Privacy policy
BulkBooks browser extensions (including BulkBooks for Xero) ยท Last updated 14 October 2026
BulkBooks adds bulk actions to accounting software you already use. This page explains exactly what the extension and our licence service handle, and what they never touch.
Your accounting data stays where it is
The extension works inside your Xero tab, in your browser. It reads and edits invoices only when you ask it to (for example, bulk-editing the due date of invoices you selected), using Xero's own pages, as you would by hand. We never send your invoices, contacts, amounts or any other accounting data to our servers, and we cannot see them.
What we do collect, and why
| Data | Why | Where it goes |
|---|---|---|
| Your email address | To match your payment to your licence, and so you can recover your key | Our licence service |
| Your licence key | To check your Pro plan is active (about once a day) | Our licence service (stored only as a one-way hash plus an encrypted copy) |
| A random browser ID | To limit a key to 2 browsers. It is generated randomly, is not linked to your device, and is stored only as a one-way hash | Our licence service |
| Payment details sent by our payment provider (name, email, phone if given, amount, payment reference) | To issue your licence key when your payment is confirmed | Our licence service |
We never receive your card number. Card payments are handled entirely by our payment provider, SupraPay, under its own privacy policy.
What we do not do
- We do not sell, rent or share your data for advertising.
- We do not track your browsing, and the extension only runs on the accounting site it is built for.
- We do not use analytics or advertising trackers in the extension.
- The extension loads no code from the internet; everything it runs ships inside it.
Services we use
- SupraPay: takes your payment and tells us when it is confirmed.
- Render: hosts our licence service.
- Supabase: the database where licence records are kept.
- Telegram: sends the operator a sale notification. It shows a shortened email (such as ja***@firm.com), never your key or full address.
Stored on your computer
The extension keeps your settings, your licence key and the random browser ID in your browser's extension storage. Removing the extension deletes them. "Remove key" in the extension's Options also frees that browser's slot on our side.
How long we keep it
Licence and payment records are kept while your licence is active and for up to 2 years afterwards, for support, refunds and accounting. A browser that has not checked in for 30 days stops counting against your limit. You can ask us to delete your data at any time; we will do so unless we must keep a payment record by law.
Your rights
You can ask what we hold about you, ask us to correct or delete it, or ask any question about this policy: contact the contact address on our store listing.
Changes
If this policy changes, we update this page and the date at the top.