Privacy Policy

1. Introduction

Welcome to Bloom Studio ("we," "our," or "us"). We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our AI image and video generation services (collectively, the "Service").

By accessing or using our Service, you agree to the terms of this Privacy Policy. If you do not agree with the terms of this Privacy Policy, please do not access the Service.

2. Information We Collect

We may collect information about you in a variety of ways. The information we may collect on the Service includes:

Personal Data

Personally identifiable information, such as your name, email address, and payment information (processed securely by our third-party payment processors), that you voluntarily give to us when you register with the Service or confirm a transaction.

Derivative Data & Cookies

Information our servers automatically collect when you access the Service, such as your IP address, browser type, operating system, access times, and page views. We and our third-party partners (such as authentication and analytics providers) may use cookies and similar tracking technologies to operate the Service and analyze usage patterns.

User Content & Interactions

We collect content you provide to the Service, including:

• Text prompts and parameters used for generation.
• Reference images you upload for image-to-image or video generation tasks.
• The resulting generated images and videos.
• Interaction data, such as users you follow, and content you "like" or "favorite."

Please note that depending on your visibility settings, some of this content (specifically generated images) may be visible to other users of the Service.

3. How We Use Your Information

• To provide, operate, and maintain our Service.
• To improve, personalize, and expand our Service.
• To facilitate social interactions, such as following and favoriting.
• To understand and analyze how you use our Service.
• To process your transactions and manage your account.
• To communicate with you, either directly or through one of our partners, including for customer service, to provide you with updates and other information relating to the Service.
• To find and prevent fraud.

4. Disclosure of Your Information

We may share information we have collected about you in certain situations. Your information may be disclosed as follows:

• By Law or to Protect Rights: If we believe the release of information about you is necessary to respond to legal process, to investigate or remedy potential violations of our policies, or to protect the rights, property, and safety of others, we may share your information as permitted or required by any applicable law, rule, or regulation.
• Third-Party Service Providers: We may share your information with third parties that perform services for us or on our behalf, including:
  • Authentication: We use Clerk to manage user identity and authentication data securely.
  • AI Model Providers: We transmit your prompts, parameters, and reference images to AI service providers (such as Pollinations AI and OpenRouter) for content generation and prompt enhancement.
  • Storage: We use Cloudflare R2 to store user-uploaded reference images and other system assets.
  • Payment Processors: We use Stripe to securely process payments.
  • Hosting & Infrastructure: We use providers like Vercel and Convex to host and run our application.
  • Analytics & Performance: We use Vercel Analytics and Speed Insights to collect anonymous interaction data (such as page views, events, and performance metrics) to improve our Service.
  We do not sell your personal data to third parties.

5. Security of Your Information

We use administrative, technical, and physical security measures to help protect your personal information. While we have taken reasonable steps to secure the personal information you provide to us, please be aware that despite our efforts, no security measures are perfect or impenetrable, and no method of data transmission can be guaranteed against any interception or other type of misuse.

6. Policy for Children

We do not knowingly solicit information from or market to children under the age of 13. If we learn that we have collected personal information from a child under age 13 without verification of parental consent, we will delete that information as quickly as possible.

7. Your Data Protection Rights (GDPR & CCPA)

We are committed to ensuring you are fully aware of all of your data protection rights. Depending on your location (including the EEA and California), you may be entitled to:

• The right to access: You have the right to request copies of your personal data.
• The right to rectification: You have the right to request that we correct any information you believe is inaccurate.
• The right to erasure: You have the right to request that we erase your personal data, under certain conditions.
• The right to restrict processing: You have the right to request that we restrict the processing of your personal data, under certain conditions.
• The right to object to processing: You have the right to object to our processing of your personal data, under certain conditions.
• The right to data portability: You have the right to request that we transfer the data that we have collected to another organization, or directly to you, under certain conditions.

California Residents: Under the CCPA, you have the right to request that we disclose certain information to you about our collection and use of your personal information over the past 12 months. We do not sell your personal data.

If you would like to exercise any of these rights, please contact us. We will respond to your request within the timeframes required by applicable law.

8. International Data Transfers

Your information, including Personal Data, may be transferred to — and maintained on — computers located outside of your state, province, country, or other governmental jurisdiction where the data protection laws may differ than those from your jurisdiction.

Specifically, our servers and third-party service providers are located in the United States (including Convex, Vercel, Clerk, Stripe, Cloudflare) and the European Union (Pollinations.ai). If you are located outside these regions and choose to provide information to us, please note that we transfer the data, including Personal Data, to these jurisdictions for processing.

By accepting this Privacy Policy, you explicitly consent to such transfer. We will take all steps reasonably necessary to ensure that your data is treated securely and in accordance with this Privacy Policy and applicable laws (such as the Australian Privacy Principles).

9. Contact Us

If you have questions or comments about this Privacy Policy, please contact us at:
support@bloomstudio.fun