Privacy Policy
Effective date: 9 May 2026
1. Who We Are
BloomChat is operated by BloomChat Technologies. We are the data controller for personal data processed through the Service.
Data Protection Contact: contactbloomchat@gmail.com
2. Data We Collect
Account Data:
- Email address (for authentication and account recovery)
- Name and profile avatar
Platform Connection Data:
- OAuth access and refresh tokens (encrypted at rest using AES-256)
- Fanvue usernames and profile information
- Subscriber data from Fanvue (counts, engagement metrics, message history)
Content & AI Data:
- Content you create, schedule, or manage through the Service
- AI-generated message drafts, captions, and persistent fan memories
- Feature usage patterns, AI quotas, and diagnostic logs
3. How We Use Your Data
- Service delivery: Scheduling, publishing, and managing conversations on Fanvue.
- AI features: Generating message drafts, building fan memory profiles, and safety filtering.
- Security & Integrity: Detecting abuse, fraud, and unauthorised access.
- Communications: Support responses and critical service notifications.
4. Data Sharing & Third Parties
We share data only when strictly necessary to provide the Service. Content and messages are transmitted securely to Fanvue via their official APIs. Text prompts sent to AI providers are stripped of personal subscriber PII to guarantee data confidentiality. We never sell or rent your personal data to any third party.
5. Data Retention & Security
We retain your data for as long as your account is active. When you delete your account, tokens are immediately revoked and deleted, and account content is purged within 30 days. All OAuth tokens are encrypted at rest using AES-256, and all communications operate exclusively over secure HTTPS/TLS 1.2+ protocols.
6. Your Rights
You have the right to access, rectify, restrict, or request full erasure of your personal data at any time. To exercise your data rights or request account deletion, contact our privacy team at contactbloomchat@gmail.com.