Privacy Policy

We collect information you provide directly and data generated through your use of Bloome:

Information You Provide: • Account information (name, email, password via Clerk authentication) • Resume and professional documents you upload • Profile details (work history, skills, preferences, career goals) • Career intent and job search preferences • Links to professional profiles (LinkedIn, GitHub, portfolio)

Automatically Collected: • Device information (browser type, operating system) • Usage data (features used, pages visited, interaction patterns) • Log data (IP address, access times, error logs) • Cookies and similar tracking technologies

Information from Third Parties: • Job listing data from job aggregators (via RapidAPI) • Authentication data from Clerk • Payment information from our payment processor

We use your information to provide and improve our services:

Core Service Functions: • Generate personalized job matches for your Daily Drop • Create AI-powered resume optimizations and suggestions • Draft tailored cover letters and application materials • Power hands-free application automation • Process your job applications on your behalf

Service Improvement: • Train and improve our matching algorithms (using aggregated, anonymized data) • Analyze usage patterns to enhance user experience • Debug issues and maintain service quality • Develop new features and capabilities

Communications: • Send your daily job matches • Notify you about application status updates • Share important service announcements • Respond to your support requests

We do not use your personal data to train general-purpose AI models. Your resume content is used only for your personalized matching and drafting.

We integrate with trusted third-party services to provide our platform:

Authentication: • Clerk - Manages user authentication and account security Privacy Policy: https://clerk.com/privacy

AI Processing: • OpenAI / OpenRouter - Powers resume analysis, matching, and content generation Privacy Policy: https://openai.com/privacy

Job Data: • RapidAPI (ActiveJobs) - Provides job listing data Privacy Policy: https://rapidapi.com/privacy

Browser Automation: • Browserbase - Enables hands-free application submission Privacy Policy: https://browserbase.com/privacy

Email: • Resend - Delivers transactional emails and notifications Privacy Policy: https://resend.com/privacy

Infrastructure: • Railway - Hosts our backend services • Vercel - Hosts our frontend application • Supabase - Database hosting with encryption

These services process data according to their respective privacy policies and our data processing agreements.

We share your information only in these circumstances:

With Your Consent: • When you submit job applications through our platform • When you share your talent card publicly • When you explicitly authorize sharing

Service Providers: • Third-party services listed above, as necessary to operate our platform • All bound by data processing agreements

Legal Requirements: • When required by law, subpoena, or court order • To protect our rights, privacy, safety, or property • To investigate potential violations of our terms

Business Transfers: • In connection with a merger, acquisition, or sale of assets • You will be notified of any change in ownership

We Never: • Sell your personal information to data brokers • Share your resume with employers without your action • Use your data for advertising targeting

We retain your data for as long as needed to provide our services:

Active Accounts: • Profile and resume data: retained while account is active • Job match history: 90 days rolling window • Application records: 2 years for your reference • Usage analytics: 12 months, then aggregated

After Account Deletion: • Personal data: deleted within 30 days • Backups: purged within 90 days • Aggregated analytics: may be retained indefinitely (non-identifiable)

Legal Holds: • Data may be retained longer if required by law or legal proceedings

You have the following rights regarding your personal data:

Access & Portability: • Request a copy of your data in machine-readable format • Download your profile, resume, and application history • Available via Account Settings → Privacy → Export Data

Correction: • Update inaccurate or incomplete information • Edit your profile and preferences at any time

Deletion ("Right to be Forgotten"): • Request deletion of your account and associated data • Available via Account Settings → Privacy → Delete Account • Some data may be retained for legal compliance

Restriction & Objection: • Opt out of non-essential data processing • Unsubscribe from marketing communications • Disable specific features that process your data

Withdraw Consent: • Revoke consent for optional data processing • May affect availability of certain features

To exercise these rights, visit your Account Settings or contact legal@bloome.ai

We use cookies and similar technologies:

Essential Cookies: • Authentication and session management • Security features and fraud prevention • Required for the service to function

Analytics Cookies: • Understand how users interact with our platform • Improve user experience and service quality • Can be disabled in cookie preferences

How to Manage Cookies: • Browser settings: block or delete cookies • Cookie banner: select your preferences on first visit • Account settings: manage tracking preferences

We do not use cookies for third-party advertising.

We implement robust security measures to protect your data:

Technical Safeguards: • TLS 1.3 encryption for all data in transit • AES-256 encryption for data at rest • Regular security audits and penetration testing • Secure cloud infrastructure with SOC 2 compliance

Access Controls: • Role-based access for employees • Multi-factor authentication required • Regular access reviews and audits • Logging of all data access

Incident Response: • 24/7 security monitoring • Documented incident response procedures • User notification within 72 hours of confirmed breach

While we strive to protect your data, no method of transmission or storage is 100% secure.

Your data may be processed in countries outside your residence:

Processing Locations: • Primary servers located in the United States and European Union • Third-party services may process data in their respective locations

Safeguards for Transfers: • Standard Contractual Clauses (SCCs) with service providers • Data processing agreements with all third parties • Compliance with applicable data transfer regulations

For EU residents, we ensure adequate protection as required by GDPR.

Bloome is not intended for users under 18 years of age:

• •We do not knowingly collect data from children
• •If we discover data from a minor, we will delete it promptly
• •Parents/guardians may contact us to request deletion

If you believe we have collected data from a minor, please contact legal@bloome.ai immediately.

We may update this Privacy Policy periodically:

• •Material changes will be communicated via email
• •Non-material changes will be posted on this page
• •Your continued use after changes constitutes acceptance
• •Previous versions are available upon request

We encourage you to review this policy regularly.

For privacy-related questions or to exercise your rights:

Privacy & Legal: Email: legal@bloome.ai

General Support: Email: hello@bloome.ai

Mailing Address: Bloome AI Founded by Dean Shabi IČO: 21740330 Prague, Czech Republic

We aim to respond to all requests within 30 days.