Privacy Policy
BloomSocial AI, a product of TAMPulse Technologies Private Limited values trust, transparency, and security. This Privacy Policy describes how we collect, use, disclose, and protect personal data when you access or use BloomSocial websites, applications, and services.
This policy is designed to support global privacy obligations and enterprise security requirements, including GDPR, UK GDPR, CCPA CPRA, PIPEDA, and SOC 2 Trust Services Criteria.
1. Company Information
Legal entity: BloomSocial Inc.
Jurisdiction: United States
Website: https://bloomsocial.ai
Contact: privacy@bloomsocial.ai
BloomSocial acts as:
- Data Controller for website visitors and prospects
- Data Processor for customer data processed on behalf of customers using the platform
2. Data We Collect
2.1 Customer and Account Data
- Name, email, role, company details
- Authentication credentials
- Billing and subscription information
- Support communications
2.2 Platform and Usage Data
- Log files and usage metrics
- Device and browser information
- IP address and approximate location
- Feature usage and interaction data
2.3 Connected Account Data
If you connect third party platforms such as social networks or analytics tools, BloomSocial may process:
- Account identifiers
- Authorized content and metadata
- IP address and approximate location
- Engagement and performance signals
BloomSocial processes connected account data only as instructed by the customer.
3. Purpose of Processing
BloomSocial processes personal data to:
- Deliver and operate the BloomSocial platform
- Enable AI powered campaign planning, publishing, and analytics
- Provide customer support and technical assistance
- Maintain security, auditability, and service reliability
- Improve platform performance and features
- Meet legal and regulatory obligations
BloomSocial does not use customer content to train public or third party AI models.
4. Legal Basis for Processing
For EEA and UK users, BloomSocial relies on:
- Contractual necessity
- Legitimate business interests
- Legal compliance
- Consent where required
5. Data Security and SOC 2 Controls
BloomSocial maintains a security program aligned with SOC 2 Trust Services Criteria covering security, availability, and confidentiality.
Security measures include:
- Role based access control and least privilege enforcement
- Encryption of data in transit and at rest where applicable
- Secure infrastructure and vendor risk management
- Logging, monitoring, and incident response procedures
- Employee security awareness and access reviews
BloomSocial undergoes regular internal security assessments and maintains documented policies and controls.
6. Data Retention
BloomSocial retains personal data only for as long as necessary to fulfill contractual and legal obligations. Retention schedules are reviewed periodically. Upon termination of services, customer data is deleted or returned per contractual terms.
7. Subprocessors and Third Parties
BloomSocial may engage vetted subprocessors to support service delivery, such as:
- Cloud infrastructure providers
- Payment processors
- Analytics and monitoring tools
- Customer support platforms
All subprocessors are bound by confidentiality and data protection obligations consistent with this policy.
A list of subprocessors is available upon request.
8. International Data Transfers
Where personal data is transferred internationally, BloomSocial applies appropriate safeguards, including standard contractual clauses or equivalent mechanisms.
9. Privacy Rights
Users may exercise rights to access, correct, delete, restrict, or port their data, subject to applicable law. Requests can be submitted to privacy@bloomsocial.ai.
10. Incident Response
BloomSocial maintains documented incident response procedures. In the event of a confirmed data breach affecting customer data, BloomSocial will notify affected customers without undue delay in accordance with applicable law and contractual commitments.
11. Updates
BloomSocial may update this policy periodically. Material changes will be communicated through appropriate channels.