Privacy Policy

1. Overview

This Privacy Policy describes how we collect, use, and protect your personal information when you visit our website and use our services. By using our services, you agree to the collection and use of information in accordance with this policy.

Contact Information:
Maximilian Winter
Naugarder Strasse 35, 10409 Berlin
Email: contact@bloomboard.app

2. Information We Collect

2.1 Information You Provide Directly

When you interact with our services, we may collect:

• Contact Information: Name, email address, phone number
• Communication Data: Messages, inquiries, and correspondence you send us
• Payment Information: When you make a purchase, we collect payment details including your payment method details and associated security information. All payment information is securely processed and stored by our payment processor, Stripe. For details on how Stripe handles your data, please visit their privacy policy.

2.2 Automatically Collected Information

When you access or use our Services, we automatically collect certain information about your visit and device:

• Analytics Data: Page views, session duration, referral sources
• Log and Usage Data: Our servers automatically record diagnostic and performance information when you access our Services. This includes your IP address, browser type and settings, the pages you visit, timestamps of your activities, search queries, features you interact with, system activity, error reports, and hardware configuration details.
• Device Data: Information about the computer, phone, tablet, or other device you use to access our Services, such as device and application identification numbers, hardware model, operating system version, Internet service provider or mobile carrier, and system configuration.
• Location Data: We collect location information based on your device's location, which may be precise or approximate depending on your device settings. This is determined through GPS technology and your IP address. You can control location access through your device settings, though this may limit certain features of our Services.

Important: Our analytics solution is privacy-focused and does not use cookies. Visitors are identified through anonymized hashes that cannot track users across different days or websites.

2.3 Information We Do NOT Collect

• Sensitive personal information such as health data, racial or ethnic origin, political opinions, or religious beliefs
• Detailed tracking or behavioral profiling across websites
• Personal data beyond what's necessary to provide and improve our services

3. How We Use Your Information

We process your personal information for the following purposes:

• Service Delivery: Schedule and conduct meetings, respond to inquiries
• Communication: Send confirmations, updates, and relevant business communications
• Website Improvement: Analyze usage patterns to enhance user experience
• Legal Compliance: Meet legal obligations and protect our legitimate interests
• Security: Prevent fraud and ensure platform security

Legal Basis (GDPR):

• Contract performance (Art. 6(1)(b) GDPR)
• Legitimate interests (Art. 6(1)(f) GDPR)
• Consent where applicable (Art. 6(1)(a) GDPR)

4. Information Sharing and Disclosure

We do not sell, trade, or rent your personal information. We may share information only in these limited circumstances:

4.1 Third-Party Service Providers

We work with trusted third-party service providers who process data on our behalf to deliver and improve our Services. These providers have access to your information only to perform specific tasks and are obligated to protect it:

• Cloud Infrastructure: Vercel for website hosting and deployment, Render for backend server infrastructure
• Payment Processing: Stripe handles all payment transactions, invoicing, and billing operations
• Authentication Services: WorkOS and Google Auth provide secure user authentication and authorization management
• Analytics and Insights: Vercel Analytics and PostHog help us understand product usage and improve user experience
• Application Monitoring: Sentry and Grafana enable us to monitor system performance, detect errors, and maintain service reliability

4.2 Other Disclosures

• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In case of merger, acquisition, or sale of assets

5. Data Security and Retention

5.1 Security Measures

We implement appropriate technical and organizational measures to protect your data against unauthorized access, alteration, disclosure, or destruction.

5.2 Data Retention

• Contact Information: Retained until you request deletion or withdraw consent
• Meeting Data: Kept for the duration necessary to fulfill business purposes
• Analytics Data: Anonymized data may be retained for statistical purposes

6. Your Privacy Rights

Depending on your location, you may have the following rights:

6.1 GDPR Rights (EU Residents)

• Access: Request copies of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data ("right to be forgotten")
• Portability: Receive your data in a structured format
• Restriction: Limit how we process your data
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: Revoke consent for data processing

6.2 How to Exercise Your Rights

To exercise your privacy rights:

1. Email us at contact@bloomboard.app with your request
2. Submit a formal request including your name and specific request
3. Verify your identity to ensure data protection

We will respond to valid requests within 30 days (or as required by applicable law).

7. International Data Transfers

Your data may be processed in countries outside your residence. We ensure adequate protection through:

• Standard Contractual Clauses (SCCs)
• Adequacy decisions by relevant authorities
• Other appropriate safeguards as required by law

8. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated through:

• Website notifications
• Email updates (for registered users)
• Updated "last modified" date

9. Contact Us

For questions about this Privacy Policy or our data practices:

Email: contact@bloomboard.app
Address: Naugarder Strasse 35, 10409 Berlin

For EU residents, you also have the right to lodge a complaint with your local data protection authority.