Information We Collect

We only collect what we need to provide and improve your Bloopy experience:

A. Information You Provide to Us.

• Account Information. Name, email, business name, contact details, and password (hashed).
• Business Details. Business type, product or service categories, and customer data you add to the platform.
• Billing Details. If you subscribe to a paid plan, we collect payment information via secure third-party processors (Stripe, Paystack, etc.).
• Communications. Messages or requests you send to Bloopy support or sales.

B. Information We Collect Automatically When You Use Our Services.

• Device & Log Data. IP address, browser type, device model, operating system, time zone, and system activity (to maintain security and optimize performance).
• Usage Analytics. Features used, pages visited, time spent, and interaction logs for product improvement and troubleshooting.
• Cookies & Similar Technologies. Used to remember preferences, enable core functionality, analyze traffic, and support marketing (see our Cookie Policy for details).

C. Third-Party Integrations.

• External Connections. If you connect Bloopy to WhatsApp, Instagram, Facebook, Telegram, or payment gateways, we collect only the data necessary for the requested integrations (e.g. chat data, order notifications, payment confirmations).
• API Tokens. When you link an integration, we securely store the minimum tokens or credentials required to execute actions on your behalf. Tokens are encrypted at rest.

We never collect your sensitive payment details directly; all card or bank data is handled by certified third-party processors (e.g. Stripe, Paystack, Flutterwave, etc.).

---

How We Use Your Information

We use your data only for these purposes:

• Service Delivery. To set up your account, provide platform features, and process transactions (including payment collection and reconciliation).
• Fraud Prevention. To detect, prevent, and respond to fraud, abuse, or suspicious activity, regardless of payment method (card, transfer, etc.).
• Support & Communication. To respond to your questions, notify you about service updates, and send critical alerts.
• Product Improvement. To analyze usage and improve platform features, automation, and customer experience.
• Legal Compliance. To fulfill regulatory, tax, and anti-fraud requirements.

---

How We Share Your Information

• With Service Providers. We use trusted partners (cloud hosting, analytics, payment processors) to deliver our services. They access your data only as needed to perform their role and must comply with strong privacy and security standards.
• With Integrations. If you connect third-party platforms (e.g. WhatsApp, Facebook, payment partners), we share data with them only as needed for that integration.
• With Legal Authorities. If required by law, court order, or to protect rights and safety.
• Never for Advertising. We never sell or rent your personal data to third parties for marketing or advertising purposes.

---

Data Security & Protection

We protect your information using industry-standard security practices:

• Encryption. All data is encrypted in transit (TLS 1.2+) and sensitive data is encrypted at rest (AES-256).
• Access Control Only authorized Bloopy personnel may access user data—and only when necessary for support or compliance.
• Minimal Data Retention. We only retain data as long as necessary for service delivery, support, and legal compliance.
• Regular Security Audits. Our infrastructure is monitored and tested to prevent unauthorized access or data leaks.

---

Data Retention & Deletion Policy

• Account Data. Retained while you use Bloopy. When you delete your account, your personal data and business data are permanently removed from active systems within 30 days (unless we must retain it for legal or regulatory reasons).
• Integration Tokens. Revoked and deleted immediately when you disconnect an integration.
• Payment & Billing. Retained only as needed to comply with tax, anti-fraud, or regulatory laws.
• Chat & Transactional Data. Retained as long as needed for service delivery, then deleted or anonymized.

To request deletion, email support@getbloopy.com or delete your account in Bloopy settings.

---

Your Data Rights & Choices

You have full control over your data.

A. Managing Your Data

• Access - Request a copy of your data at any time.
• Correction - Update or modify inaccurate information.
• Deletion - Request account deletion and data removal at any time.
• Revoke Permissions - Disconnect any integrations or revoke third-party access at any time in your Bloopy dashboard or directly with the provider.
• Marketing Preferences - Opt out of marketing emails by clicking “unsubscribe” in any message.

You can manage these preferences directly in Bloopy settings or by contacting privacy@getbloopy.com.

---

Sub-processors

To deliver our services, Bloopy may engage trusted third-party service providers who process user data on our behalf. These third parties, or sub-processors, help us with core functionalities such as cloud hosting, AI processing, analytics, and system monitoring. We take steps to ensure that all sub-processors adhere to the same high standards of data protection and security as we do.

We currently use the following sub-processors

Sub-processor	Purpose	Data Location
Amazon Web Services (AWS)	Cloud hosting & infrastructure	Frankfurt, Germany (EU)
OpenAI	Large Language Model processing (AI tasks)	United States
Mixpanel	Analytics & user behavior tracking	United States
BetterStack	Error monitoring & diagnostics	United States

We will notify users of any material changes to this list at least 30 days in advance. For any inquiries or concerns, please contact us at privacy@getbloopy.com.

---

International Data Transfers

We may process your data on servers located outside your country (e.g. in the EU, US, or Africa). We comply with data protection laws applicable to your region and use safeguards for international transfers.

---

Children's Privacy

We may process your Bloopy is not intended for children under 16. We do not knowingly collect information from children.

---

Compliance with Global Privacy Laws

Bloopy complies with applicable privacy laws and regulations, including:

• General Data Protection Regulation (GDPR) - We respect the rights of EU users to access, delete, or modify their data.
• Nigeria Data Protection Regulation (NDPR) - We respect the rights of the Nigerian users to access, delete, or modify their data.
• California Consumer Privacy Act (CCPA) - Users can request data access, deletion, and opt-out of data sharing.
• Google API Services User Data Policy - We adhere to Google's strict security requirements when accessing Google services.

If you have concerns regarding compliance, contact legal@getbloopy.com.

---

Updates to This Policy

We may update this Privacy Policy from time to time. Major changes will be communicated via email, in-app notification, or on our website. Continued use of Bloopy means you accept any updated policy.

---

Contact Us

If you have questions or concerns about this Privacy Policy, reach out to us:

• Email: privacy@getbloopy.com

We are committed to protecting your data and earning your trust—always.