Privacy Policy
1. Introduction
This Privacy Policy explains how AlleyBloom, Inc. (“AlleyBloom,” “we,” “us,” or “our”) collects, uses, and discloses information in connection with the AlleyBloom website, applications, and related services (the “Service”).
2. Information we collect
- Account information, such as your name, email address, phone number, password, and account type (Business or Creator).
- Profile information, such as social media handles, audience metrics, sample content, business details, and general location.
- Collab information, such as offers, applications, communications, schedules, published-content links, and ratings.
- Connected social account information, which we receive from Instagram or TikTok if you choose to connect your account, as described in Section 5.
- Publicly available content information, such as information about a social media profile or post you identify to us by handle or link — including the post's caption and its publicly visible engagement counts — which we use to confirm that content was published and to report how it performed.
- Location information, which we collect with your permission to confirm in-person visits and surface nearby opportunities.
- Usage and device information, such as pages viewed, actions taken, IP address, and device and browser type.
- Payment information, which is processed by our third-party payment provider; we do not store complete payment card numbers.
3. How we use information
We use information to operate, maintain, and improve the Service; to match Businesses and Creators; to verify visits and published content; to detect and prevent fraud and abuse; to communicate with you; and to comply with our legal obligations.
4. How we disclose information
- To other users as necessary to facilitate a Collab — for example, a Business may view the profile of a Creator who applies.
- To service providers that perform functions on our behalf, such as hosting, analytics, and payment processing, under appropriate confidentiality obligations.
- To comply with applicable law or to protect the rights, safety, and property of AlleyBloom, our users, or others.
- In connection with a merger, acquisition, financing, or sale of assets.
We do not sell your personal information.
5. Connected social accounts (Instagram and TikTok)
If you are a Creator, you may choose to connect your Instagram or TikTok account to AlleyBloom. Connecting is optional, you control it, and you can disconnect at any time. We only ever access data belonging to the account you connect, and only after you have granted us permission through Instagram's or TikTok's own authorization screen.
What we receive. When you connect an account, we receive from that platform:
- Account and profile information — the account's platform identifier, username, profile picture, verified status, and audience counts such as follower count and post or video count.
- Content you deliver for a Collab — for the post or video you select as your deliverable, its identifier, permalink, caption or description, and thumbnail or cover image.
- Performance information for that content — engagement and reach measures such as views, likes, comments, shares, saves, and reach, refreshed periodically while the Collab's reporting period is open.
- Access credentials — the access and refresh tokens the platform issues so that we can make these requests on your behalf.
How we use it. We use this information to confirm that you own the account you have told us is yours, to let you select the content you published for a Collab from your own posts, to check that required disclosure tags are present in the caption, and to show the Business you collaborated with the content you delivered and how it performed. We show you the same information in your own dashboard.
What we do not do. We do not post, comment, message, or take any other action on your account. We do not access the accounts of people who have not connected them to AlleyBloom. We do not use social platform data for advertising or ad targeting, we do not sell or license it, and we do not use it to build profiles of anyone other than you.
Who we share it with. The content you deliver for a Collab and its performance information are shared with the Business that funded that Collab — that reporting is the purpose of the connection. Beyond that, we share this information only with service providers that host and operate the Service on our behalf, and only where required by law. We handle information obtained from Instagram in accordance with the Meta Platform Terms and Developer Policies, and information obtained from TikTok in accordance with the TikTok Developer Terms of Service.
How we protect it. Access and refresh tokens are encrypted at rest, are never displayed to you or to any other user, and are never shared with a Business or any other third party.
How to disconnect or delete. You can disconnect an account at any time from Profile › Connections in AlleyBloom. Disconnecting immediately revokes and deletes the stored tokens and stops all further collection from that account. You may also revoke AlleyBloom's access from within Instagram, Facebook, or TikTok directly. For full details, including what we retain after a deletion request and why, see How to delete your data.
6. Your rights and choices
You may access, correct, or delete your information and manage location and marketing preferences through your account settings or by contacting us. If you are a California resident, you have additional rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act, including the rights to know, access, correct, and delete your personal information and to opt out of its “sharing” for cross-context behavioral advertising. We will not discriminate against you for exercising these rights.
7. Cookies and similar technologies
We use cookies and similar technologies to keep you signed in, remember your preferences, and measure and improve performance. You can manage cookies through your browser settings, though some features may not function properly without them.
8. Data retention
We retain personal information for as long as your account is active and as necessary to fulfill the purposes described in this Policy, comply with our legal obligations, resolve disputes, and enforce our agreements, after which we delete or de-identify it.
Access and refresh tokens for a connected social account are deleted as soon as you disconnect the account, when the platform tells us your authorization has been withdrawn, or when you delete your AlleyBloom account. Records of Collabs you completed — the offer, the Business, the content you delivered, and how it performed — are retained after a disconnection or deletion request where we need them to meet our contractual and legal obligations to the other party to that Collab, to resolve disputes, and to comply with applicable law.
9. Security
We implement reasonable administrative, technical, and physical safeguards designed to protect personal information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
10. Children’s privacy
The Service is not directed to individuals under 18 years of age, and we do not knowingly collect personal information from them.
11. Changes to this Policy
We may update this Policy from time to time. We will post the revised version with an updated effective date and, where the changes are material, provide reasonable notice.
12. Contact
For privacy questions or to exercise your rights, contact us at support@alleybloom.com.