Privacy Policy
Summary
We collect the information we need to provide ChalkBloom and nothing else. We don't sell your personal data. We don't share it with third parties except as required to operate the Service or comply with the law.
What we collect
- Account information — name, email address, billing details, and the password hash you set at sign-up.
- Service usage data — the content you create in ChalkBloom, the actions you take, and the dates/times of those actions.
- Technical metadata — IP address, browser version, and OS, collected automatically by our servers and used for security and reliability.
- Support correspondence — messages you send us via email or in-product chat.
How we use it
We use your information to:
- Provide and improve the Service.
- Communicate with you about your account and the Service.
- Detect and prevent fraud, abuse, and security incidents.
- Comply with our legal obligations.
What we don't do
- We don't sell your personal data.
- We don't share your data with advertisers or analytics brokers.
- We don't read the content you create in ChalkBloom except (a) when you ask us to (e.g. support tickets) or (b) where required by law.
How we share data
We share data with third parties only in these limited circumstances: (a) sub-processors that help us run the Service (cloud hosting, payment processing, transactional email) — bound by data-processing agreements; (b) when required by valid legal process; (c) to protect the rights, property, or safety of ChalkBloom, our users, or others.
Where we store it
ChalkBloom data is stored on servers located in Australia, with regional copies for redundancy. We use encryption at rest and in transit, and review access controls regularly.
Your rights
You can access, correct, delete, or export your personal data at any time from your account settings, or by emailing hello@chalkbloom.com. We respond to verified requests within 30 days. If you're in a jurisdiction with additional rights (EEA / UK GDPR, California CCPA, Australia Privacy Act), you can exercise those rights via the same channel.
Retention
We retain account data while your account is active and for 30 days after deletion. After that, account data is purged. Audit logs and security events are retained for up to 12 months. Aggregated, de-identified analytics may be retained indefinitely.
Children
ChalkBloom is not directed to children under 13. If you become aware that a child has provided us with personal information without verifiable parental consent, please contact us.
Changes
We may update this Privacy Policy. Material changes are notified at least 30 days before they take effect. Continued use of the Service after the effective date constitutes acceptance of the revised Policy.
Contact
Questions or to exercise your rights: hello@chalkbloom.com.