Privacy Policy — Career Bloom

1. Who We Are

Career Bloom ("we", "us", "our") operates the career platform available at bloom.ai. Our contact email for privacy matters is privacy@bloom.ai.

2. Information We Collect

Account data — name, email address, hashed password (if you use email sign-in)
Profile data — resume, work experience, education, skills, location, LinkedIn/GitHub URLs
Job-search activity — search queries, job applications, saved jobs
Voice session data — transcripts generated during AI voice sessions (stored temporarily)
Usage data — pages visited, features used, device type, IP address, browser type
Cookies — session cookies, preference cookies (e.g. country preference). See Section 7.

We do not store plain-text passwords. Passwords are hashed using bcrypt before storage.

3. How We Use Your Information

To provide, operate, and improve the platform
To match you with relevant job listings using AI
To send transactional emails (sign-in links, application updates)
To comply with legal obligations
To detect and prevent fraud and abuse

We do not sell your personal data to third parties.

4. Legal Basis for Processing (GDPR)

If you are in the European Economic Area, we process your data under the following legal bases:

Contract — processing necessary to provide the service you signed up for
Legitimate interests — analytics and security monitoring
Consent — optional cookies and marketing communications
Legal obligation — where required by law

5. How We Share Your Information

Employers — when you apply to a job, your application and profile are shared with the relevant employer
Service providers — we use Vercel (hosting and file storage), Groq (AI inference), and Resend (email). These sub-processors only receive data necessary to perform their service
Legal requirements — when required by law or to protect our rights

6. Data Retention

We retain your account data for as long as your account is active. If you delete your account, all personal data is permanently deleted within 30 days, except where we are required to retain it by law (e.g. billing records).

7. Cookies

We use the following types of cookies:

Strictly necessary — session cookies required for authentication (cannot be disabled)
Preference cookies — e.g. your preferred job search country
Analytics cookies — anonymous usage statistics (only with your consent)

You can manage your cookie preferences using the banner shown on your first visit, or by clearing cookies in your browser settings.

8. Your Rights

Depending on your jurisdiction you may have the right to:

Access — request a copy of your personal data (available from Settings → Download my data)
Rectification — correct inaccurate data
Erasure — delete your account and all associated data (available from Settings → Delete account)
Portability — receive your data in a machine-readable format
Object / Restrict — object to or restrict certain processing
Withdraw consent — at any time where processing is based on consent

To exercise these rights, email privacy@bloom.ai. California residents may also submit requests under the CCPA at the same address.

9. Data Security

Resumes and uploaded files are stored in private, access-controlled cloud storage (Vercel Blob). All data is transmitted over HTTPS. We follow industry-standard security practices. To report a security vulnerability, see our security.txt.

10. International Transfers

Your data may be processed in the United States and other countries where our service providers operate. Where required, we rely on Standard Contractual Clauses to protect transfers outside the EEA.

11. Children

Our platform is not directed at children under 16. We do not knowingly collect personal data from children. If you believe we have inadvertently collected such data, please contact us and we will delete it promptly.

12. Changes to This Policy

We may update this policy from time to time. Material changes will be communicated via email or a prominent notice on the platform at least 14 days before they take effect.

13. Contact

Questions or concerns? Email privacy@bloom.ai.