Privacy

We collect as little as we can, we never sell it, and you can ask us to delete it anytime.

This policy covers thaliabloom.com, the services Bloom Web Services ("Bloom", "we") provides, and the apps we run. Thalia, who answers most messages, is an AI. A person, Heathrow, approves anything that matters.

What we collect

• What you send us. When you use a form, email us or book a call, we get your email address, your message and anything else you choose to include, like your name or business. Please don't send passwords or sensitive personal details.
• Visit counts. Our pages load a tiny image from our own server so we can count visits. It records the page, the site that linked you, any campaign tag in the link, your rough device type and your country. It sets no cookies and stores nothing in your browser. Your internet address is used only to tell our own visits apart from yours and is never saved. If your browser sends Do Not Track or Global Privacy Control, we don't record the visit at all.
• Client work. If you hire us, we use the files, accounts and information you share only to do the work you asked for.
• Payments. Our payment processor (Stripe) handles card details. We never see or store your full card number.

We don't use advertising trackers, we don't build ad profiles, and we don't sell or "share" personal information for advertising.

How we use it

• To reply to you, run calls, and do and support the work you asked for.
• To understand which pages help people, using the visit counts above.
• To keep our services safe, like spotting spam and bots.
• To meet legal and tax obligations.

We email you only about your request or work with us. If we ever send anything else, every message lets you opt out, and we honor that right away.

AI and the tools we use

We use AI models (such as Anthropic's Claude) to read and draft replies and to do client work. Your information goes to these providers only to carry out your request, and we keep model-training settings turned off wherever a provider offers that choice. A person reviews anything that goes out in our name or affects your business.

Other providers that help us run Bloom: Cloudflare (website hosting and security), Resend (email delivery), Google (email, documents and calendar), Cal.com (booking calls) and Stripe (payments). Each one gets only what it needs for its job.

Google user data

Some of our apps, like our calendar, can connect to a Google account when its owner signs in and agrees. We use that Google data only to show and manage that person's own calendar inside the app. We don't sell it, use it for ads, or let people read it except to keep the app secure, fix a problem the owner reports, or follow the law. We don't use it to train AI models. Our use of information received from Google APIs follows the Google API Services User Data Policy, including the Limited Use requirements. You can disconnect anytime at myaccount.google.com/permissions.

How long we keep it

Messages and request details: as long as we're talking or working together, then up to two years so we have context if you come back. Visit counts: kept as totals. Payment and tax records: as long as the law requires. Ask us and we'll delete your information sooner.

Your choices and rights

Wherever you live, you can ask us to show you, correct, delete or send you a copy of your personal information, or to stop using it for anything but your request. Email support@thaliabloom.com and we'll answer within 30 days. Someone you authorize can ask for you. We won't treat you differently for asking. If we turn down a request, you can reply to appeal it, and we'll explain our answer.

Security

We use encrypted connections, private networks for our own systems, and the fewest people and tools possible with access. No system is perfect. If something ever goes wrong with your information, we'll tell you quickly and plainly.

Children

Our services are for businesses and adults. We don't knowingly collect information from children under 13. If you think a child has sent us something, tell us and we'll delete it.

Changes

If we change this policy, we'll update the date below. If a change matters for information we already have, we'll tell you before it applies.

Updated October 26, 2026.