Effective date: April 13, 2026 · Last updated: April 13, 2026
Bullwhip, Inc. (doing business as Bullwhip AI, and referred to in this policy as “Bullwhip,” “we,” “us,” or “our”) operates the website and application at bullwhip.so. This policy explains what personal information we collect, how we use it, and what rights you have — in clear language, because we think that's how it should be done.
We handle real operational data for real businesses. Your SOPs, your verification records — that's sensitive stuff, and we treat it that way.
This policy complies with applicable U.S. federal and state privacy laws.
Bullwhip, Inc.
Seattle, Washington, United States
Privacy inquiries: privacy@bullwhip.so
Bullwhip, Inc. is a U.S. company serving U.S. customers. We do not direct our services toward individuals outside the United States. We do not collect or process consumer health data.
If we begin directing services toward individuals outside the United States, we will update this policy before doing so.
We do not request or intentionally collect sensitive personal information, including biometric identifiers, precise geolocation, or data revealing racial or ethnic origin, religious beliefs, or sexual orientation.
Our photo verification feature analyzes images of fulfillment work — packaging, labeling, and shipment preparation — against your documented standards. It does not capture, extract, store, or analyze biometric identifiers. If a photo incidentally contains a person's likeness, we do not use that image to identify, profile, or create a biometric template of any individual.
Content you upload may incidentally contain other sensitive information (for example, visible name badges or document metadata). Where this occurs, we process that content solely to provide the service.
When you upload SOPs or submit photos for verification, we transmit that content to our AI processing provider via API. Your content is processed in real time and returned to our application.
Under our AI provider's current terms and technical configuration, your content is not used to train AI models and is not retained beyond the duration of the processing request. If this changes materially, we will update this policy before the change takes effect.
Uploaded documents and generated responses are stored in our database infrastructure and isolated to your organization using row-level security policies.
Bullwhip AI uses artificial intelligence to interpret SOPs, answer questions, translate content, and compare fulfillment photos against your documented standards. Our AI generates informational outputs for review by your authorized team members. It does not autonomously make employment, financial, or legal decisions about individuals.
Every organization's data is logically isolated at the database level using row-level security policies. Your SOPs, usage data, and verification records are isolated from other customers' data.
We use personal information to provide and operate the Bullwhip AI service, process your SOPs and generate AI-powered responses, communicate with you about your account, operate and improve our website and application, maintain the security of our systems, and comply with legal obligations.
We do not use your personal information for any purpose materially different from what is described here without providing you with notice.
We do not sell your personal information. We do not use your uploaded content to train AI models. We do not share your content or account information with other customers or third parties for their own commercial purposes.
Our analytics provider uses cookies and pseudonymous identifiers to measure website traffic. Under some state privacy laws, this may constitute “sharing” of personal information. You can opt out by:
We honor Global Privacy Control signals as a valid opt-out request under applicable state law.
We use the following categories of service providers who process personal information on our behalf under their respective terms of service:
A current list of named sub-processors is available on request at privacy@bullwhip.so. We may update our service providers from time to time.
Strictly necessary cookies. Session cookies that maintain your authenticated state. Required for the service to function.
Analytics cookies. Our analytics provider sets cookies to distinguish unique visitors and measure site usage. You may manage these through your browser settings, GPC signals, or the Google Analytics Opt-out Add-on. Disabling analytics cookies will not affect your ability to use the application.
Depending on where you live, applicable state privacy law may give you the following rights:
Right to know. You can request the categories and specific pieces of personal information we have collected about you.
Right to delete. You can request that we delete the personal information we have collected from you, subject to certain legal exceptions.
Right to correct. You can request that we correct inaccurate personal information.
Right to opt out of sharing. You may opt out using the methods described in this policy.
Right to non-discrimination. We will not discriminate against you for exercising your privacy rights.
To exercise your rights, email privacy@bullwhip.so. We will verify your identity and respond within 45 days. If we decline a request, we will explain why and provide information about how to appeal, where applicable. We honor Global Privacy Control signals as a valid opt-out under applicable law.
No method of electronic transmission or storage is completely secure. We implement reasonable safeguards but cannot guarantee absolute security. If you believe your account has been compromised, contact us at privacy@bullwhip.so.
If we confirm a security breach involving unauthorized access to personal information that is reasonably likely to cause harm, we will notify affected users and any required regulatory authorities as required by applicable law.
If you visit our website from outside the United States, data collected through analytics and server logs will be transferred to and processed in the United States.
We retain personal information only as long as reasonably necessary to fulfill the purposes described in this policy. Specific retention guidance is listed in Section 3. Residual copies may persist in encrypted backups for a limited period, consistent with our backup rotation schedule.
To request deletion, email privacy@bullwhip.so.
Our service is not directed at children under 16. We do not knowingly collect personal information from consumers under 16. If you believe we have inadvertently collected information from a child, contact us at privacy@bullwhip.so.
We may update this policy from time to time. When we make material changes, we will update the “Last updated” date and notify affected users by email before the changes take effect. The current version will always be available at bullwhip.so/privacy.
Any disputes arising from this policy are governed by the laws of the State of Washington, United States. Nothing in this section limits your rights under applicable state consumer privacy laws.
Bullwhip, Inc.
Seattle, Washington, United States
privacy@bullwhip.so
We aim to respond to all privacy inquiries within 10 business days, and to formal rights requests within the timeframes required by applicable law.