Privacy Policy

Last Updated: November 27, 2025

1. Introduction

BloomSig ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our BloomSig Insights application and related services.

2. Information We Collect

2.1 Information You Provide

  • Account information (email address, name)
  • Organization and team information
  • Campaign-to-issue binding preferences

2.2 Information from Third-Party Services

When you connect your advertising accounts, we access:

  • Google Ads: Campaign names, performance metrics (spend, conversions, clicks, impressions)
  • Meta Ads: Campaign names, performance metrics
  • Atlassian Jira: Issue identifiers for campaign linking

2.3 Information We Do NOT Collect

  • Ad creative content or keywords
  • Audience or targeting data
  • Customer lists or conversion details
  • Billing or payment information from ad platforms

3. How We Use Your Information

We use collected information to:

  • Display ad performance metrics in Jira issues
  • Calculate and show trend indicators
  • Provide alerts when performance thresholds are met
  • Improve our services and user experience
  • Respond to your requests and support inquiries

4. Data Storage and Security

We implement industry-standard security measures:

  • All data encrypted at rest (AES-256)
  • All data encrypted in transit (TLS 1.3)
  • OAuth tokens stored with application-level encryption
  • Regular security audits and monitoring

Performance metrics are cached for up to 5 minutes. Aggregated historical data is retained for up to 90 days.

5. Data Sharing

We do not sell, trade, or rent your personal information. We may share data only:

  • With your explicit consent
  • To comply with legal obligations
  • With service providers who assist in operating our services (under strict confidentiality agreements)

6. Your Rights

You have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Request deletion of your data
  • Export your data in a portable format
  • Disconnect third-party integrations at any time
  • Opt-out of non-essential communications

7. Third-Party Services

Our service integrates with third-party platforms (Google Ads, Meta Ads, Atlassian). Each platform has its own privacy policy:

8. GDPR Compliance

For users in the European Economic Area (EEA), we comply with GDPR requirements including:

  • Lawful basis for processing (consent or legitimate interest)
  • Data minimization principles
  • Right to be forgotten
  • Data portability
  • 72-hour breach notification

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date.

10. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us at:

Email: hi@bloomsig.com