Privacy Policy

Effective date: June 14, 2026 · Last updated: June 14, 2026

BLOOM RISE MEDIA LLC (“Bloom Rise Media,” “we,” “us,” or “our”) operates DialoChat, a business messaging automation platform that integrates with the WhatsApp Business Platform and Meta Platforms (Facebook Messenger and Instagram). This Privacy Policy explains what personal data we process, why, who we share it with, and the choices and rights you have. It is written to comply with the EU General Data Protection Regulation (GDPR), the UK GDPR, and applicable U.S. state privacy laws, and to meet Meta’s Platform Terms and Developer Policies.

1. Who we are and how to contact us

You can reach us at:

• Email: contact@bloomrisemedia.com
• Phone: 571 733 3725
• Mailing address: Fairfax, Virginia 22030, United States

You can also contact our Data Protection Officer directly — see our Data Protection Officer page.

2. Our role: controller and processor

• As a controller: for the personal data of the business customers who create a DialoChat account (account and billing data, and how they use the platform).
• As a processor / “Tech Provider”: for the messaging data we process on behalf of a business customer when they connect their own WhatsApp Business or Meta account. In that case the business customer is the controller of their end-customers’ data, and we process it only on their documented instructions.

3. Information we process

3.1 Account information (you provide)

• Name, business name, email address, and password or login token used to access DialoChat.
• Business details and the identifiers of the WhatsApp Business or Meta assets you choose to connect.
• Billing contact information (full card data is handled by a third-party payment processor, not stored by us).

3.2 Messaging data (processed on behalf of business customers)

• WhatsApp Business phone numbers and connected account identifiers.
• Message content and conversation history exchanged through the connected channels.
• Contact metadata (such as the names and phone numbers of the business’s own customers).
• Message and delivery events (sent, delivered, read, failed) and template/status metadata.

3.3 Information collected automatically

• Device and log data: IP address, browser type, timestamps, and pages or actions within the platform.
• Strictly necessary cookies for authentication and session security.

4. How we use information and legal bases

• Provide the Service (performance of a contract): connect accounts, send and receive messages, automate workflows, and deliver delivery/status reporting.
• Account management and support (performance of a contract): authenticate users, respond to requests, and process payments.
• Security and abuse prevention (legitimate interest and legal obligation): protect the platform and its users.
• Service communications (legitimate interest / consent where required): operational notices and, where you have opted in, product updates.
• Legal compliance (legal obligation): meet our obligations under applicable law.

Where we rely on consent, you may withdraw it at any time without affecting prior processing.

5. How we share information

We do not sell personal data. We share it only as needed to operate DialoChat:

• Meta Platforms, Inc.: we exchange messaging data with the WhatsApp Business Platform and Meta APIs to send and receive the messages you direct through the Service.
• Service providers (processors): infrastructure, hosting, and communications providers that process data on our behalf under contract and on our instructions. We will provide the current list on request.
• Business customers: messaging data we process on behalf of a business is accessible to that business, which is its controller.
• Legal and safety recipients: regulators, courts, or law enforcement where required by law or to protect rights and safety.
• Successors: a successor entity in connection with a merger, acquisition, or sale of assets, subject to this Policy.

6. Meta Platform data and Limited Use

When you connect a WhatsApp Business account, Facebook Page, or Instagram business account, we act as a Tech Provider on your behalf under Meta’s Platform Terms. We use data obtained through Meta’s platforms only to provide and improve the messaging features you have requested. We do not sell this data, do not use it to build advertising profiles for unrelated third parties, do not transfer it to data brokers, and do not use it for any purpose outside the permissions you granted at connection time. You can disconnect an integration at any time, and you or your end users can request deletion as described in our Data Deletion Instructions.

7. International data transfers

We are based in the United States, and personal data may be processed there and in other countries where our providers operate. Where we transfer personal data from the European Economic Area, the United Kingdom, or Switzerland, we rely on Standard Contractual Clauses or another lawful transfer mechanism.

8. Data retention

We retain personal data only for as long as necessary to provide the Service, for the duration of the relevant business customer’s engagement, and to meet legal obligations. Messaging data processed on behalf of a business is retained according to that business’s instructions and deleted on request. You may ask us to delete your data at any time — see Data Deletion Instructions.

9. Security

We implement appropriate technical and organizational measures designed to protect personal data against unauthorized access, loss, or misuse, including access controls, encryption in transit, and least-privilege practices. No method of transmission or storage is completely secure, but we work to maintain a strong standard of protection.

10. Your rights

Depending on where you live, you may have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Delete your data (see Data Deletion Instructions).
• Restrict or object to processing.
• Receive a portable copy of your data.
• Withdraw consent where processing is based on consent.
• Lodge a complaint with a supervisory authority.

To exercise any of these rights, email contact@bloomrisemedia.com with the subject line “Privacy Request.” We respond within 30 days (up to 45 days for complex requests, with notice) and may need to verify your identity first. If your request concerns data we process on behalf of a business customer, we will refer you to, or coordinate with, that business as the controller.

11. Children’s privacy

DialoChat is intended for businesses and is not directed to children. We do not knowingly collect personal data from children under 13 (or under 16 in the EEA/UK). If you believe a child has provided us personal data, contact us and we will delete it.

12. Changes to this Policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page, and the “Last updated” date above always reflects the most recent revision.

13. Contact

BLOOM RISE MEDIA LLC
Attn: Privacy
Fairfax, Virginia 22030
United States
Email: contact@bloomrisemedia.com
Phone: 571 733 3725