Privacy policy

Account details. Your name, email address and a hashed password. We never store a password in a form we can read.

What you send us. Anything you write in the contact form or in support correspondence, including whatever you choose to include in it.

A record of administrative actions. Who changed what and when — a deploy, a DNS record, a database restore. This is a security record, and it names the person who acted.

Operational data about the infrastructure we run for you. Server metrics, uptime check results, certificate expiry dates, deployment logs and database sizes. This is about machines rather than people, but a deployment log can carry a name, so it is covered here too.

Web server request logs. IP address, timestamp, the page requested. Ordinary server logs, kept for security and diagnosis.

Account details and operational data are processed to provide the service you have asked us to provide — performance of a contract. There is no version of managing a server that does not involve holding the details of it.

Administrative records, request logs and monitoring are processed for security and to keep the service running — our legitimate interest in operating a platform other people depend on, and yours in it not being tampered with.

We do not profile you, we do not make automated decisions about you, and we do not use your data to train models.

Three processors, each doing one thing:

• DigitalOcean — the servers and DNS your applications run on.
• Wasabi — object storage holding database backups and files.
• Resend — delivery of transactional email such as alerts and password resets.

We do not sell personal data, share it with advertising networks, or pass it to anyone else except where the law requires it. Some of these providers operate outside India; where that happens, the transfer relies on the provider's standard contractual terms.

• Database backups: 30 days, then deleted automatically.
• Uptime check history: 31 days.
• Administrative records: for as long as the account is open, as a security record.
• Support correspondence: for as long as it is useful to the relationship, and deleted on request.
• Account details: until you close the account. After that we remove them within 30 days, except anything we must keep for tax or legal reasons.

You can ask us for a copy of the personal data we hold about you, to correct it, to export it, or to delete it. You can object to processing based on legitimate interests, and you can complain to a supervisory authority.

Write to support@bloomneo.com. We answer within 30 days and will say so if a request needs longer. There is no charge, and we will not make you explain why.

A session cookie that keeps you signed in, and nothing else. No analytics, no advertising, no third-party trackers — so there is nothing to consent to and no banner asking you to. The cookie policy says the same thing at more length.

When the way we handle data changes, this page changes with it and the date at the top moves. If a change materially affects you — a new processor, a longer retention — we will tell account holders by email rather than relying on you to re-read it.