Privacy Policy

Last updated: July 2026

Bulkdozer (“we”, “us”) is a tool for bulk-editing invoices and bills in Xero. This policy explains what data we handle, why, and the control you have over it. Questions? Email adam@yesthats3dprinted.com.

What we access from Xero

When you connect an organisation, you grant Bulkdozer access via Xero’s secure sign-in (OAuth). With that access we read the organisation’s name and type, and the invoices, bills, and contacts you choose to view; we write back only the specific changes you review and apply. We only request the permissions the app needs to do this.

What we store

  • Your account details from Xero (your name and email).
  • Your Xero access and refresh tokens, encrypted by our app (AES-256) before they are saved — never in plain text.
  • Your saved column layout, so the editor looks the same across devices.
  • “Snapshots” — a before/after record of the specific changes you apply, kept as a safety net so a mistake can be traced and recovered.

We do not keep a copy of your wider Xero data beyond what is described here, and we never sell your data or use it for advertising.

Who else processes it

To run the service we use a small number of providers: Xero (the source of the data, under your connection), our hosting provider (Vercel), and our database provider (Supabase). They process data only to host and run Bulkdozer.

Security

Your Xero tokens are encrypted by the app before storage, all traffic is over HTTPS, and only your own account can act on your connected organisations.

Your control and your rights

You’re in charge of your data at all times:

  • Disconnect an organisation from the Organisations screen — this revokes our access to that organisation at Xero.
  • Delete your account from the Organisations screen — this revokes every Xero connection and permanently erases your account, tokens, saved layout, and change history from our systems.

You can also remove Bulkdozer at any time from within Xero (Settings → Connected apps). To ask about the data we hold, email adam@yesthats3dprinted.com.

Cookies

We use a single essential cookie to keep you signed in. We don’t use advertising or tracking cookies.

Changes

If we change this policy we’ll update the date above. Continued use after a change means you accept the updated policy.

Terms of Service