Introduction

Bloomvite ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service to create invitations, collect RSVPs, and check guests in.

Information We Collect

We collect personal information when you create an account, including your name and email address. If you use OAuth authentication with Google or Microsoft, we receive basic profile information such as your name, email, profile picture, and unique identifier. Authentication tokens are stored securely and used only for account verification. We do not access Google Drive, Microsoft OneDrive, or other services beyond basic profile information unless explicitly authorized.

We automatically collect usage data and analytics including QR guest check-in analytics, device information (browser type, operating system), IP address and general location information, usage patterns and feature interactions, and performance and error logs.

For paid subscriptions, payment processing is handled by Stripe, Inc. We do not store your full credit card information on our servers. Stripe may share limited transaction data with us, including transaction IDs, payment status, last four digits of credit card numbers, billing address information, and subscription status.

How We Use Your Information

We use collected information to provide and maintain our service, process payments and manage subscriptions, authenticate users and prevent fraud, generate RSVP and check-in insights, communicate with you about your account and our services, improve our service and develop new features, and comply with legal obligations.

Information Sharing and Disclosure

We do not sell, trade, or otherwise transfer your personal information to third parties. We share data only with trusted service providers: Stripe for payment processing and subscription management, Google/Microsoft for OAuth authentication services, cloud hosting providers for data storage and service delivery, and analytics providers to improve service and monitor performance.

We may disclose your information if required by law or court order, or to protect our rights, property, or safety.

Data Security

We implement appropriate technical and organizational security measures to protect your personal information, including data encryption in transit and at rest, secure authentication protocols (OAuth 2.0), regular security reviews and timely updates, access controls and employee training, and secure payment processing through PCI-compliant providers.

Data Retention

We retain your personal information for as long as necessary to provide our services and comply with legal obligations. Account information is retained until account deletion or 3 years of inactivity. Event, invitation, and guest data is retained as long as your account is active. Analytics data is retained for up to 2 years for service improvement. Payment records are retained as required by tax and financial regulations.

Your Rights and Choices

Depending on your location, you may have rights regarding your personal information including the right to access (request a copy of your personal information), correction (correct inaccurate or incomplete information), erasure (request deletion of your personal information), portability (receive your data in a machine-readable format), restriction (restrict how we process your information), and objection (object to certain types of processing).

To exercise these rights, please contact us through our contact page.

Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience. For detailed information about our use of cookies, please see our Cookie Policy.

International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your information in accordance with applicable data protection laws.

Children's Privacy

Our Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you learn that a child has provided us with personal information, please contact us.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

Contact Us

If you have any questions about this Privacy Policy or our privacy practices, please contact us through our contact page.

GDPR Compliance: If you are a resident of the European Union, you have additional rights under the General Data Protection Regulation (GDPR). We are committed to complying with GDPR requirements and protecting your privacy rights.

Pick a look. Make it unmistakably yours.