BloomText Privacy
A plain-language guide to the BloomText privacy policy for healthcare organizations and the people who use BloomText.
Get started for freeSchedule a demo →Start with the full policy
Read the canonical BloomText Privacy Policy
This page summarizes the policy in more readable language. It does not replace the full legal policy. If this summary and the canonical policy differ, the canonical Privacy Policy controls.
Data controller and owner
BloomAPI, Inc.
300 Lenora Street #963
Seattle, WA 98121
United States
Privacy questions and data requests
Email support@bloomtext.com. Do not include PHI in an ordinary email; use BloomText or call +1 (415) 903-1200 if the request involves PHI.
What data the policy covers
Information you provide
This may include account and contact information such as an email address, information submitted when communicating with BloomText, and payment information processed for paid subscriptions.
Information collected through use
This may include cookies, usage data, IP address, browser and device information, language, geographic information, and records needed to operate and maintain the service.
Information about other people
Users are responsible for having permission to provide personal data about another person and for using BloomText in accordance with applicable privacy and healthcare requirements.
How personal data is used
Provide and operate BloomText
Personal data is used to provide requested services, host and operate the application, maintain accounts, process payments, deliver messages and notifications, support video calling, and communicate with users.
Understand and improve the service
The policy describes analytics and usage measurement used to understand how BloomText and its websites are used and to prepare service reports.
Protect users and comply with law
Information may be used to maintain security, investigate misuse, enforce agreements, prevent fraud or technical problems, and respond to valid legal or governmental requests.
Service providers named in the policy
Infrastructure and analytics
The canonical policy describes infrastructure and analytics providers, including Google Cloud, Amazon Web Services, Google Analytics, Amplitude, and internal analytics.
Communication and product services
The policy also describes providers used for email, video, payments, SMS, and notifications, including Mailchimp, SendGrid, Vonage/TokBox, Daily, Stripe, Twilio, and OneSignal.
Provider details can change
Read the canonical policy and linked provider policies for the complete descriptions, data categories, and processing locations.
Processing, retention, and security
Processing and access
BloomAPI uses organizational and technical measures intended to prevent unauthorized access, disclosure, modification, or destruction. Data may be accessible to personnel and service providers who need it to operate the service.
Retention
The policy states that data is kept for the time needed to provide the requested service or fulfill the purposes described in the policy. Users may contact BloomAPI about suspending or removing personal data.
United States processing
The policy states that BloomAPI processes and stores information in the United States.
No system is absolutely secure
BloomAPI follows industry standards to protect personal data, but no internet transmission or network can be guaranteed to be completely secure.
Your choices and rights
Access and correction requests
The policy describes rights to ask whether personal data is stored, learn about its contents and origin, verify its accuracy, and request correction, updating, deletion, anonymization, or restriction where applicable.
Cookies and browser settings
You can configure your browser to refuse cookies or alert you when a cookie is sent. Some BloomText features may not work correctly when cookies are disabled.
Push notifications
Device settings generally allow users to opt out of push notifications.
Policy changes
BloomAPI may update the Privacy Policy by posting changes on the canonical policy page. Review that page for the current legal text.
Healthcare and PHI guidance
Do not put PHI in public channels
Do not include protected health information in public contact forms, ordinary email, or public AI prompts. Contact BloomText from inside the product or by phone when a support request involves PHI.
Privacy, security, and HIPAA are related but different
This page summarizes the Privacy Policy. For safeguards and HIPAA context, review BloomText security and the Business Associate Agreement guidance.
