

3. Legal basis and purpose of the processing

3.1 AI Processing and Indexing

Bulkgrid’s AI indexing features analyze user-submitted and crawled data to improve the accuracy, structure recognition, and performance of our Services. Where feasible, this processing is performed on anonymized or aggregated datasets. Bulkgrid does not train its AI systems on personal data unless such data is (i) publicly available and (ii) processed under our legitimate interest in accordance with Article 6(1)(f) GDPR. We continuously assess that this interest is not overridden by your rights and freedoms.

3.2 Monitoring and Automation

To provide monitoring and alert functionalities, we process technical and operational data such as crawl results, timestamps, error logs, and domain metadata. This processing is necessary for the performance of our agreement with you under Article 6(1)(b) GDPR. Data retained for monitoring purposes is deleted or anonymized when no longer required for functionality or compliance.

4. Security measures; Impact assessment

Personal data is always processed confidentially and protected by appropriate technical and organizational security measures. Bulkgrid ensures that third parties processing data on our behalf maintain equivalent security standards. If we conduct any processing likely to pose a high risk to individuals’ rights and freedoms, we will carry out a data protection impact assessment in accordance with GDPR.

5. Extrenal parties we use

We collaborate with trusted sub-processors and service providers to operate and improve our Services.
These include providers supporting web crawling, data storage, and AI computation infrastructure.
Bulkgrid maintains an up-to-date list of sub-processors in connection with its separate Data Processing Agreement (DPA).

6. Processing of your data outside the EU/EEA

When personal data is transferred outside the EU/EEA, Bulkgrid ensures adequate protection through applicable safeguards such as adequacy decisions, the EU-U.S. Data Privacy Framework, or Standard Contractual Clauses (SCCs) as required under GDPR.

7. Storage and deletion of personal data

Personal data is retained only for as long as necessary to fulfill the purposes of processing or comply with applicable laws. When data is no longer needed, it is securely deleted or anonymized according to our internal retention policies.

8. Automated decision-maing and profiling

Bulkgrid does not use automated decision-making that produces legal or similarly significant effects on individuals.
Any profiling within our Services (for example, personalization of dashboards or recommendations) is limited, non-significant, and based on objective usage data.

9. Your rights as a data subject

As a data subject, you have the right to:

• Withdraw consent at any time
• Request access to your personal data
• Request rectification or deletion
• Object to processing based on legitimate interest
• Request restriction of processing
• Request data portability

Requests can be sent to privacy@bulkgrid.com. You also have the right to lodge a complaint with the Swedish Authority for Privacy Protection (IMY).

10. Children

• Our Services are intended for users aged eighteen (18) or older.
• We do not knowingly collect data from children under this age.
• If you are a guardian and believe your child has submitted personal data to Bulkgrid, please contact us to request deletion.

11. Links to third-party sites

Our Platform may contain links to third-party websites. These sites are not operated by Bulkgrid, and we are not responsible for their content or privacy practices. We recommend reviewing the privacy policies of any external sites you visit.

12. Ads and sponsored content

Bulkgrid may use anonymized or aggregated usage data to personalize in-platform content or feature suggestions.
Personal data is never shared with marketing agencies or advertisers without explicit consent.

13. Cookies

Our Platform uses cookies and analytics tools to track performance, improve functionality, and understand user interaction. These may collect IP addresses and browser identifiers. You can adjust your preferences via your browser settings or our Cookie Policy, which forms part of this Privacy Policy.

14. Data processing agreement

For customers using our Services to process personal data (e.g., via crawling, monitoring, or indexing), Bulkgrid provides a separate Data Processing Agreement (DPA) in accordance with Article 28 GDPR. The DPA forms an integral part of the customer agreement and governs Bulkgrid’s obligations as a data processor.

15. Amendments and additions

Bulkgrid may update this Privacy Policy from time to time. The latest version will always be available on our Platform. Where changes materially affect processing based on your consent, we will seek renewed consent before continuing such processing.

16. Contact details

Bulkgrid AB
Västmannagatan 28A
113 25 Stockholm, Sweden
Reg. No. 559465-9087
Email: privacy@bulkgrid.com
Website: bulkgrid.com