Privacy Policy

Bloom (bloomhr.ai) is operated by 18098603 Canada Inc. ("Bloom," "we," "us"). This policy explains what personal information we collect, why we collect it, who we share it with, and the choices you have. Bloom is hiring software — handling people's information with care is not a side obligation of that job; it is the job.

Last updated: August 14, 2026

The short version

• Bloom is software that employers use to review job applications. If you applied for a job, the employer — not Bloom — makes every hiring decision. Bloom recommends; a human decides.
• We process candidate information (résumés, contact details, application answers) on the employer's behalf, only to help them run their hiring process.
• Résumé and application text is processed by our AI provider (Anthropic) to score how well an application matches the role's requirements. It is never used to train AI models, never sold, and never shared across companies.
• Our primary database is hosted in Canada.
• We use essential cookies only. No advertising trackers.
• You can ask us to access, correct, or delete your personal information at any time by emailing privacy@bloomhr.ai. We complete verified requests within 30 days.
• We keep candidate information for 24 months by default after a hiring process concludes; an employer can set anything from 12 to 48 months. Careers pages are for applicants aged 16 and over.

Who this policy covers — read the section that's about you

Bloom sits between two groups of people, and we owe each a different explanation:

Candidates — you applied for a job at a company that uses Bloom (through their careers page, or through their hiring system, e.g., Ashby), or you received a verification email from Bloom on an employer's behalf.

Customers — you or your company signed up to use Bloom to manage hiring.

Visitors — you're just browsing bloomhr.ai.

If you're a candidate

How your information reaches us

One of two ways: you applied on a careers page hosted by Bloom for the employer, or the employer connected Bloom to the applicant tracking system they already use, and your application flows to Bloom from there.

What we process

Your résumé (the file and the text extracted from it), your name and contact details, your answers to any application or screening questions the employer asked, links you provided (e.g., LinkedIn), and the employer's own records about your application (which role, which stage, outcomes the employer recorded).

What we do with it

We score your application against the specific requirements the employer defined for the role, and we show the employer that score together with the evidence it's based on — so a human being can make a faster, fairer, better-informed decision. Bloom never advances, rejects, or ranks anyone on its own authority: every decision about your application is made by a person at the employer. Bloom also never sends rejection emails.

Verification emails

Occasionally, on an employer's behalf, Bloom may send you one short email asking you to confirm or clarify a detail from your application (for example, years of experience with a specific tool). Answering is optional. Not answering is never treated as a negative answer.

What we never do with candidate data

We never sell it. We never use it to train AI models (ours or anyone's). We never pool it across companies — your application to Company A is invisible to Company B. We never contact you for marketing.

Your rights

Under Canadian privacy law (PIPEDA), you can access the personal information we hold about you, correct information that's inaccurate, and ask us to delete it. Email privacy@bloomhr.ai — or contact the employer you applied to, and we will act on their instruction. Note that because the employer runs the hiring process, some requests (like deleting an application the employer is legally required to retain) may need to be completed with them. Deletion includes removing your personal information from our integration delivery records. Where information is under a legal hold, that hold takes precedence and we will say so — see How long we keep information below. You can also complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca) if you believe we've handled your information improperly.

If you're a customer

Account information. Your name, work email, company name, and sign-in identity. Authentication is provided by Supabase Auth, in the same Canadian region as our database. Passwords are held by that provider in hashed form; Bloom never receives, stores, or can recover a readable password. New accounts must confirm their email address before the account becomes usable.

Integration credentials. If you connect Bloom to your hiring system (e.g., Ashby), the API key you provide is encrypted at rest with per-organization keys (AES-256-GCM); Bloom staff cannot read it back, and it is used only to perform the actions you configured.

Configuration and usage. The roles, criteria, stage mappings, and settings you create; and operational records of what Bloom did on your instruction (our write ledger — the record of what Bloom actually wrote to your systems and when).

Billing. Bloom does not currently collect payment information. When paid plans launch, payments will be handled by a payment processor and Bloom will not store card numbers; this policy will be updated to name the processor.

AI processing — what leaves our systems

Bloom is an AI product, and being specific about this matters:

• Anthropic (Claude). To score applications, we send résumé/application text and the role's requirements to Anthropic's API. Anthropic processes this to generate the score and evidence and, under our commercial agreement, does not use it to train their models.
• That is the only AI processing of candidate data. We do not use candidate or customer data to train models of our own.

Service providers we rely on

Each receives only what it needs to do its job:

• Supabase — our database host and our authentication provider (sign-in, password handling, email confirmation). Canada Central region — candidate and customer data is stored in Canada.
• Anthropic — AI processing, as described above (processed in the United States).
• Vercel — hosts our application and website.
• Inngest — runs background jobs (e.g., processing new applications); job events reference record IDs, with personal details staying in our database.
• Resend — delivers our transactional emails (e.g., verification emails).
• Cloudflare — DNS and email routing.

Some of these providers process data in the United States. Wherever your data is processed, it remains protected by our agreements with these providers and by this policy.

Cookies

Essential cookies only: the session cookie that keeps signed-in users signed in. Our website analytics are cookieless. No advertising or cross-site tracking cookies.

How long we keep information

Customer data. For as long as the account is active, then deleted within 30 days of account closure, except where law requires specific records to be kept.

Candidate data. By default we retain candidate information for 24 months after the hiring process for the role you applied to has concluded. An employer can configure a different period for their organization, anywhere from 12 to 48 months. We apply these periods through review and on request — we do not currently run an automated purge, and we would rather say so than imply a mechanism we haven't built. If you want your information removed sooner, ask us; see below.

Deletion requests. Email privacy@bloomhr.ai. We complete verified requests within 30 days. This includes your personal information in our integration delivery records — the copies of what an employer's hiring system sent us. Those records are what stop a duplicate application being created if that system re-sends the same event, so we don't delete the record itself: we remove the personal information inside it and leave a dated marker in its place.

Legal hold. If information is subject to a legal hold — because it is relevant to litigation, an investigation, or a regulatory obligation — the retention clock stops for as long as the hold is in force, and the hold takes precedence over a deletion request. If that is why a request can't be completed in full, we will tell you.

Security

Connections to Bloom are encrypted in transit. Integration credentials are encrypted at rest as described above. Access to production data is limited to what's necessary to operate the service.

Age

Bloom's customer accounts are for businesses and their authorized adult users. Careers pages may be used by applicants aged 16 and older; if you believe we hold information about someone younger, contact privacy@bloomhr.ai and we'll delete it.

Changes to this policy

If we make meaningful changes, we'll update this page and the date at the top, and announce significant changes to customers by email or in the app.

Contact

18098603 Canada Inc., operating as Bloom — privacy inquiries: privacy@bloomhr.ai