Data Processing Addendum
When processing recipient lists uploaded by a user, the user generally acts as controller and Bulko as processor, following the user's instructions to provide the service.
Subject and Term
Processing covers list storage, campaign creation and sending, tracking selected events, receiving replies, abuse filtering, and support. Duration is limited to the service period and applicable retention periods.
Obligations
- Process data on the user's documented instructions and maintain confidentiality.
- Apply reasonable technical and organizational security measures.
- Use the listed subprocessors and provide notice of material changes.
- Provide reasonable assistance with data subject requests and incidents.
- Delete or return data after service termination, except where retention is required.
This public text describes current processing terms but does not replace an executed DPA for an organization. Contact [email protected] for a copy and review. Bulko party details will be added after operator registration.
Last updated: July 20, 2026. This material is not legal advice.