BloomLine Privacy Policy

BloomLine is an AI phone receptionist for florists and event vendors. It answers calls a business misses, captures the caller's request, and can follow up by email. This policy explains what data BloomLine collects, how it is used, and the choices you have.

When a shop owner connects their Google mailbox, BloomLine requests the gmail.sendscope and the owner's email address. We use this access for a single purpose: to send owner-authored, transactional emails - order confirmations, quotes, and call summaries - from the owner's own address, so their customers recognize the sender.

We never read, list, search, modify, label, or delete any message in the connected mailbox.

BloomLine's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not transfer or sell this data, and we do not use it for advertising or to train generalized AI/ML models.

OAuth refresh tokens are encrypted at rest and used only to mint a short-lived access token at the moment an email is sent. Data is stored with our infrastructure providers (Supabase, Vercel) under their security controls.