BloomSignal Privacy Policy
Last updated: 06/03/26
This Privacy Policy explains how BloomSignal, a service operated by Northern Lights Software LLC ("BloomSignal," "we," "us," or "our"), collects, uses, and shares information when you use the website at https://bloomsignal.app and our email alert service (the "Service").
We keep things minimal: we collect only what we need to send you the right gardening alerts and to run the Service.
1. Information We Collect
Information you give us:
- Email address — from your Google sign-in, used to identify your account and send alerts.
- U.S. ZIP code — used to fetch local weather and decide when your followed signals trigger.
- Signal preferences — which signals you follow and your account settings.
Information from Google sign-in:
- When you "Sign in with Google," we store only your email address and a Google account identifier needed to create and link your account. We do not store your Google name or profile picture.
BloomSignal's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We use Google sign-in data solely to authenticate you and operate your account, and we do not sell it, use it for advertising, or share it with third parties except as needed to provide the Service.
Payment information (Pro subscribers):
- Payments are handled by Stripe. We receive limited records such as a Stripe customer ID and subscription status. We do not collect or store your full payment card number — Stripe handles that directly.
Information collected automatically:
- We use an HTTP-only authentication cookie to keep you signed in. This is a functional cookie, not an advertising cookie.
- Our servers and network provider may log standard technical data (such as IP address and request information) for security and operational purposes.
We do not sell your personal information, and we do not use it for third-party advertising.
2. How We Use Your Information
We use your information to:
- Create and manage your account and keep you signed in;
- Fetch local weather for your ZIP code and evaluate the signals you follow;
- Send you the email alerts you've subscribed to, plus essential account and billing emails;
- Process and manage Pro subscriptions and renewals;
- Maintain security, prevent abuse, debug, and operate the Service;
- Comply with legal obligations.
3. How We Share Information
We share information only with service providers that help us run BloomSignal, and only as needed for them to perform their function:
| Provider | Purpose |
|---|---|
| Sign-in / authentication | |
| OpenWeatherMap | Weather and forecast data (we send your ZIP code to geocode your location and retrieve forecasts) |
| Stripe | Payment processing and subscription management |
| Resend | Sending alert and account emails (receives your email address as the recipient) |
| Cloudflare | DNS, network, and edge security |
| DigitalOcean | Server hosting |
We may also disclose information if required by law, to enforce our Terms, or to protect the rights, safety, and security of our users or the Service. If BloomSignal is involved in a merger, acquisition, or sale of assets, information may be transferred as part of that transaction.
4. Cookies
We use a single essential, HTTP-only authentication cookie so the Service can keep you logged in. Because it is strictly necessary to provide the Service you've requested, it is not used for tracking or advertising. We do not currently use third-party advertising or analytics cookies.
5. Data Retention and Deletion
We keep your information for as long as your account is active or as needed to provide the Service.
You can delete your account at any time: Profile → Remove Account. Deletion requires a fresh Google re-authentication plus a typed confirmation, and then removes your user record, your signal follows, and your Google OAuth link data. Residual copies may persist in encrypted backups for up to 30 days before they are overwritten. Some records may be retained beyond that where required for legal, tax, accounting, or fraud-prevention reasons (for example, Stripe may retain billing records).
6. Security
We protect access using authentication, HTTP-only cookies, and TLS encryption in transit, and we limit access to your information. No method of transmission or storage is 100% secure, so we cannot guarantee absolute security, but we work to protect your information using reasonable measures.
7. Where We Operate
BloomSignal is based in the United States and is intended only for users located in the United States. Your information is processed and stored in the United States and in the U.S.-based regions used by our service providers. We do not market or knowingly offer the Service to users outside the United States.
8. Your Privacy Rights
Depending on the U.S. state you live in, you may have rights to access, correct, delete, or obtain a copy of the personal information we hold about you, and to opt out of certain uses of it.
- California (CCPA/CPRA) and similar U.S. state laws (e.g., Virginia, Colorado, Connecticut): You may request access to or deletion of your personal information and ask us to disclose the categories of information we collect. We do not sell your personal information or "share" it for cross-context behavioral advertising.
To exercise any of these rights, contact us at [email protected]. You can also delete most of your data yourself using Remove Account. We will respond as required by applicable law and may need to verify your identity first.
9. Children's Privacy
The Service is not directed to children, and we do not knowingly collect personal information from anyone under 18 (or under 13 in the U.S. for purposes of COPPA). If you believe a child has provided us information, contact us and we will delete it.
10. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date and, where appropriate, notify you. Your continued use of the Service after changes take effect means you accept the updated policy.
11. Contact
Questions or privacy requests? Contact us at [email protected], or by mail at:
Northern Lights Software LLC
9 Cromwell Drive
Portsmouth, RI 02871