Privacy Policy

At Exabloom, we value your privacy and are committed to protecting your personal data. This Privacy Policy outlines how we collect, use, and protect your information when you use our website and services.

1. Information We Collect

We collect personal data from you when you interact with our website and services. This may include:

• Personal Information: Name, email address, phone number, and company details.
• Usage Data: Information about how you use our website, including IP address, browser type, and activity logs.
• Lead Data: Information uploaded by our customers, including contact details and communication records of leads.

2. How We Use Your Information

We use the information we collect for the following purposes:

• To provide and maintain our services.
• To improve our platform and enhance user experience.
• To process payments and manage subscriptions.
• To communicate with you about updates, new features, and customer support.
• To analyze usage trends and monitor service performance.
• To comply with legal obligations.

3. How We Protect Your Information

We implement industry-standard security measures to protect your data, including encryption, secure servers, and regular vulnerability assessments. While we strive to protect your personal data, no method of transmission over the Internet or electronic storage is completely secure, and we cannot guarantee its absolute security.

4. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes outlined in this Privacy Policy or as required by law. If you request the deletion of your data, we will promptly remove it, subject to any legal obligations we may have.

5. Your Rights Under PDPA

Under the Personal Data Protection Act (PDPA) in Singapore, you have the following rights:

• Right to Access: You may request access to the personal data we hold about you.
• Right to Rectification: You may request corrections to any inaccurate or incomplete data we hold about you.
• Right to Erasure: You may request the deletion of your personal data, subject to legal requirements.
• Right to Withdraw Consent: You may withdraw your consent for us to use your data at any time.

To exercise any of these rights, please contact us at admin@exabloom.com.

6. Sharing of Information

We do not sell your personal data to third parties. We may share your data with trusted service providers who assist us in operating our platform, processing payments, and providing customer support. These providers are obligated to protect your data and use it only for the purposes for which it was disclosed.

We may also disclose your information:

• To comply with legal obligations.
• To protect the rights, property, or safety of Exabloom, our users, or the public.

7. Cookies and Tracking Technologies

Exabloom uses cookies and similar tracking technologies to enhance your experience on our website. Cookies are small data files stored on your device that help us analyze web traffic, remember your preferences, and improve our services.

You can choose to disable cookies through your browser settings, but doing so may limit your ability to use certain features of our website.

8. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices of these sites. We encourage you to review the privacy policies of any third-party websites you visit.

9. Google API Services

Exabloom offers an optional Google Calendar integration. A user may connect their own Google account so that appointments booked in Exabloom appear on their Google Calendar, and so that their existing commitments prevent double-booking. The integration is optional, and is connected by each user individually.

What we access

When you connect a Google account, we request only these permissions:

• See and edit events on your calendars (calendar.events) — to create, reschedule and cancel the appointments you book in Exabloom, and to read the times at which you are already busy.
• See a list of your calendars (calendar.calendarlist.readonly) — so you can choose which calendars to sync.
• Your email address (openid, userinfo.email) — to show you which Google account is connected.

We do not request access to Gmail, Google Drive, Google Contacts or any other Google service.

What we store, and what we deliberately do not

When Exabloom reads your calendar to work out when you are busy, it records only the start time, end time and status of each event, together with an internal identifier.

We do not read, store or transmit the titles, descriptions, locations, attendees, attachments or conferencing details of your existing Google Calendar events. That information is discarded at the moment your calendar is read, and never reaches our database or our logs. Exabloom knows when you are busy, and never what you are busy with.

Events that Exabloom itself creates on your calendar contain the appointment details you entered in Exabloom.

Your Google access and refresh tokens are encrypted at rest using AES-256-GCM.

Artificial intelligence and Limited Use

Exabloom uses AI features, including an AI assistant that can propose and book appointment times on your behalf. Where that assistant needs to know your availability, it receives only free/busy time ranges derived from your calendar — never the content of your calendar events.

Specifically, we do not use, transfer or sell any Google user data — raw, aggregated, anonymised or derived — to create, train or improve any generalised or foundational artificial intelligence or machine learning model. Our AI features are provided by Google and OpenAI under paid, first-party API agreements whose terms do not permit training on the data we send.

Sharing

We do not sell Google user data, and we do not share it with third parties for advertising or for model training. It is used solely to provide the calendar features you have enabled.

Retention and removal

You can disconnect your Google account at any time from Exabloom’s settings. Disconnecting revokes Exabloom’s access with Google, deletes the events Exabloom created on your calendar, and permanently deletes the stored tokens and busy-time records from our systems.

You can also revoke Exabloom’s access directly at myaccount.google.com/permissions.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any significant changes by updating the “Last Updated” date at the top of this page. Your continued use of our services after any changes constitutes your acceptance of the new Privacy Policy.

11. Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us at: