Privacy Policy

Last updated October 30, 2026

1. Introduction

This Privacy Policy explains how AlleyBloom, Inc. (“AlleyBloom,” “we,” “us,” or “our”) collects, uses, and discloses information in connection with the AlleyBloom website, applications, and related services (the “Service”).

2. Information we collect

• Account information, such as your name, email address, phone number, password, and account type (Business or Creator).
• Profile information, such as social media handles, audience metrics, sample content, business details, and general location.
• Collab information, such as offers, applications, communications, schedules, published-content links, and ratings.
• Connected social account information, which we receive from Instagram or TikTok if you choose to connect your account, as described in Section 5.
• Publicly available content information, such as information about a social media profile or post you identify to us by handle or link — including the post's caption and its publicly visible engagement counts — which we use to confirm that content was published and to report how it performed.
• Location information, which we collect with your permission to confirm in-person visits and surface nearby opportunities.
• Usage and device information, such as pages viewed, actions taken, IP address, and device and browser type.
• Payment information, which is processed by our third-party payment provider; we do not store complete payment card numbers.

3. How we use information

We use information to operate, maintain, and improve the Service; to match Businesses and Creators; to verify visits and published content; to detect and prevent fraud and abuse; to communicate with you; and to comply with our legal obligations.

4. How we disclose information

• To other users as necessary to facilitate a Collab — for example, a Business may view the profile of a Creator who applies.
• If you are a Creator, your posting record under our Posting rules: Businesses signed in to AlleyBloom see how many of your recent Collabs were late, and a Business you apply to sees whether your application is on hold because a post is overdue.
• To service providers that perform functions on our behalf, such as hosting, analytics, payment processing, and text message delivery, under appropriate confidentiality obligations.
• To comply with applicable law or to protect the rights, safety, and property of AlleyBloom, our users, or others.
• In connection with a merger, acquisition, financing, or sale of assets.

We do not sell your personal information.

5. Connected social accounts (Instagram and TikTok)

If you are a Creator, you may choose to connect your Instagram or TikTok account to AlleyBloom. Connecting is optional, and you can disconnect at any time. We access only data belonging to the account you connect, and only after you have granted us permission through Instagram's or TikTok's own authorization screen.

What we receive. When you connect an account, we receive from that platform:

• Account and profile information — the account's platform identifier, username, profile picture, verified status, and audience counts such as follower count and post or video count.
• Daily account figures — such as reach, views, profile views, new followers and interactions. We collect them once a day.
• Weekly TikTok figures for a business account — unique viewers, engaged audience, link-in-bio taps, and followers gained and lost.
• Audience breakdowns — the account's audience by age range, gender, country and city. We receive these as a count or a percentage for each group.
• Recent posts and their figures — the account's recent posts, and figures for each one such as views, reach, likes, comments, shares and saves. We collect them once a day.
• Content you deliver for a Collab — for the post or video you select as your deliverable, its identifier, permalink, caption or description, and thumbnail or cover image.
• Performance information for that content — engagement and reach measures such as views, likes, comments, shares, saves, and reach, refreshed periodically while the Collab's reporting period is open.
• Access credentials — the access and refresh tokens the platform issues so that we can make these requests on your behalf.

How we use it. We use this information to confirm that you own the account you have told us is yours, to let you select the content you published for a Collab from your own posts, to check that required disclosure tags are present in the caption, and to show the Business you collaborated with the content you delivered and how it performed. If you build an AlleyBloom Showcase, we also show the figures and posts you choose from a connected account on your public Showcase page, and only while you keep each one switched on. We show you the same information in your own dashboard.

While the connection is active, we keep a history of the daily account figures and the weekly TikTok figures, the most recent audience breakdown, and the most recent figures for each post published in the last 90 days. Businesses signed in to AlleyBloom see the follower count and post count of each account you connect, on your creator profile and on your applications. For a connected TikTok account, they also see on your creator profile your followers by age range, gender, country and city, and your daily followers, video views and profile views over the last 30 days.

What we do not do. We do not post, comment, message, or take any other action on your account. We do not access the accounts of people who have not connected them to AlleyBloom. We do not use social platform data for advertising or ad targeting, we do not sell or license it, and we do not use it to build profiles of anyone other than you.

Who we share it with. The content you deliver for a Collab and its performance information are shared with the Business that funded that Collab — that reporting is the purpose of the connection. The figures and posts you choose to show on your Showcase page are visible to anyone who visits it. Businesses signed in to AlleyBloom see the figures listed under How we use it. Beyond that, we share this information only with service providers that host and operate the Service on our behalf, and where required by law. We handle information obtained from Instagram in accordance with the Meta Platform Terms and Developer Policies, and information obtained from TikTok in accordance with the TikTok Developer Terms of Service.

What we show Businesses depends on what Instagram and TikTok allow. We may stop showing, or change, any of these figures when a platform changes its terms, policies, or access, or when you withdraw or do not renew your authorization.

