Privacy Policy

Effective Date: June 2026

BulkheadOS collects the minimum information required to operate the website, respond to graph audit, operating graph pilot, and investor brief requests, and protect authenticated account surfaces.

What We Collect

When you request a 10-business-day graph audit, 30-day operating graph pilot, or investor brief, we collect:

• Work email - to respond to the request
• Company - to understand the business context
• Role - to route the conversation to the right owner
• Intent - graph audit, operating graph pilot, or investor brief
• Primary surface - the product area or surface to map first
• Optional note - any context you choose to provide
• Country code - inferred from your IP address for analytics (your IP is hashed and never stored in plain text)
• User agent - browser metadata for abuse prevention and reliability

How We Use It

We use this data to respond to your request, qualify fit, prepare follow-up, prevent abuse, and keep the service reliable. We do not sell, rent, or share your personal data with third parties.

Where We Store It

All data is stored in Cloudflare D1 databases located in EU data centres, subject to the Cloudflare Data Processing Addendum (https://www.cloudflare.com/cloudflare-customer-dpa/).

Your Rights

Under GDPR, you have the right to:

• Access your data
• Rectify inaccurate data
• Erase your data (right to be forgotten)
• Object to processing
• Port your data

To exercise any of these rights, email privacy@bulkheados.com.

Cookies

BulkheadOS does not use cookies for tracking. Authenticated account surfaces may use strictly necessary session cookies. We use no third-party analytics scripts.

Changes

We may update this policy. Material changes will be reflected on this page and, when appropriate, communicated to account holders or active contacts.

Contact

Data Controller: Ryan Winkler, Dublin, Ireland Email: privacy@bulkheados.com