Privacy Policy

Connected email accounts

BloomBoard lets you connect your own email account, Gmail or Google Workspace via Google, and Outlook or Microsoft 365 via Microsoft, so that messages you send to your clients through BloomBoard come from your own address, and their replies appear both in your inbox and in BloomBoard. Connecting is optional. If you do not connect an account, BloomBoard sends client email for you from a BloomBoard address and forwards replies to you.

What we access, and why

When you connect an account you authorise BloomBoard, through Google's or Microsoft's own sign-in, to:

• Send email as you. Used only for messages you or your team compose in BloomBoard, and for the documents you choose to send, such as proposals, invoices, and brief requests. BloomBoard never sends anything you did not initiate.
• Read email in your mailbox. Used only to bring your clients' replies into the matching BloomBoard conversation. We sync from the moment you connect, and only messages that belong to conversations BloomBoard knows about. We do not import your mailbox history, and we do not read unrelated mail.

We never see or store your email password. Connections use authorisation tokens issued by Google or Microsoft, which we store encrypted. Disconnecting your account in Settings deletes those tokens immediately, and you can also revoke BloomBoard's access at any time from your Google or Microsoft account security pages.

How this data is protected and used

Message content synced into BloomBoard is stored encrypted and is visible only to the members of your BloomBoard account. We use it solely to provide the features described above. We do not use it for advertising, we do not sell it, and we do not allow humans to read it except with your permission, for security and abuse investigation, or where the law requires. We do not use data obtained from your connected email account to develop, improve, or train generalised artificial intelligence or machine learning models.

BloomBoard's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Retention

See our Data retention page for how long email data is kept and what happens when you disconnect an account or delete your BloomBoard account.