Privacy Policy
How Lifebloom AI, Inc. collects, uses, and protects your information.
This privacy notice for Lifebloom AI, Inc. ("we," "us," or "our") describes how and why we collect, store, use, and/or share ("process") your information when you use our website and related services ("Services"). Reading this privacy notice will help you understand your privacy rights and choices. If you do not agree with our policies and practices, please do not use our Services. If you have questions or concerns, contact us by email at [email protected].
Summary of key points
This summary provides key points from our privacy notice.
What personal information do we process? When you visit or interact with our Services, we process the personal information you provide, such as your email address and any details you submit through our contact form or our free security assessment, along with limited technical information collected automatically.
Do we process any sensitive personal information? No. We do not collect or process sensitive personal information through our website.
Do we receive any information from third parties? We do not purchase personal information from data brokers. We receive limited information from the service providers that help us operate the Services, such as our analytics and email providers.
How do we process your information? We process your information to provide, improve, and administer our Services, respond to you and send information you request, for security and fraud prevention, and to comply with law. We may also process your information for other purposes with your consent. We process your information only when we have a valid legal reason to do so.
In what situations and with which parties do we share personal information? We share information in specific situations described below, primarily with service providers that operate the Services on our behalf.
What are your rights? Depending on where you are located, applicable privacy law may give you rights over your personal information, including the right to access, correct, or delete it.
How do you exercise your rights? Email us at [email protected]. We will consider and act upon any request in accordance with applicable data protection laws.
What information do we collect?
Personal information you disclose to us. We collect personal information that you voluntarily provide when you contact us, request information about us or our products and Services, or use our free security assessment. This typically includes your email address and any information you choose to include in your message or assessment inputs.
Sensitive information. We do not collect or process sensitive personal information through the Services.
All personal information that you provide to us must be true, complete, and accurate, and you must notify us of any changes to such personal information.
Information automatically collected. Some information, such as your Internet Protocol (IP) address and browser and device characteristics, is collected automatically when you visit our Services. This information does not reveal your specific identity but may include device and usage information, IP address, browser and device characteristics, operating system, language preferences, referring URLs, approximate location, and other technical information. This information is primarily needed to maintain the security and operation of our Services, and for our internal analytics and reporting. We collect this information through cookies and similar technologies (see "Cookies and tracking" below).
How do we process your information?
We process your information to:
- provide, operate, improve, and administer the Services;
- respond to your inquiries and send information you request, including free assessment results;
- send administrative communications and, where you have opted in, marketing communications;
- maintain the security and integrity of the Services and prevent fraud; and
- comply with legal obligations and enforce our legal terms.
We process your information only when we have a valid legal reason to do so. Where the EU or UK GDPR applies, our legal bases are: your consent (which you may withdraw at any time); performance of a contract with you; our legitimate interests in operating and improving the Services, balanced against your rights; and compliance with our legal obligations.
When and with whom do we share your personal information?
We do not sell your personal information for money. We may share information in the following situations:
- Service providers. We share information with vendors that perform services on our behalf, such as hosting, product and website analytics (PostHog), and email delivery (Amazon SES). These providers may access personal information only to perform tasks on our behalf and are obligated to protect it.
- Business transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.
- Affiliates. We may share your information with our affiliates, in which case we will require those affiliates to honor this privacy notice.
- Legal and safety. We may disclose information where required by law, to respond to lawful requests, or to protect the rights, safety, and property of Zaun, our users, or others.
Cookies and tracking
We use cookies and similar technologies (such as pixels) to operate the Services, remember your preferences, and understand how the Services are used. We use PostHog for product and website analytics. Where required by law, we ask for your consent before setting non-essential cookies, and you can change your choices at any time through the cookie controls on our site or your browser settings.
International transfers
We are based in the United States and process information there. If you are accessing our Services from outside the United States, your information may be transferred to, stored, and processed in the United States by us and by the service providers with whom we share it. Where we transfer personal information from the European Economic Area, the United Kingdom, or Switzerland, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses.
How long do we keep your information?
We keep your information for as long as necessary to fulfill the purposes outlined in this privacy notice unless otherwise required or permitted by law (such as tax, accounting, or other legal requirements). For example, we retain contact and assessment inquiries for as long as needed to respond and for a reasonable period afterward for our records. When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize such information.
How do we keep your information safe?
We maintain administrative, technical, and physical safeguards designed to protect your personal information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Minors
We do not knowingly solicit data from or market to children under 18 years of age. By using the Services, you represent that you are at least 18. If we learn that we have collected personal information from a child under 18, we will delete it.
Your privacy rights
Depending on where you live, you may have some or all of the following rights regarding your personal information: to access or request a copy of it; to correct inaccurate information; to request deletion; to withdraw consent where we rely on it; and to opt out of certain processing, including targeted advertising or the "sale" or "sharing" of personal information (see "US state privacy rights" below).
Withdrawing your consent. If we are relying on your consent to process your personal information, you have the right to withdraw your consent at any time by contacting us using the contact details below. This will not affect the lawfulness of processing before withdrawal.
How to exercise your rights. Email [email protected] with your request and enough information for us to verify your identity and respond. We will consider and act upon any request in accordance with applicable data protection laws, and we will not discriminate against you for exercising your rights.
EU, UK, and Swiss residents. You have the right to lodge a complaint with your local data protection supervisory authority if you believe we have processed your information unlawfully.
US state privacy rights
If you are a resident of California, Virginia, Colorado, Connecticut, Utah, or another US state with a comprehensive privacy law, you may have additional rights, including the right to know or access the personal information we hold about you, the right to correct or delete it, the right to opt out of the "sale" or "sharing" of personal information and of targeted advertising, and the right not to be discriminated against for exercising these rights.
Categories of personal information. In the past 12 months we have collected the following categories of personal information: identifiers (such as email address and IP address); internet or network activity (such as usage and device data); and approximate geolocation data derived from IP address. We collect this information directly from you and automatically through your use of the Services.
Sale and sharing. We do not sell personal information for money. Some laws define "sale" or "sharing" broadly to include the use of certain analytics or advertising cookies. To the extent our use of such cookies qualifies, you can opt out through the cookie controls on our site. We do not knowingly sell or share the personal information of individuals under 16.
Sensitive personal information. We do not collect or use sensitive personal information.
California "Shine the Light." California Civil Code Section 1798.83, also known as the "Shine The Light" law, permits California residents to request and obtain from us, once a year and free of charge, information about the categories of personal information we disclosed to third parties for their direct marketing purposes. To make such a request, contact us using the information provided below.
Submitting a request. To exercise any of these rights, email [email protected]. You may use an authorized agent to submit a request on your behalf, subject to verification. We will respond within the timeframes required by applicable law.
Do-not-track signals
Most web browsers and some mobile operating systems include a Do-Not-Track ("DNT") feature. No uniform standard for recognizing DNT signals has been finalized, so we do not currently respond to them. Where required by law, we honor recognized opt-out preference signals such as Global Privacy Control.
Updates to this notice
We may update this privacy notice from time to time. The updated version will be effective as soon as it is accessible. We encourage you to review it periodically.
Contact us
If you have questions or comments about this notice, email us at [email protected] or write to: Lifebloom AI, Inc., 30 7th St, San Francisco, CA 94103.
To request access to, correction of, or deletion of your personal information, email [email protected] with your name, email address, the nature of your request, and any information that will help us locate your data and verify your identity.