Legal

Privacy Policy.

Last updated: May 2026

1. Who we are

The Bloom Division (thebloomdivision.com) is a wellness intelligence platform for hemp, CBD, and regulated wellness operators. We are the data controller for personal information collected through this website.

Contact: [email protected]

2. What data we collect

  • Account data: name, email address, and password when you register or sign in with Google OAuth.
  • Payment data: billing information processed by our payment provider. We do not store card numbers.
  • Usage data: pages visited, tools used, and features accessed — collected to improve the platform.
  • Communications: messages sent through our contact form or email.
  • Cookies: session cookies for authentication and optional analytics cookies (only with your consent).

3. How we use your data

  • To create and manage your account and membership.
  • To deliver the services you have subscribed to (Signals, tools, resources).
  • To send transactional emails (receipts, account notices).
  • To send the weekly Signals newsletter (only if you opt in).
  • To improve platform performance and user experience.
  • To comply with legal obligations.

4. Third-party services

We use the following third-party services that may process your data:

  • Cloudflare — CDN and DDoS protection. Processes request metadata.
  • Google OAuth — Optional sign-in provider. Subject to Google's Privacy Policy.
  • Resend — Transactional email delivery.
  • Beehiiv / MailerLite — Email newsletter platform for opted-in subscribers.
  • OpenAI — Powers our AI tools. Prompts may be processed by OpenAI's API.
  • Neon (PostgreSQL) — Encrypted database hosting for account and membership data.
  • Cloudflare R2 — Secure object storage for media files.

5. Cookies

We use the following types of cookies:

  • Strictly necessary: authentication session cookies required for login to function.
  • Analytics (optional): anonymous usage data to understand how the platform is used. Only set with your consent.

You can withdraw cookie consent at any time by clearing your browser's local storage or cookies.

6. Data retention

We retain your account data for as long as your account is active. If you cancel your membership, we retain minimal data as required by law (e.g. billing records for 7 years). You may request deletion at any time.

7. Your rights

Depending on your location, you may have the right to:

  • Access the personal data we hold about you.
  • Request correction of inaccurate data.
  • Request deletion of your data (“right to be forgotten”).
  • Object to or restrict processing.
  • Data portability.
  • Withdraw consent at any time (for consent-based processing).

To exercise any of these rights, email us at [email protected].

8. Security

We use HTTPS encryption, secure database hosting, and access controls to protect your data. No system is 100% secure; in the event of a data breach we will notify affected users as required by law.

9. Changes to this policy

We may update this policy periodically. Material changes will be communicated by email or a notice on the site. Continued use of the platform after changes constitutes acceptance.

10. Contact

Questions about this policy or your data:

[email protected]