Privacy Policy

Connected email accounts

BloomBoard lets you connect your own email account, Gmail or Google Workspace via Google, and Outlook or Microsoft 365 via Microsoft, so that messages you send to your clients through BloomBoard come from your own address, and their replies appear both in your inbox and in BloomBoard. Connecting is optional. If you do not connect an account, BloomBoard sends client email for you from a BloomBoard address and forwards replies to you.

What we access, and why

When you connect an account you authorise BloomBoard, through Google's or Microsoft's own sign-in, to:

• Send email as you. Used only for messages you or your team compose in BloomBoard, and for the documents you choose to send, such as proposals, invoices, and brief requests. BloomBoard never sends anything you did not initiate.
• Read email in your mailbox. Used only to bring your clients' replies into the matching BloomBoard conversation. We sync from the moment you connect, and only messages that belong to conversations BloomBoard knows about. We do not import your mailbox history, and we do not read unrelated mail.

We never see or store your email password. Connections use authorisation tokens issued by Google or Microsoft, which we store encrypted. Disconnecting your account in Settings deletes those tokens immediately, and you can also revoke BloomBoard's access at any time from your Google or Microsoft account security pages.

How this data is protected and used

Message content synced into BloomBoard is stored encrypted and is visible only to the members of your BloomBoard account. We use it solely to provide the features described above. We do not use it for advertising, we do not sell it, and we do not allow humans to read it except with your permission, for security and abuse investigation, or where the law requires. We do not use data obtained from your connected email account to develop, improve, or train generalised artificial intelligence or machine learning models.

BloomBoard's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Retention

See our Data retention page for how long email data is kept and what happens when you disconnect an account or delete your BloomBoard account.

Ask BloomBoard chats

Ask BloomBoard is the question chat on bloomboard.io. It answers questions about BloomBoard from our Help Center and this site.

What we keep

• The questions you type and the answers you get.
• The page you asked from and the country your visit came from.
• A short one-way code made from your network address, used only to spot abuse. We never keep the address itself.
• A random id your browser keeps in its local storage until you clear it, so the daily question limit counts one visitor across chats.
• If you send a message to our team from the chat, your email address and that message.

How we use it

We use chats to answer your questions and to improve the answers. Our team can read them, and a message you send to our team from the chat goes with the chat. We never sell chats and we do not use them for advertising.

How long we keep it

Chats are deleted 90 days after they start.

Checking that you are a person

When a chat starts, Cloudflare Turnstile checks that the visitor is a person and not an automated program. To do this, Cloudflare processes technical information about your browser and device. See Cloudflare's Turnstile privacy addendum.