Privacy policy

This privacy policy has been compiled to better serve those who are concerned with how their 'Personally Identifiable Information' (PII) is being used online. PII is information that can be used on its own or with other information to identify, contact, or locate a single person, or to identify an individual in context. Please read our privacy policy carefully to get a clear understanding of how we collect, use, protect or otherwise handle your Personally Identifiable Information in accordance with our website. The company BLOOMSCORP SOFTWARE SOLUTIONS, LLP shall be referred to as BLOOMSCORP within the Website Privacy Policy.

What personal information do we collect from the people that visit our blog or website?

We do not automatically collect any information from visitors of our site unless the visitors have intentionally provided the information, if any.

When do we collect information?

We collect information from you when you send us an email, fill out a form, open a Support Ticket or enter information on our site or provide us with feedback on our products or services.

How do we use your information?

We may use the information we collect from you when you contact us through email or phone, make a purchase, respond to a survey or marketing communication, surf the website, or use certain other site features in the following ways:

To personalize your experience and to allow us to deliver the type of content and product offerings in which you are most interested.
To improve our website in order to better serve you.
To allow us to better service you in responding to your customer service requests.
To administer a contest, promotion, survey or other site feature.
To ask for ratings and reviews of services or products
To follow up with them after correspondence (live chat, email or phone inquiries)

How do we protect your information?

We do not share any of your Personally Identifiable Information, like emails, phone number, personal details, purchase details with any Third-Party unless we personally ask for your permission via email, phone or any other media and you confirm. We only provide articles and information on our website. We never ask for credit card details. We use regular Malware Scanning. Your personal information is contained behind secured networks and is only accessible by a limited number of persons who have special access rights to such systems, and are required to keep the information confidential. In addition, all sensitive information you supply is encrypted via Secure Socket Layer (SSL) technology. We implement a variety of security measures when a user enters, submits, or accesses their information to maintain the safety of your personal information. All transactions, if any, are processed through a gateway provider and are not stored or processed on our servers.

Do we use 'cookies'?

We DO NOT use cookies on our website. You can choose to have your computer warn you each time a cookie is being sent, or you can choose to turn off all cookies. You do this through your browser settings. Since browser is a little different, look at your browser's Help Menu to learn the correct way to modify your cookies.

Third-party disclosure

We do not sell, trade, or otherwise transfer to outside parties your Personally Identifiable Information unless you have explicitly and intentionally given us permission to do so by using or interacting with any of the Third-Party feature / software / library / API that we may use on our website.

Third-party links

Occasionally, at our discretion, we may include or offer third-party products or services on our website. These third-party sites have separate and independent privacy policies. We therefore have no responsibility or liability for the content and activities of these linked sites. Nonetheless, we seek to protect the integrity of our site and welcome any feedback about these sites.

Google

Google's advertising requirements can be summed up by Google's Advertising Principles. They are put in place to provide a positive experience for users.
Google AdWords Policies
We have NOT ENABLED Google AdSense on our site but we may do so in the future.

Bloomscorp OPS and Google user data

Bloomscorp OPS (ops.bloomscorp.com) is BLOOMSCORP's internal operations tool. It is used only by BLOOMSCORP staff. A staff member can choose to connect their own work Google account to Bloomscorp OPS. This section explains what Bloomscorp OPS reads from that Google account, what it keeps, and how to stop it. Last updated: 23 October 2026.

What Bloomscorp OPS accesses, and why

Your basic profile (name, email address, profile photo and your organisation's domain): to know which Google account was connected and to allow only BLOOMSCORP work accounts.
Google Calendar (your calendars and their events, and your free / busy times): to show you your own agenda inside Bloomscorp OPS; to show colleagues who are scheduling a meeting with you when you are busy or free (times only, never what the event is); to create, update and cancel the meetings you schedule from Bloomscorp OPS, with their invitations; and to suggest that you link a meeting with a client to the right project.
Google Meet: to create Meet links for the meetings you start or schedule from Bloomscorp OPS.
Gmail — only if you switch on Mail in Bloomscorp OPS, after reading a notice there: to show you your own mailbox inside Bloomscorp OPS and let you work in it — read, search, reply, write, save drafts, archive, label, star, mark as read or unread, and move to Trash — sending from your own address or the send-as addresses you have set up in Gmail, with your Gmail signature; and, for emails exchanged with BLOOMSCORP's clients and leads only, to note who emailed whom and when (never the subject or the content), so that the team working with that client can see when the client is waiting for a reply; and, only when you choose to, to save an attachment or a link from an email into a project's files or onto a task in Bloomscorp OPS. Bloomscorp OPS cannot permanently delete email.

Bloomscorp OPS asks for each kind of access only when you switch on the feature that needs it. It does not access Google Drive or any other Google service. Before it asks for any further access, this policy will be updated first.

