Privacy Policy

Last Updated: February 19, 2026

BlooTrue is operated by BlooLab Technologies Inc., a federally incorporated corporation in Canada ("BlooTrue," "we," "us," or "our"). We operate the BlooTrue platform at blootrue.com and app.blootrue.com (the "Service").

This Privacy Policy explains how we collect, use, disclose, and protect information when you use the Service.

By using BlooTrue, you agree to the collection and use of information in accordance with this Privacy Policy.

Information We Collect

1.1 Information You Provide

  • Account Information: Email address, business name, password, and login credentials.
  • Third-Party Login Data: If you sign in using Google or Facebook, we receive your name, email address, and profile picture via OAuth authentication.
  • Business Information: Business name, logo, brand assets, business profile data, and connected platform links.
  • Customer Contact Information: Email addresses and phone numbers you upload or input for review request campaigns.
  • Payment Information: Payment processing is handled securely by Stripe. We do not store full credit card numbers.
  • Communications: Messages, support inquiries, or feedback sent to us.

1.2 Information Collected Automatically

  • Usage data (pages visited, features used, timestamps)
  • Device information (IP address, browser type, operating system)
  • Log data and system diagnostics
  • Cookies and similar technologies used for authentication and session management

We do not use advertising or third-party tracking cookies.

1.3 Information from Connected Platforms

When you connect Google, Yelp, Facebook, or similar platforms, we may access:

  • Public review content
  • Ratings and review timestamps
  • Reviewer names (as publicly displayed)
  • Business profile information
  • OAuth tokens necessary for integration

We do not access private messages, personal social posts, or unrelated account data.

Legal Basis for Processing (GDPR & International Users)

If you are located in the European Economic Area (EEA), United Kingdom, or similar jurisdictions, we process personal data under the following legal bases:

  • Performance of a contract (to provide the Service)
  • Legitimate interests (improving and securing the Service)
  • Consent (for marketing communications)
  • Legal obligations

How We Use Information

We use collected information to:

  • Provide and maintain the Service
  • Aggregate and display business reviews
  • Generate AI-powered review response suggestions
  • Send review request emails and SMS messages on your behalf
  • Process payments and manage subscriptions
  • Provide analytics and reporting
  • Detect fraud, abuse, and security risks
  • Comply with legal obligations

SMS & Communication Compliance

If you use BlooTrue to send SMS review requests:

  • You represent and warrant that you have obtained all required consent under applicable laws, including the TCPA (United States), CASL (Canada), and other applicable regulations.
  • You are responsible for maintaining lawful opt-in records.
  • You must include clear opt-out instructions (e.g., "Reply STOP to unsubscribe").
  • BlooTrue is not responsible for unlawful or improper messaging practices conducted by users.

AI Processing Disclosure

BlooTrue uses artificial intelligence technologies to generate review responses and related content. Review content and related data may be temporarily processed by third-party AI service providers strictly to deliver the Service.

We do not use customer data to train public AI models.

AI-generated responses are suggestions and may require user review before publication.

How We Share Information

We do not sell personal data.

We may share information with:

  • Cloud hosting providers
  • Email and SMS delivery providers
  • Payment processors (Stripe)
  • AI processing providers
  • Professional advisors (legal, accounting)
  • Government authorities when legally required
  • Successors in a merger, acquisition, or asset sale

All service providers process data under contractual confidentiality and security obligations.

Data Retention

  • Account data is retained while your account remains active.
  • Upon account deletion, personal data will be deleted within 30 days unless required for legal compliance.
  • Imported review data is retained only while integrations remain active.

International Data Transfers

Because BlooTrue operates globally, personal data may be processed in countries outside your residence. We implement appropriate safeguards consistent with applicable data protection laws.

Your Rights

Depending on your jurisdiction, you may have rights to access, correct, delete, restrict or object to processing, request portability, or withdraw consent.

To exercise rights, contact: info@bloolab.com

We may require identity verification before processing requests.

Data Processing Agreement (DPA)

Business customers subject to GDPR or similar regulations may request a Data Processing Agreement (DPA) by contacting info@bloolab.com.

Security

We implement TLS/SSL encryption, secure password hashing (bcrypt), token-based authentication, and role-based access controls. No system is completely secure, and we cannot guarantee absolute security.

Children's Privacy

The Service is not intended for individuals under 16 years of age.

Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be communicated via email or through the Service.

Contact Information

BlooTrue
Operated by BlooLab Technologies Inc. (Canada)
Email: info@bloolab.com
Website: blootrue.com