What Businesses may do with it. Our Terms of Service allow a Business to use what it sees about you only to choose Creators for its campaigns and to review their results. A Business may not share it with anyone outside its own or its affiliates' staff, sell it, use it to build a profile or database of Creators, use it for advertising targeting, or put it into a third-party AI service. It may state totals of the view, like and comment counts shown publicly on the posts made for its Collabs, without identifying you. A Business must delete it within 30 days after its account is closed or its written agreement with us ends, or after its last Collab is completed if that is later, keeping only, for the Collabs you completed for it, the links to your posts, your handle, each post's performance figures and totals calculated from them. The limits above still apply to what it keeps.

How we protect it. Access and refresh tokens are encrypted at rest, are never displayed to you or to any other user, and are never shared with a Business or any other third party.

How to disconnect or delete. You can disconnect an account at any time: select Edit on your page, open Accounts & metrics, and select Disconnect… in the ⋮ menu of that account’s card. Disconnecting immediately deletes the access token we hold for that account and stops all further collection from it. It also removes the account from your profile (and your page, if you have one), and we delete the data we collected from the account within 30 days, except the Collab records listed in Section 9. If that account is the only one you have connected and your Showcase page is live, the same dialog first asks you to unpublish the page, then disconnects the account. You may also revoke AlleyBloom's access from within Instagram, Facebook, or TikTok directly; Section 9 says what happens then. For full details, including what we retain after a deletion request and why, see How to delete your data.

6. Text message alerts (SMS)

If you have a Business account, you can opt in to AlleyBloom text alerts in your notification settings. Only US mobile numbers can receive them.

What we collect. The mobile number you enter when you opt in, and your opt-in and opt-out choices.

How we use it. We use your mobile number only to send you AlleyBloom text alerts and to stop sending them when you opt out. We send one text to confirm that you opted in, then a text when a Creator applies to one of your campaigns and a text when a Creator sends you a message. We do not send marketing texts. To opt out, reply STOP to any text or select Opt out in your notification settings.

Who we share it with. We share your mobile number and the content of each text with Twilio, our SMS provider, only to deliver the texts. We do not sell or share your SMS opt-in data or personal information with third parties for marketing purposes.

7. Your rights and choices

You may access, correct, or delete your information and manage location and marketing preferences by contacting us at support@alleybloom.com. If you are a California resident, you have additional rights under the California Consumer Privacy Act, as amended by the California Privacy Rights Act, including the rights to know, access, correct, and delete your personal information and to opt out of its “sharing” for cross-context behavioral advertising. We will not discriminate against you for exercising these rights.

8. Cookies and similar technologies

We use cookies and similar technologies to keep you signed in, remember your preferences, and measure and improve performance. You can manage cookies through your browser settings, though some features may not function properly without them.

9. Data retention

We retain personal information for as long as your account is active and as necessary to fulfill the purposes described in this Policy, comply with our legal obligations, resolve disputes, and enforce our agreements, after which we delete or de-identify it.

Data we collect from a connected social account is kept while the connection is active. Except for the Collab records listed below, we delete it within 30 days after any of these:

• you disconnect the account;
• you remove AlleyBloom's access through Instagram, Facebook or TikTok, or ask for your data to be deleted through Instagram or Facebook;
• the platform confirms that our authorization for the account has ended;
• your AlleyBloom account is deleted.

When you remove our access through the platform, or the platform confirms that our authorization has ended, we also remove the account from your profile (and your page, if you have one). If it is the only account on your page and the page is live, we unpublish the page first. A TikTok authorization lasts one year from the day you connect, and only connecting again renews it. We remind you 30 days and 7 days before it ends.

Access and refresh tokens for a connected social account are deleted when you disconnect the account, when Instagram or Facebook tells us you removed our access or asked for your data to be deleted, when the platform confirms that our authorization has ended, and when your AlleyBloom account is deleted.

When you ask us to delete your account, we delete or clear your profile, uploaded files, connected-account access, notifications and analytics records, as described in How to delete your data. We finish within 30 days of your request and confirm by email. After you disconnect a social account, and after you delete your account, we keep:

• Messages in Collab threads, with the campaign and contract terms, kept as written so the other party keeps their record, including anything you typed in them. For a creator account the sender shows as “Deleted creator.” For a Business account the messages show the business name kept below.
• Records of Collabs you completed, including the content you delivered that was accepted, where we need them to meet our contractual and legal obligations to the other party, to resolve disputes, and to comply with applicable law.
• Performance numbers of the posts we keep, so a Business's reports do not change.
• A Business's name, category and area, unless the name is a person's name.
• Email opt-out lists, which hold your address so that we do not write to you again.
• A log of your deletion request for 24 months, with ids, dates and steps and no personal details.

We keep backups of our systems for up to 35 days. We do not edit backups. Your data leaves them as they expire. If we restore a backup, we delete your data again before the restored system is used.

Some copies are outside our reach or expire on their own: anonymous page views and error records that carry no account id, temporary caches and logs, and link previews and search results for a Showcase page, which other services drop the next time they see the page is gone and which we cannot remove sooner.

10. Security

We implement reasonable administrative, technical, and physical safeguards designed to protect personal information. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

11. Children’s privacy

The Service is not directed to individuals under 18 years of age, and we do not knowingly collect personal information from them.

12. Changes to this Policy

We may update this Policy from time to time. We will post the revised version with an updated effective date and, where the changes are material, provide reasonable notice.

13. Contact

For privacy questions or to exercise your rights, contact us at support@alleybloom.com.