Privacy policy

Information used in Bloom

• Account information: your name, email address, account role, sign-in information and, when supplied by a connected Google account, profile picture.
• Workspace records: information you enter or import about clients, household members and recruits. Depending on what you choose to record, this may include contact details, dates of birth, health and medication notes, financial and coverage information, appointment details, documents, communication history and follow-up notes.
• Connection information: authorization tokens and settings needed for features you connect, including Google Calendar and Quo.
• Technical information: session cookies, browser-stored preferences and recovery drafts, and request or error information processed by the services that host and secure Bloom.

How information is used

Bloom uses information to authenticate users, keep workspace records, organize follow-ups and recruiting, save appointments, operate connected communication features, maintain account preferences, recover unsaved work and troubleshoot problems. Users are responsible for having permission to enter, import and use information about other people.

Google account and Calendar data

When you connect Google, Bloom requests your basic account profile and permission to read and create calendar events. Profile information helps identify your connected account. Calendar access supports two workflows:

• Recruiting imports: when you request an import, Bloom searches your primary calendar within your selected date range for InsuraTec interviews. It reads booking details such as the candidate’s name, phone, email, location, licensing answer, interview time and booking links. You can review and edit the details before selected records are saved in Bloom.
• Appointment creation: when you use Bloom’s Google Calendar appointment feature, Bloom sends the appointment title, date, time and relevant client name and contact details to your connected calendar.

Selected recruit details and interview references become part of your saved Bloom workspace. Connection tokens are used to authorize Google requests. Bloom does not sell Google user data, use it for advertising, or use it to train general-purpose AI models. Google API data is handled under the Google API Services User Data Policy, including its Limited Use requirements.

You can revoke Bloom’s Google access from your Google Account’s connections settings. Revoking access stops future authorized Google requests; it does not automatically delete records you previously imported into Bloom. Those records can be removed in Bloom or included in a deletion request.

Service providers and sharing

Bloom uses Vercel for application hosting and Supabase for authentication, account storage and related infrastructure. Google and Quo process information when you use their connected features. Information is shared with these providers as needed to operate those features, with recipients you choose through those features, or when legally required. Each provider also maintains its own privacy terms. Bloom does not sell workspace records or share them for third-party advertising.

Access and security

Workspace access requires an authorized account. Bloom uses sign-in, multi-factor authentication and account-level access controls for private records. Authorized administrative and service-provider access may be needed to operate the application or respond to support and legal requests. No online service can promise complete protection against every security risk.

Cookies and browser storage support sessions, preferences and recovery of unsaved work. Exported backups and downloaded documents are under your control after download; protect them and use a trusted device for sensitive records.

Retention, corrections and deletion

Saved workspace information is retained to support your use of Bloom until it is removed through available controls or by the operator. Provider backups and necessary security records may remain subject to the providers’ retention and deletion processes. Revoking a third-party connection or signing out is different from requesting deletion.

You can edit records using Bloom’s available controls and export a workspace backup from Settings → Privacy. For an account-access, correction or deletion request, email insurance.rallen@gmail.com with enough detail to identify the account or record. Identity and authority to make the request may need to be verified. Avoid sending sensitive health or financial details in an initial email.

Updates and contact

This page will be updated when Bloom’s data practices change. The effective date appears above. For questions about this policy, contact insurance.rallen@gmail.com. You can also review what Bloom does and the terms of use.