What Bloomscorp OPS keeps

A secure, encrypted token that lets Bloomscorp OPS act for you within the access you granted. It never leaves our servers.
The meetings you create from Bloomscorp OPS, and the client meetings you choose to link to a project (title, time, guests and the Meet link).
Pending suggestions to link client meetings, which only you can see. They are deleted 30 days after the meeting.
If you use Mail: for emails exchanged with known clients and leads only, the addresses of the people involved, the date and time, whether the email was sent or received, and which emails belong to the same conversation — never the subject, the content or the attachments. These records are kept for 24 months. When you switch Mail off, they are deleted unless you choose to keep them. (This applies to these records; files you choose to save are covered below.)
If you use Mail: files and links you choose to save from an email — nothing is saved unless you press Save. A saved file or link becomes part of that project's files (or that task's attachments) in Bloomscorp OPS, together with where it came from: the sender, the To and Cc addresses (never Bcc), the subject and the date of the email. Before a file is saved, Bloomscorp OPS checks its size, its type and its actual contents, refuses files that carry macros, and checks ZIP archives for unsafe contents. Saved files and links are kept until someone deletes them from the project, like any other project file.
If you use Mail: a record of the actions you take from Bloomscorp OPS (for example, sending, replying, archiving or moving an email to Trash), with the recipients and the subject, in your activity history. Reading and searching are not recorded.

Your agenda and your free / busy times are read from Google when they are shown and are not stored. Calendar events that do not involve a known client are never stored. Your emails are read from Gmail when you open them in Bloomscorp OPS and are not stored, except for the files and links you choose to save as described above: lists of emails may be held on our servers for up to 60 seconds so that going back is fast, and files you attach to an email you write are held only until it is sent or saved as a Gmail draft. Emails that do not involve a known client or lead leave no record at all.

Who can see it

Your agenda is visible only to you. Colleagues scheduling a meeting with you see only busy / free blocks. Meetings that you create or link to a project are visible to BLOOMSCORP staff who work on that project, unless you mark them private. Your mailbox is visible only to you — no colleague, manager or administrator can see your emails through Bloomscorp OPS. The client email records described above (who emailed whom and when) are visible to BLOOMSCORP staff who work on that client's project, and those involving billing contacts only to staff with access to accounts; reply times per staff member are visible only to BLOOMSCORP's primary stakeholders. Files and links saved from an email, with their sender, recipients, subject and date, are visible to the BLOOMSCORP staff who can see that project's files.

Sharing, advertising and AI

We do not sell Google user data or transfer it to anyone, except to the hosting providers that run Bloomscorp OPS for us, under confidentiality. We do not use it for advertising. We do not use it to develop, improve or train generalised or non-personalised AI or machine-learning models. BLOOMSCORP staff do not read your Google data unless you ask us to (for support), it is needed for security or to comply with the law, or it has been aggregated and anonymised for internal operations.

Bloomscorp OPS's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Security

Access tokens are encrypted at rest with authenticated encryption (AES-256-GCM), all traffic uses encrypted connections (TLS), and access to our systems is limited to authorised BLOOMSCORP personnel. Emails are displayed in a protected frame that does not run any code contained in them, and images that could track you are not loaded unless you ask for them.

Disconnecting and deleting your data

You can switch Mail off at any time in Bloomscorp OPS under My profile → Google; Bloomscorp OPS stops reading your Gmail straight away. You can disconnect your Google account at any time in the same place. Disconnecting revokes Bloomscorp OPS's access at Google straight away and stops all reading. You can also remove access from your Google account at myaccount.google.com/permissions. Meetings you created for a project, and files and links you saved from an email into a project, remain as company records. To ask for any other data to be deleted, email hello@bloomscorp.com and we will do so within 30 days.

Online Privacy Protection Act

The Online Privacy Protection Act requires commercial websites and online services to post a privacy policy. The law's reach stretches well beyond to require any person or company in the world that operates websites collecting Personally Identifiable Information from consumers to post a conspicuous privacy policy on its website stating exactly the information being collected and those individuals or companies with whom it is being shared.

According to the Online Privacy Protection Act, we agree to the following:

Users can visit our site anonymously.
Once this privacy policy is created, we will add a link to it on our home page or as a minimum, on the first significant page after entering our website.
Our Privacy Policy link includes the word 'Privacy' and can easily be found on the page specified above.

You will be notified of any Privacy Policy changes on our Privacy Policy Page.
You can change your personal information that you have shared with us by sending us an email directly to adrita@bloomscorp.com

How does our site handle Do Not Track signals?

We honor the user privacy choices and honor the DO NOT TRACK Signals when a Do Not Track (DNT) browser mechanism is in place. We do not directly use any such technology on our website that may try to track our visitors.

Does our site allow third-party behavioral tracking?

It's also important to note that we DO NOT allow third-party behavioral tracking.

COPPA (Children Online Privacy Protection Act)

When it comes to the collection of personal information from children under the age of 13 years old, the Children's Online Privacy Protection Act (COPPA) puts parents in control. We do not directly and specifically market to children under the age of 13 years old.

Fair Information Practices

The Fair Information Practices Principles form the backbone of privacy law and the concepts they include have played a significant role in the development of data protection laws around the globe. Understanding the Fair Information Practice Principles and how they should be implemented is critical to comply with the various privacy laws that protect personal information.

In order to be in line with Fair Information Practices we will take the following responsive action, should a data breach occur:

We will notify you via email within 30 business days of our knowledge about the incident if we have your email information.
We will notify the users via in-site notification (if and when available) within 7 business days.
Please note that in both cases, we may, in some situations, withold the information from the users for more than 30 days (but less than 90 days), until the matter is resolved, due to other security issues, if any. But we assure that we will eventually let our users know about the complete incident along with the reason for delay.
We also agree to the Individual Redress Principle which requires that individuals have the right to legally pursue enforceable rights against data collectors and processors who fail to adhere to the law. This principle requires not only that individuals have enforceable rights against data users, but also that individuals have recourse to courts or government agencies to investigate and/or prosecute non-compliance by data processors.