Privacy Policy
Purpose: This Privacy Policy outlines the standards and procedures by which BLOOMKARE INC, a corporation organized and existing under the laws of the State of Delaware (hereinafter referred to as the "Company"), safely collects, uses, and disposes of members' personal information, TikTok social data, and physical fulfillment data provided for the use of the platform. This policy is established in strict compliance with applicable laws, including the California Consumer Privacy Act (CCPA), other federal and state consumer privacy laws within the United States, and the Children's Online Privacy Protection Act (COPPA).
Article 1. (Categories of Personal Information Collected and Methods of Collection) To provide the services, the Company collects the following mandatory information:
- [Account & Profile Data] Name, email address, date of birth (for the purpose of verifying age 18 or older), gender, delivery address, and phone number. Additionally, if the Company issues rewards exceeding a certain annual threshold (typically $600), the Company may collect additional tax-related information, such as an IRS Form W-9, to satisfy Internal Revenue Service (IRS) reporting requirements.
- [Social Media Data] Upon linking a member's TikTok account via OAuth, the Company collects metadata including, but not limited to, the TikTok handle (ID), follower count, average views, and engagement rate. The Company does not directly collect or store the member's TikTok password; it securely stores only the OAuth token for authentication purposes.
- [Fulfillment Data] Upon application and approval for a campaign, the Company collects the member's actual residential address, zip code, and contact information necessary for the dispatch of seeding products.
Article 2. (Purposes of Use of Personal Information) The collected personal information shall be strictly utilized only for the following limited purposes:
- [Service Provision and Operation] Determining the creator's niche and tier, verifying eligibility for campaign applications, processing product fulfillment and real-time tracking via logistics system integration (e.g., ShipStation API), and conducting related tax reporting.
- [Platform Security and Risk Management] Detecting and preventing abusive activities, such as the creation of multiple accounts or the submission of fraudulent delivery addresses, and tracking contract performance, including the enforcement of liquidated damages.
Article 3. (Data Retention, Disposal, and the Right to Delete) - [Exercise of the Right to Delete] In accordance with the California Consumer Privacy Act (CCPA) and other regulations guaranteeing the privacy rights of members residing in the United States, members may request the permanent deletion of their personal information at any time via the "Settings" menu within the platform.
- [Disposal Procedures] Upon a member's deletion request, sensitive data, including physical addresses and contact information collected for fulfillment purposes, shall be immediately subjected to an irrecoverable hard delete from the database (DB) or strictly anonymized (masked).
- [Exceptions to Deletion] Notwithstanding the foregoing, if, at the time of the deletion request, there are unfulfilled obligations related to an ongoing campaign or pending legal disputes, such as claims for No-show Liquidated Damages, the Company reserves the right to lawfully retain the relevant data until such disputes and debt obligations are fully and finally resolved.
Article 4. (Protection of Children's Privacy / COPPA Compliance) As the Company's services are predicated on legally binding contracts (including, but not limited to, agreement to the Terms and Conditions and claims for liquidated damages), the Company strictly complies with the U.S. Children's Online Privacy Protection Act (COPPA).
The Company does not knowingly collect or process the personal information of minors under the age of 18. If it is discovered that a member is under the age of 18 or has falsified their age, the Company shall immediately and permanently suspend the respective account and dispose of all related data without undue delay.