This notice explains how UtilityBloom collects, uses, retains, and discloses information when you visit the site, use a browser tool, request a resource, make a purchase, or contact support.
Information we collect
- Information you provide. We may collect your email address, name if supplied, consent choice, and the contents of messages you send when requesting a resource, beginning checkout, purchasing a digital product, or contacting support.
- Purchase and fulfillment information. We may keep the product purchased, checkout or order identifiers, customer email, amount, currency, payment status, promotion code and discount terms, delivery status, and download records. Stripe processes payment-card and payment-account details. UtilityBloom does not store full payment-card numbers.
- Usage and technical information. We may record the page or tool used, event type, session identifier, referring page, experiment variant, timestamp, and transaction value. Hosting, network, and security providers may also process IP address, browser or device information, request details, and security logs.
- Private application content. When you explicitly save a signed-in Framefold project, we store its creative fields, linked production records, version history, checksums, and readiness state for your account. If you create a review invitation, we also store the reviewer's supplied name, comments, decisions, and version-bound approval receipts. Raw review and guest-session credentials are not stored; one-way digests are used to validate them.
Tool field values and project contents are processed in your browser unless you explicitly choose a server-backed action, such as privately synchronizing a signed-in project, requesting an optional AI pass, creating a guest review, or contacting support. Some tools let you save named scenarios or project records in your browser and export them as JSON or CSV files. Browser-local records remain on your device unless you choose to sync, submit, or share them. Workflow measurement events do not intentionally include project contents. Clearing site data removes browser-saved workspaces.
Quite Something Rooms stores room names, purposes, measurements, anchors, principles, possible purchases, and decision notes only in your browser. A Utility Bloom account and subscription control paid access, but Rooms does not cloud-synchronize or persist those room records. You can export a JSON backup or a readable room plan before clearing site data or changing devices.
Only after you explicitly request the optional Rooms visual adviser, the room image, candidate-item image, notes, and bounded metadata from a supplied public product link are processed in memory and sent to OpenAI to produce that requested comparison. Product-link retrieval is bounded and performed server-side. Utility Bloom does not persist the submitted images, fetched product-page content, or adviser response. OpenAI and network providers may process that transient request under their applicable terms and privacy practices.
How we use information
We use information to operate and secure the service, provide tools and requested resources, create and fulfill purchases, send receipts and download links, respond to support requests, prevent fraud and abuse, measure performance, improve the service, maintain business records, and comply with legal obligations.
How we disclose information
We may disclose information to categories of service providers that perform work for UtilityBloom, including hosting and infrastructure providers such as DigitalOcean, network and security providers such as Cloudflare, payment processors such as Stripe, and email-delivery providers such as Resend, and analytics providers such as Google Analytics. We may also disclose information to advisers, authorities, or other parties when reasonably necessary to protect rights and safety, investigate misuse, comply with law, or complete a business transfer.
When you expressly request an optional Framefold AI action, the relevant project text is sent to OpenAI to produce that requested result. Core project, Ripple Edit, review, readiness, versioning, and export features do not require that AI action.
When you expressly request the optional Quite Something Rooms visual adviser, the selected images and bounded supporting context are sent to OpenAI for that one comparison. The browser-local planning workspace continues to work without submitting images.
Optional ad measurement
When enabled, optional ad measurement is off until you choose Allow measurement in Privacy settings. The panel identifies the enabled recipients (Meta and/or TikTok). If you accept, we send those recipients a record of your first paid Framefold subscription for ad measurement and optimization: the payment amount and currency, product, payment time, a unique event identifier, a clean purchase-page URL, a hash of your account email, your browser's user agent, and the respective Meta or TikTok ad-click identifier when present. Hashing does not make an email anonymous. We do not send your project contents, card details, name, phone number or postal address through this integration.
Declining does not affect registration, payment or product access. Use Privacy settings on this page, the Framefold landing page or account pages to change your choice. Your choice applies to this browser. Withdrawal stops future sharing tied to this choice and removes unsent measurement payloads; it cannot retract a request already sent to an enabled recipient. We do not install advertising browser pixels or send automatic page-view or button events. Permission previously given for Meta alone does not authorize sharing with TikTok; when TikTok is enabled, the panel asks you to make a new choice.
We retain an essential first-party preference cookie for up to 30 days. In the running service, ad-click attribution and queued delivery data are retained for at most 30 days; successfully delivered payloads are removed sooner. Backups age out under our separate backup lifecycle. Minimal billing-linked records prevent duplicate acquisition reporting and are removed with the associated account records. Meta processes information it receives under its own privacy policy. TikTok processes information under its privacy policy.
Cookies, session identifiers, and tracking
The service may use first-party cookies, session identifiers, or similar browser storage for security, administration, analytics, experiment assignment, and user-requested local workspace storage. When enabled, Google Analytics may collect page views, session statistics, approximate location, referring information, and browser or device information, and may store a first-party analytics identifier. UtilityBloom configures the tag without Google Signals or advertising-personalization signals and does not use these technologies for third-party targeted advertising.
California Do Not Track disclosures
A Global Privacy Control signal keeps optional ad measurement off and revokes a previous choice for this browser when received. Because there is no uniform industry standard for browser Do Not Track signals, the public site does not respond differently when it receives such a signal. Service providers may independently recognize a browser or device across services for payment processing, fraud prevention, security, or service operation under their own privacy policies. Optional advertising measurement sharing is controlled separately as described above.
Retention and security
We retain information for as long as reasonably needed for the purposes described above, including fulfillment, accounting, fraud prevention, security, dispute resolution, and legal compliance. Information may remain in backups until those backups age out. We use reasonable administrative, technical, and organizational safeguards, but no system can guarantee absolute security.
Deleting an account removes its account identity, sessions, private content, local entitlements, subscription records, and checkout records. To preserve billing reconciliation, promotion limits, and immutable transaction audit integrity, we retain a minimal promotion-redemption record after deleting the customer and tenant records that connected it to a local identity. Any unfinished promotion reservation is released. The retained record contains no account email, name, project, or room content, but its immutable history may retain an orphaned internal tenant number and checkout or Stripe transaction identifiers needed to reconcile the transaction.
Framefold review invitations expire, may be redeemed only once, and may be revoked. Project revisions and approval receipts are retained as part of the account's audit history until the account data is deleted or retention is otherwise required by law.
Your choices and requests
A signed-in account export includes its local checkout and promotion redemption history. You may also use the contact email above to request access to, correction of, or deletion of personal information maintained by UtilityBloom. We may need to verify your identity and may retain information when required or permitted for security, recordkeeping, transaction completion, dispute resolution, or legal compliance.
Children
The service is not directed to children under 13, and UtilityBloom does not knowingly collect personal information from children under 13. A parent or guardian who believes a child submitted information may contact us to request deletion.
Policy changes
Material changes will be posted on this page with a revised effective date. When appropriate, we may also provide notice through the service or by email.
Contact
Send privacy questions or requests to the contact email listed above.
UtilityBloom is operated by Tarell Flowers.