Privacy policy

Bloow ("we", "us") operates the SaaS product available at bloow.app. For privacy questions or requests, contact privacy@bloow.app.

When you use Bloow on behalf of a company, that company is the controller of workspace data. Bloow acts as a processor for customer content stored in your workspace, as described in your agreement with us.

Account data: email address, name, avatar, authentication identifiers, and workspace membership.

Product data you provide: projects, roadmaps, execution cycles, metrics configuration, integration settings, competitive intelligence inputs, tracking/SDK events you send, and team invitations.

Usage and technical data: log events, device/browser metadata, IP address (short retention), and product analytics when enabled.

Billing data: plan, subscription status, and billing identifiers processed by Stripe. We do not store full payment card numbers on our servers.

Marketing site: email if you join the newsletter, and cookie preferences on the public site.

We process data to provide and secure the service, authenticate users, sync integrations you connect, operate billing, send transactional emails, improve reliability, and comply with law.

We do not use your workspace content to train third-party AI models. Core analytics in Bloow are rules-based — not LLM-based.

We use trusted infrastructure providers to run Bloow, including Supabase (database and authentication), Vercel (hosting and web analytics), Stripe (payments), Resend (transactional email), and PostHog (in-product analytics when configured). They process data only on our instructions and under appropriate agreements.

We may disclose data if required by law or to protect rights, safety, and integrity of the service.

We keep account and workspace data while your account is active and as needed to provide the service. After cancellation, data is deleted or anonymized within a reasonable period unless law requires longer retention.

Backups may persist for a limited time before rotation. Billing records may be kept for statutory accounting periods.

Depending on your location, you may have rights to access, rectify, erase, restrict, or port your personal data, and to object to certain processing. You may also lodge a complaint with your local data protection authority.

To exercise your rights, email privacy@bloow.app from the address linked to your account. We may need to verify your identity before responding.

We apply technical and organizational measures including encryption in transit, row-level security in Postgres, role-based access, and server-side authorization checks. No method of transmission or storage is 100% secure; we work continuously to reduce risk.

We use essential cookies for authentication and optional analytics on the public marketing site. Details and controls are in our Cookie policy.

Your data may be processed in the EU and, where our providers operate elsewhere, with appropriate safeguards such as Standard Contractual Clauses or equivalent mechanisms required by applicable law.

Bloow is a business product not directed at children under 16. We do not knowingly collect personal data from children. Contact us if you believe a child has provided data and we will delete it.

We may update this policy when our practices or legal requirements change. We will post the new version on this page and update the date above. Material changes may be notified by email or in-app notice where appropriate.

privacy@bloow.app

For general support: support@bloow.app