Back

PRIVACY POLICY

Bloomr platform — Convergence Lab

Effective date: October 2026

Convergence Lab (“we”), publisher of the Bloomr platform, is committed to protecting its users’ privacy. This policy describes how we collect, use, share and protect your personal data, in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act.

1. DATA CONTROLLER

The data controller is Convergence Lab, 55 rue Grignan, 13006 Marseille, France, reachable through the contact form.

2. DATA WE COLLECT

2.1 Account data

  • Email address and name
  • Password (stored hashed, never in clear text)
  • With Google sign-in: the Google account’s name, email address and profile picture
  • Workspace, role, and invitations sent or received
  • Preferences (language, display theme)

2.2 User content

  • Brand kits: name, description, logos, colours, fonts, editorial angles
  • Uploaded media: photos, videos, music, virtual influencers and visual references
  • Notes, briefs and instructions entered for generation
  • Generated content (texts, images, videos, carousels) and its publishing history

2.3 Data from connected social media accounts

When you connect a TikTok, Instagram or YouTube account, we receive and store, encrypted:

  • the OAuth access (and refresh) tokens issued by the platform;
  • the account’s or channel’s identifier, username and profile picture;
  • the identifiers and statuses of the posts published from Bloomr.

The app credentials or API keys you enter in Integrations are also encrypted and never shown again in clear text.

2.4 Technical data

  • IP address and server logs
  • Usage of the AI features (number of generations, cost)

We do not collect any “sensitive” data within the meaning of the GDPR.

3. PURPOSES OF PROCESSING

  • Creating and managing the account and workspace
  • Generating content with artificial intelligence from your brands and media
  • Storing your media and content
  • Publishing, at your request, to the social media accounts you have connected
  • Tracking the consumption of AI services
  • Support, account security and fraud prevention
  • Compliance with our legal obligations

4. LEGAL BASIS

  • Performance of the contract: providing the Bloomr service (sections 2.1 to 2.3)
  • Your consent: connecting social media accounts, which you can withdraw at any time
  • Our legitimate interest: security, fraud prevention, improving the service
  • Compliance with legal obligations

5. DATA FROM THE GOOGLE, YOUTUBE, TIKTOK AND META APIS

Bloomr’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Data received from these platforms:

  • is used only to connect your accounts and publish the content you have chosen to them;
  • is never sold, shared with third parties or used for advertising;
  • is not used to train artificial intelligence models;
  • is not read by any human, except with your consent, for security purposes or to comply with the law.

Bloomr uses YouTube API Services: by connecting a channel, you agree to the YouTube Terms of Service and the Google Privacy Policy. You can revoke Bloomr’s access at any time from the Integrations page or from myaccount.google.com/permissions.

6. RECIPIENTS AND PROCESSORS

Your data is only shared with the processors the service needs:

  • Amazon Web Services (AWS) — hosting of the app, database and media (European Union, Sweden)
  • Google Cloud (Vertex AI, Gemini) — image, video and text generation; Google sign-in
  • Anthropic (Claude) — text generation
  • Pusher — real-time notifications of generation progress
  • Unsplash — stock photo search (only the search keywords are sent)
  • TikTok, Meta (Instagram) and Google (YouTube) — publishing content, at your request

The AI providers process the briefs and media sent to them to produce the requested output; their business terms exclude using this data to train their models. No personal data is ever sold.

7. HOSTING AND TRANSFERS OUTSIDE THE EU

Bloomr’s data is hosted by AWS in the European Union. Some providers (Google, Anthropic, Pusher, publishing platforms) may process data outside the European Union, in particular in the United States. These transfers are covered by the EU–US Data Privacy Framework or by the European Commission’s standard contractual clauses.

8. RETENTION

  • Account data and content: for as long as the account is active, then deleted within 30 days of the account’s deletion
  • Social media account tokens: deleted as soon as the account is disconnected
  • Inactive accounts: deleted after 3 years without sign-in, after prior notice
  • Server logs: 12 months at most

9. YOUR RIGHTS

Under the GDPR, you have the following rights:

  • Right of access and rectification
  • Right to erasure
  • Right to data portability
  • Right to object and to restrict processing
  • Right to withdraw your consent at any time
  • Right to set instructions on what happens to your data after your death

To exercise your rights, write to us through the contact form. We reply within one month. You may also lodge a complaint with the French data protection authority (CNIL): www.cnil.fr.

10. DELETING YOUR DATA

To delete your data:

  • disconnect your TikTok, Instagram or YouTube accounts from the Integrations page: their tokens are deleted immediately;
  • delete your media, brands and content from the app;
  • to delete your account and all associated data, write to us through the contact form giving the account’s address: the deletion is carried out within 30 days and confirmed to you by email.

11. SECURITY

  • Hashed passwords; access tokens and API keys encrypted at rest
  • Encrypted connections (HTTPS/TLS)
  • Access to data restricted to authorised people only
  • Regular database backups

12. COOKIES AND LOCAL STORAGE

Bloomr uses no advertising cookies and no third-party analytics. The browser’s local storage only keeps what the app needs to work: your sign-in session and your display preferences (language, theme). These do not require consent.

13. CHANGES TO THIS POLICY

We may change this policy. Any substantial change will be notified to you by email or in the app.

14. CONTACT

  • Contact form: https://getbloomr.com/contact
  • Company: Convergence Lab
  • Address: 55 rue Grignan, 13006 Marseille, France
  • Website: https://getbloomr.com/confidentialite
Privacy Policy | Bloomr