Privacy Policy

This Privacy Policy explains how bloora collects, uses, shares, protects, and retains information when people use the bloora website, application, and related services.

When this policy says “we,” “our,” or “us,” it means bloora as the service and operator. When this policy says “you,” it means the person or organization using bloora.

bloora is built to help businesses manage field operations, events, team assignments, reports, client visibility, automations, and AI-assisted work from one workspace.

We collect account information such as name, email address, role, company membership, authentication information handled through Supabase, and optional profile details such as phone number or job title.

We collect company and workspace information such as company name, business contact details, brands, client contacts, team members, event details, locations, schedules, reports, media, documents, billing workflow records, feedback, automation settings, and operational notes.

We collect payment and subscription information through Stripe. bloora does not directly store full payment card numbers.

We collect usage and technical information needed to operate and protect the service, such as session data, security logs, automation logs, email delivery logs, rate-limit activity, device/browser information, and error information.

We may collect information you voluntarily provide through demo requests, privacy requests, feedback forms, support messages, or other communications.

We use information to provide bloora, create and manage accounts, operate company workspaces, schedule events, assign team members, collect reports, display client portals, send notifications, manage billing workflows, and support customer operations.

We use information to secure the service, prevent abuse, troubleshoot errors, improve reliability, respond to requests, and maintain records needed for business, security, billing, audit, or support purposes.

We use submitted operational data to power features selected by users, including automations, reports, analytics, AI-assisted summaries, AI quality checks, AI search, and email drafting.

We share information with service providers that help bloora operate, including infrastructure, database, authentication, email delivery, payments, AI processing, hosting, rate limiting, and address autocomplete providers when those services are configured.

Current subprocessors may include Supabase, Vercel, Stripe, Resend, OpenAI, Upstash, and Google Places or another address autocomplete provider if configured.

We may share information when required by law, to protect rights or safety, to prevent fraud or abuse, or in connection with a business transfer such as a merger, acquisition, or sale of assets.

bloora does not sell personal information.

bloora uses technical and organizational safeguards designed to protect information, including authentication, role-based access controls, tenant isolation, Row Level Security, server-side authorization checks, rate limiting, and secure handling of sensitive credentials.

No system can be guaranteed to be absolutely secure. You are responsible for keeping your account credentials safe and for using bloora in a way that protects your own business and customer information.

Depending on your location and relationship with bloora, you may have rights to request access to personal data, correction of inaccurate data, export of personal data, deletion or review of deletion options, or answers to privacy questions.

You can submit a privacy request at the privacy request page. Requests involving access, export, account deletion, or workspace deletion may require identity verification before bloora releases or changes information.

bloora will not release data or delete records solely because someone enters an email address into a form.

bloora retains information for as long as needed to provide the service, support customer operations, comply with legal or contractual obligations, resolve disputes, maintain security, prevent abuse, and keep appropriate business records.

Some records may need to be retained for billing, security, audit, dispute, contractual, or operational reasons even after an account is deactivated or a deletion request is submitted.

Where a specific retention period has not yet been defined, bloora reviews requests case by case and avoids deleting records automatically until the appropriate handling is determined.

bloora currently uses essential browser and session storage needed for authentication, session management, app functionality, saved drafts, pending invitations, and the progressive web app experience.

bloora does not currently use advertising cookies.

If optional analytics, marketing technologies, advertising pixels, or non-essential tracking tools are added later, this policy will be updated.

bloora includes optional AI-assisted features that may help draft reports, summarize ROI, review report quality, generate brand briefs, produce insights, create email drafts, and search operational records.

AI features use information already stored in bloora or supplied by users for the selected task. AI output may be inaccurate, incomplete, or require edits. Users should review AI output before relying on it or sharing it with clients.

AI-generated content is intended to support human review, not replace professional judgment or customer responsibility.

bloora is intended for business use. It is not directed to children and is not designed to knowingly collect personal information from children.

We may update this Privacy Policy as bloora changes. If we make material changes, we will update the effective date or provide notice as appropriate.

For privacy questions or requests, contact privacy@getbloora.com.