Privacy Policy

Last updated: April 2026

Bloom exists because we believe professionals deserve to be seen for who they truly are. That belief extends to how we treat your data. This policy is written in plain English because we think you deserve to actually understand it.

What We Collect

Your Canvas answers. When you answer our questions, we store your responses to build and maintain your Canvas. These are the most personal data we hold, and we treat them accordingly.

Your email address. We need this to identify your account, send you your Canvas, and communicate with you about Bloom.

Basic usage data. We use Vercel Analytics to understand how people use Bloom — page views, referral sources, general usage patterns. This data is aggregated and does not personally identify you.

Weekly Pulse entries. If you use the Weekly Pulse, your freeform entries are stored to help your Canvas grow over time.

Video and audio (when available). If you record a video Canvas or voice note, that media is stored securely and is private by default. You control who can access it.

What We Do NOT Collect

• We do not collect your resume. Ever.
• We do not scrape your LinkedIn profile.
• We do not track your activity outside of Bloom.
• We do not sell your data to advertisers. Full stop.
• We do not use your Canvas content to train AI models.

How We Use Your Data

Your data serves one purpose: making your Canvas the most authentic representation of who you are at work.

Specifically, we use your data to:

• Build and display your Canvas
• Generate AI-narrated versions of your Canvas (only when you choose to view them)
• Surface insights from your Weekly Pulse entries (only with your explicit permission before adding to your Canvas)
• Send you relevant communications about your Canvas and Bloom

Who Sees Your Data

Your Canvas is yours. The North Star section is private by default. You decide what's visible and to whom.

We share data with these service providers to operate Bloom:

• Vercel — hosts our website and provides analytics
• Formspree — processes form submissions during early access
• EmailJS — sends automated emails
• ImprovMX — forwards emails to canvas@getbloom.ink

We do not sell, rent, or trade your personal data. We do not share your Canvas content with employers without your explicit consent.

Your Rights

You have the right to:

• Access your data — see everything we store about you
• Correct your data — edit your Canvas answers at any time
• Delete your data — request complete deletion of your account and all associated data
• Export your data — download your Canvas and all associated content
• Withdraw consent — opt out of any data processing at any time

To exercise any of these rights, email canvas@getbloom.ink.

Data Security

Your Canvas contains things you may never have said out loud professionally. We take that seriously. We use encryption in transit (HTTPS enforced), store data with access controls, and limit access to what's necessary to operate the service.

Data Retention

We retain your data for as long as your account is active. If you delete your account, we delete your data within 30 days. Some aggregated, non-identifying usage data may be retained for analytics purposes.

For Users in the European Union

If you're in the EU, you have additional rights under GDPR including the right to data portability and the right to lodge a complaint with a supervisory authority. Our legal basis for processing your data is your consent (which you provide when creating your Canvas) and our legitimate interest in operating and improving Bloom.

For Users in California

If you're in California, you have additional rights under CCPA including the right to know what personal information we collect and the right to opt out of any sale of personal information. We do not sell personal information.

Changes to This Policy

If we make meaningful changes to this policy, we'll notify you by email before the changes take effect. We won't surprise you.

Questions about privacy? Email canvas@getbloom.ink. We actually read them.