Privacy Policy
Last updated: August 17, 2026
1. Information we collect
When a sender creates a bouquet, Blooming Love stores the sender name, recipient name, message, and selected bouquet customization so the paid recipient experience can be rendered. An email address is optional and is stored with the payment record when provided. We do not ask the browser for a phone number. Payment metadata such as Razorpay order/payment references, amount, currency, status, and webhook audit information is retained for fulfillment, support, fraud prevention, and reconciliation. Card or bank credentials are handled by Razorpay and are not stored by Blooming Love.
2. How the information is used
We use this information to create the bouquet, verify and reconcile payment, provide the share link, operate the recipient experience, prevent duplicate fulfillment, respond to support requests, and investigate payment problems. Blooming Love does not sell romantic messages or use them for targeted advertising.
3. Public-by-link sharing model
A bouquet link is private by possession, not an account login. Anyone who obtains the high-entropy link can view that one paid bouquet. Keep the link private when the message is personal. The recipient does not need an account. The public retrieval mechanism returns display fields only and excludes payment and buyer metadata.
4. Service providers
Razorpay processes payments and provides payment-status information. Supabase hosts the database and server functions used for application operations. Vercel hosts the web application and may provide privacy-sensitive analytics only on non-payment, non-recipient, non-share, and non-admin marketing routes. The current product uses a locally generated ambient melody; a separate music provider is not used.
5. Analytics
Vercel Analytics is used only on these public marketing and content routes: the homepage, digital bouquet, virtual flowers, long-distance relationship gifts, online romantic surprise, send flowers online, about, and contact pages. It is excluded from bouquet creation, preview, payment, payment success, payment pending, payment failure, share, recipient bouquets, admin, and policy or delivery pages. Application events do not include bouquet UUIDs, payment IDs, order IDs, names, email addresses, messages, or recovery tokens. This page does not make a broader anonymity claim than the current implementation supports.
6. Retention and deletion
We do not promise a fixed retention duration in this policy. Bouquet and payment records are retained as needed to operate the service, support payment reconciliation, and respond to legitimate requests. To request deletion or redaction of a bouquet or associated personal information, email hello@bloominglove.site with enough context for us to identify the record without sending a recovery token. Requests are handled manually; deletion may be limited where records must be retained for payment, fraud, or legal reasons.
7. Contact
Questions or privacy requests can be sent to hello@bloominglove.site.