Skip to main content
Effective April 18, 2025

Privacy Policy

Futurebloom.ai is operated from Ontario, Canada. This policy explains how we collect, use, and protect your personal information in accordance with PIPEDA.

Introduction

Futurebloom.ai ("Futurebloom," "we," "our," or "us") is operated from Ontario, Canada. We provide Answer Engine Optimization (AEO) services to local businesses through our online platform at futurebloom.ai.

This Privacy Policy explains how we collect, use, disclose, and protect personal information when you use our website and services. By accessing futurebloom.ai or creating an account, you agree to the terms of this Privacy Policy.

We are committed to complying with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable Ontario privacy legislation.

Information We Collect

2.1 Information You Provide Directly

When you sign up for or use our services, we collect:

  • Name and email address
  • Business name, address, phone number, and website URL
  • Billing and payment information (processed securely through Stripe)
  • Business details including vertical, service area, competitors, and selling points provided during onboarding
  • Login credentials for your Futurebloom account

2.2 Third-Party Account Credentials

To deliver our AEO services, we request access to the following third-party accounts:

  • Google account — via OAuth, to access your Google Business Profile and Google Search Console
  • WordPress — via Application Password, to publish content to your website on your behalf

These credentials are encrypted using AES-256-GCM encryption before storage. We access these accounts only for the purpose of delivering the services you have engaged us to provide. You may revoke this access at any time through your account settings or directly through the respective third-party platform.

2.3 Payment Information

All payment transactions are processed by Stripe, Inc. We do not store your full credit card number, CVV, or banking details on our servers. Stripe's handling of your payment data is governed by the Stripe Privacy Policy.

2.4 Website Usage Data

When you visit futurebloom.ai, we automatically collect certain technical data including:

  • IP address and general geographic location
  • Browser type, device type, and operating system
  • Pages visited, time spent, and referring URL
  • Cookies and similar tracking technologies

We use Google Analytics to analyze website traffic and usage patterns. You can opt out of Google Analytics tracking by installing the Google Analytics Opt-out Browser Add-on.

How We Use Your Information

We use the information we collect for the following purposes:

  • To create and manage your account and deliver the services you have subscribed to
  • To optimize your Google Business Profile, Search Console, and website content on your behalf
  • To process payments and manage billing
  • To communicate with you about your account, service updates, and monthly reports
  • To monitor and improve service quality and platform performance
  • To comply with legal obligations
  • To detect and prevent fraud or misuse of our platform

We do not sell, rent, or trade your personal information to third parties for their marketing purposes.

How We Share Your Information

We share your information only in the following limited circumstances:

4.1 Service Providers

We work with trusted third-party service providers who assist in delivering our services, including:

  • Stripe — payment processing
  • Google — OAuth authentication, Business Profile management, and Search Console access
  • Supabase — secure database and authentication infrastructure
  • Vercel — platform hosting
  • Resend — transactional email delivery

These providers are contractually required to protect your information and may only use it for the purpose of providing services to us.

4.2 Subcontractors

Our vetted subcontractors who perform AEO work on your account may have access to your business information, brief, and Google and WordPress credentials solely for the purpose of delivering your monthly services. They are bound by confidentiality obligations.

4.3 Legal Requirements

We may disclose your information if required to do so by law, court order, or governmental authority, or if we believe in good faith that such disclosure is necessary to protect our rights, your safety, or the safety of others.

4.4 Business Transfers

In the event of a merger, acquisition, or sale of all or substantially all of our assets, your information may be transferred to the acquiring entity. We will notify you of any such change via email or a prominent notice on our website.

Data Retention

We retain your personal information for as long as your account is active or as necessary to provide you with our services. Upon cancellation of your subscription, we will retain your data for a period of 90 days in case of reactivation, after which it will be deleted or anonymized, except where retention is required by law.

Third-party credentials (Google OAuth tokens and WordPress application passwords) are deleted from our systems within 30 days of account cancellation.

Security of Your Information

We take the security of your personal information seriously and implement appropriate technical and organizational measures including:

  • AES-256-GCM encryption for all stored third-party credentials
  • Encrypted data transmission via HTTPS/TLS
  • Role-based access controls limiting who can view client data within our platform
  • Regular security reviews of our infrastructure

Despite these measures, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security but will notify you of any breach affecting your personal information as required by applicable law.

Your Privacy Rights

As a resident of Canada, you have the following rights with respect to your personal information:

  • Access — you may request a copy of the personal information we hold about you
  • Correction — you may request that we correct inaccurate or incomplete information
  • Withdrawal of consent — you may withdraw consent to our processing of your information at any time, subject to legal or contractual restrictions
  • Deletion — you may request deletion of your personal information, subject to our legal retention obligations
  • Portability — you may request your data in a structured, commonly used format

To exercise any of these rights, please contact us at the address provided in Section 10. We will respond to your request within 30 days.

Cookies and Tracking

We use cookies and similar tracking technologies to enhance your experience on our platform. Cookies are small data files stored on your device that help us remember your preferences and understand how you use our site.

We use the following types of cookies:

  • Essential cookies — required for the platform to function, including authentication and session management
  • Analytics cookies — used by Google Analytics to understand usage patterns and improve our services

You can control cookies through your browser settings. Disabling essential cookies may affect your ability to use the platform. Disabling analytics cookies will not affect platform functionality.

Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our handling of your personal information, please contact us at:

Futurebloom.ai

Ontario, Canada

privacy@futurebloom.ai

We will acknowledge your inquiry within 5 business days and aim to resolve all requests within 30 days.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we do, we will revise the Effective Date at the top of this page and, where the changes are material, notify you by email or through a notice on the platform. Your continued use of Futurebloom.ai after any changes constitutes your acceptance of the updated Privacy Policy.

Governing Law

This Privacy Policy is governed by the laws of the Province of Ontario and the federal laws of Canada applicable therein, including the Personal Information Protection and Electronic Documents Act (PIPEDA). Any disputes arising from this Privacy Policy shall be resolved in the courts of Ontario.