Privacy Policy
Bloomday · Effective 9 October 2026 · Last updated 9 October 2026
This policy tells you what personal information Bloomday collects, why we collect it, who we share it with, how long we keep it, and what rights you have. It applies to bloomday.io and the Bloomday service.
Bloomday Technologies ("Bloomday", "we", "us") is a business name registered in Australia. The business is operated by a sole trader in Sydney. We are responsible for your personal information. Contact: bart@bloomday.io.
We do not sell your personal information. We do not use advertising cookies. We do not use data from TikTok or other connected platforms for advertising.
1. Information we collect
| Category | What it includes | Why we use it |
|---|---|---|
| Account | Name, email address, sign-in records | To create and secure your account, and to send service emails |
| Business profile | Business name, website, products, selling points, brand preferences | To plan and make your videos |
| Materials you upload | Photos, footage, logos, scripts, reference videos | To make your videos |
| Presenters | Name, image and voice of people who appear in your videos, and their consent records | To make videos with them, and to show that they gave consent |
| Orders and videos | Orders, messages with our team, delivered videos, revision requests | To deliver your orders and fix problems |
| Balance and payments | Balance, holds, charges, refunds, free credit, payment records | To charge for videos and keep your balance correct |
| Connected accounts | See section 2 | To publish the videos you approve |
| Performance data | Public view, like, comment and share counts of the videos we made for you, and metrics you share with us | To analyse how your videos perform and improve our methods |
| Public business information | Text from your website and posts that your accounts already published | To understand your business. With your production authorisation only, for published posts. |
| Technical data | IP address, browser type, error logs | To keep the service secure and working |
We use only the browser storage that is necessary to keep you signed in and to remember your language.
2. TikTok and other connected platforms
You can connect your TikTok account to Bloomday through TikTok's own sign-in page. We ask for two permissions only: user.info.basic, to show which account is connected, and video.publish, to publish the videos you approve. With these permissions, we receive or use:
- Basic profile information: your TikTok account ID, display name and profile picture. We use it to show which account is connected. We do not store your profile picture. We get it again from TikTok when we show it.
- Access tokens: keys that TikTok gives us so we can publish for your account, with the TikTok open ID and the permissions you gave. We store them in our database. The storage of the database is encrypted. Only our servers use the tokens.
- Creator settings: the privacy options, comment settings and posting limits of your account. We read them each time you prepare a post, so the post settings we show are correct.
- Video upload and publishing: we upload the videos that you approve, with the caption and settings that you approve, to your account. We do not publish without your approval.
We do not read your TikTok followers, messages or other videos. If we want to read more data from TikTok in the future, we ask for your permission first and update this policy.
We use TikTok data only to provide Bloomday to you. We do not sell it. We do not share it with other customers. We do not use it to build advertising profiles. We do not use it to train general-purpose AI models. Our use of TikTok data also follows the TikTok Developer Terms of Service.
To withdraw access: disconnect TikTok in Bloomday, or remove Bloomday in the TikTok app under Settings and privacy → Security → Manage app permissions. When you disconnect in Bloomday, we revoke our tokens with TikTok and delete them from our database. When you delete your Bloomday account, we do the same. To ask us to delete other TikTok data that we hold, email bart@bloomday.io.
Other platforms, when we support them, work the same way. We list them here before we use them.
3. How we use information
- To provide the service: plan, make, deliver, publish and analyse your videos.
- To charge for orders and handle refunds.
- To contact you about your account and your orders.
- To keep Bloomday secure, prevent misuse and meet our legal duties.
- To improve our methods. Section 4 explains this.
We do not send you marketing emails unless you agree.
4. Analysis and de-identified learnings
We learn from orders and performance data to improve how we make content. Your videos, scripts and account data are used only for your business. When we use a learning for other customers, we remove anything that identifies you, your products or your account. A de-identified learning is a short statement, such as "a question in the first two seconds keeps more viewers for home-service videos". It does not contain your data. We keep de-identified learnings after you delete your account.
5. Who we share information with
We share information only with service providers that help us run Bloomday, and only the information each one needs:
| Provider | What it does | Location |
|---|---|---|
| Supabase | Sign-in and main database | Singapore |
| Fly.io | Application servers and file storage | Singapore |
| Vercel | Hosting of the bloomday.io website | Global network |
| Cloudflare | Domain name service and network security | Global network |
| AI model providers | Help to write scripts and make video, image and voice content | United States and other countries |
| Payment providers, such as Stripe, if you pay by card | Process payments. We do not see or store full card numbers. | United States |
| TikTok and other platforms you connect | Receive the videos and post settings that you approve | Depends on the platform |
We can also share information when the law requires it, or to protect the rights and safety of people. If the Bloomday business is sold or restructured, information can move to the new owner under this policy.
6. International transfers
We store your information mainly in Singapore. Some providers process information in the United States and other countries. When we send information outside Australia, we take reasonable steps to make sure that the provider protects it in line with the Australian Privacy Principles. Where the GDPR or UK GDPR applies, we use the safeguards that these laws require.
7. How long we keep information
- Account, business profile, materials, orders and videos: while your account exists.
- Connected-account tokens: until you disconnect the account or delete your Bloomday account.
- Payment and tax records: as long as tax and financial laws require. In Australia, this is normally 5 years.
- Security logs: up to 90 days, unless we need them to investigate a problem.
- De-identified learnings: kept, as section 4 explains.
8. Security
We use encrypted connections (HTTPS). Our database is encrypted at rest. Access to personal information is limited to the people and systems that need it. No system is completely secure. If a data breach is likely to cause you serious harm, we tell you and the regulator as the law requires.
9. Your rights
- Access and copy: download your data in Account settings → Data & account → Download my data.
- Correction: edit your account and business profile in Bloomday, or ask us.
- Deletion: delete your account in Account settings → Data & account → Delete account. The Data Deletion page tells you what we delete and what we keep.
- Withdraw permissions: disconnect a connected account, or withdraw an authorisation, at any time.
Depending on where you live, you can have more rights, for example under the GDPR, UK GDPR or the CCPA/CPRA. To use a right that the app does not cover, email bart@bloomday.io. We reply within 30 days. We may ask you to confirm your identity.
10. Children
Bloomday is for businesses. It is not for people under 18. We do not knowingly collect information from children.
11. Changes to this policy
We may update this policy. We change the "Last updated" date above. If a change is material, we tell you in Bloomday or by email before it takes effect.
12. Contact and complaints
Email bart@bloomday.io with any question or complaint about privacy. We reply within 30 days. If you are not satisfied with our reply, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au, or to the privacy regulator where you live.