Privacy Policy

Last updated: June 11, 2026

1. Who We Are

Balloomania ("we," "us," or "our") is a balloon decoration service based in Sacramento, California. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website balloomania.com or use our services.

2. Information We Collect

Information You Provide

  • Name, email address, phone number (inquiry form, account registration)
  • Event details: type, date, budget range, venue, special instructions
  • Delivery addresses (client portal)
  • Messages and notes submitted through forms or chat
  • Date of birth (if provided for birthday reminders, optional)

Information Collected Automatically

  • Device and browser information (type, operating system, screen size)
  • IP address and approximate location
  • Pages visited, time spent, referring URLs
  • Cookies and similar tracking technologies (see Section 5)
  • Ad-platform click identifiers (gclid, gbraid, wbraid, fbclid, msclkid, twclid) for conversion attribution

Phone Call Recording & AI Assistant

When you call our published phone number, your call may be answered by an automated AI assistant (powered by Bland AI) and may be recorded for quality assurance and lead-capture purposes. You will be notified of both at the start of the call. If you do not wish to interact with an AI or be recorded, you may hang up at any time, or request a human callback. We retain recorded calls and AI-generated transcripts for up to 90 days for follow-up, training, and dispute resolution.

Payment Information

We do not store credit card numbers or bank account details. All payments are processed securely by our third-party payment processors, Stripe and PayPal, which are PCI-DSS compliant. We store only transaction references (invoice IDs, payment status) necessary for order management.

3. How We Use Your Information

  • Process and fulfill your orders and inquiries
  • Send order confirmations, quotes, invoices, and delivery updates
  • Communicate about your account, including magic link authentication emails
  • Administer our Bubbles Rewards loyalty program and referral program
  • Send promotional communications, birthday greetings, and holiday offers (only with your consent)
  • Send SMS notifications and reminders (only with your explicit TCPA consent)
  • Improve our website, services, and customer experience
  • Comply with legal obligations

4. Third-Party Service Providers

We share your information with the following trusted service providers:

  • Supabase — Database hosting and authentication (stores account data securely)
  • Stripe — Payment processing (PCI-DSS Level 1 compliant)
  • PayPal — Alternative payment processing
  • Resend — Transactional and marketing email delivery
  • Google Analytics (GA4) — Website usage analytics (anonymized, with your consent)
  • Microsoft Clarity — Session recording and heatmaps (with your consent, sensitive fields masked)
  • Tawk.to — Live chat support (chat transcripts stored by Tawk.to)
  • Twilio — SMS notifications, inbound phone routing, and call recording (only with your TCPA consent for SMS)
  • Bland AI — AI-powered inbound phone assistant that captures lead details and qualifies callers. Disclosed at the start of every call.
  • Google Ads & Enhanced Conversions — Hashed email/phone shared with Google so paid-traffic conversions can be attributed to the originating click. SHA-256 hashed and matched server-side; raw values are not exposed to Google.
  • Anthropic (Claude AI) — AI-generated content descriptions (no personal data shared)

We do not sell, rent, or trade your personal information to third parties for marketing purposes.

5. Cookies and Tracking

We use cookies and similar technologies for:

  • Essential cookies — Required for authentication and site functionality (always active)
  • Analytics cookies — Google Analytics and Microsoft Clarity to understand how visitors use our site (require your consent)
  • Chat cookies — Tawk.to live chat functionality (require your consent)

When you first visit our site, a cookie banner will ask for your consent. You can change your preferences at any time by clearing your browser cookies and revisiting the site. Analytics and chat tools will not load until you accept cookies.

6. SMS Communications (TCPA Compliance)

If you opt in to receive SMS messages, you consent to receive text messages from Balloomania including order updates, appointment reminders, birthday greetings, and promotional offers. Message frequency varies. Message and data rates may apply.

No mobile information will be shared with third parties or affiliates for marketing or promotional purposes. SMS opt-in consent and phone numbers collected for SMS purposes will not be sold or shared with any third party.

You can opt out at any time by replying STOP to any message. For help, reply HELP or contact us at balloomania.sacramento@gmail.com. Your consent to receive SMS is not a condition of purchase.

7. Your California Privacy Rights (CCPA / CPRA)

If you are a California resident, you have the right to:

  • Know what personal information we collect, how it is used, and with whom it is shared
  • Correct inaccurate personal information we hold about you
  • Delete your personal information (subject to certain exceptions)
  • Opt out of sale or sharing of personal information (we do not sell your data)
  • Limit use of sensitive personal information (we collect minimal sensitive data)
  • Non-discrimination for exercising your privacy rights
  • Opt out of automated decision-making — our AI phone assistant (Bland AI) qualifies leads but does not make final decisions about service eligibility or pricing. A human reviews every lead before quoting or booking.

Do Not Sell or Share My Personal Information: we do not sell or share personal information for cross-context behavioral advertising. To submit a verifiable request to know, delete, correct, or opt out, email us at balloomania.sacramento@gmail.com with the subject line "CCPA Request". We will respond within 45 days as required by law.

8. Data Retention

We retain your personal information for as long as your account is active or as needed to provide services. Inquiry data is retained for up to 2 years for follow-up and business analytics. You may request deletion of your data at any time by contacting us.

9. Data Security

We implement industry-standard security measures to protect your information, including encrypted connections (HTTPS/TLS), secure authentication (magic links, no passwords stored), and access controls. Payment data is handled exclusively by PCI-DSS compliant processors (Stripe, PayPal). However, no method of transmission over the internet is 100% secure.

10. Children's Privacy

Our services are not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe we have collected such information, please contact us immediately and we will delete it.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated date. Continued use of our site after changes constitutes acceptance of the revised policy.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, contact us: