How Bloatweiler handles your information.

The short version

You send us a bill (or tell us your category). We use the contact info you gave us to text or email you about your bill review. We don’t sell your information. We don’t share it with vendors unless you’ve told us we can. You can ask us to delete what we have on you at any time by emailing [email protected].

Who we are

Bloatweiler is a business bill-savings service that helps businesses of any size reduce recurring vendor costs. We benchmark recurring business bills (electricity, gas, internet, phone, business insurance, merchant processing, waste hauling, and similar) and help business owners renegotiate or switch — only when there’s real savings to be had.

When we use “Bloatweiler,” “we,” “our,” or “us” in this policy, we mean that operation. When we say “you,” we mean the business owner, operator, or representative using our website or service.

What we collect

Information you give us directly

When you start a free bill check, the form asks for some or all of the following:

• Business name
• Your name (first name is fine)
• Mobile phone number
• Email address
• Which bill category you want us to check
• Roughly what you pay per month for that category
• Any notes or context you want to share (e.g. renewal date, current vendor)
• Whether you’ve attached a bill
• Your consent to be contacted about the review

Bill files

If you attach a bill on the landing page, your browser sends us the file’s metadata (filename, file size, file type) so we know what’s coming. Today we don’t upload the actual bill binary from the landing form — we follow up by text or email to confirm the safest way for you to send the copy. When you send the bill (typically by SMS, iMessage, or email), the contents are stored on our systems so a human reviewer can look at them.

Information collected automatically

When you visit our site, we collect things like:

• Marketing attribution parameters from the URL — UTM source, medium, campaign, content, term; Facebook click ID (fbclid); Google click ID (gclid)
• The referring URL (where you came from)
• The page you landed on
• Approximate timestamp of your visit and submission
• Standard server log data (IP address, browser user agent, device type) handled by our hosting and CDN providers
• Cookies and similar technologies set by our analytics and advertising pixels — see Cookies and tracking below

How we use that information

We use what we collect to:

• Run the free savings check you asked for — benchmark your bill, flag overcharges, line up alternatives if there are any
• Contact you about the review by phone call, SMS/iMessage, or email — using the contact methods you provided
• Confirm the safest way to send us a copy of your actual bill if we need one
• Improve our service — understand which campaigns and pages bring real customers, fix what doesn’t work, write clearer copy
• Comply with our legal obligations (tax records, responding to lawful requests, etc.)
• Prevent fraud, abuse, and security incidents on our systems

We do not use your information to make automated decisions that have legal or similarly significant effects on you. Every bill review and recommendation is reviewed by a human on our team.

Who we share it with

We share your information only with the people and systems we need to in order to deliver the service:

• Our reviewer and operator. Lead notifications are sent to our operator (currently Ali Sheikh and any reviewer he assigns) so we can follow up with you.
• Service providers. Tools we use to host the site, store data, send messages, and run analytics — for example, our hosting and CDN provider, our database host, our messaging tools (Telegram for internal notifications, SMS/iMessage and email for talking to you), and our analytics providers. Each is bound to only use your data to perform the service we hired them for.
• Vendors and partners — only with your permission. When we line up an alternative vendor or negotiate with your current one, we share the specific information needed (e.g. business name, address on the bill, usage volume). We do not share your contact information with a vendor until you’ve told us you want to talk to that vendor.
• When required by law. If we receive a valid legal request, or if we believe in good faith that sharing is necessary to protect our rights, your safety, or someone else’s, we will share what we have to share — and only what we have to.
• If our business is sold or merged. If Bloatweiler is acquired, merged, or transfers assets, your information may transfer as part of that transaction. We’d let you know.

We do not sell your personal information. Bloatweiler may receive compensation from partner vendors in some categories — this is a referral or savings-share relationship, not a sale of your data, and we disclose it before you act on a recommendation.

SMS, calls, and email consent

When you submit the bill-check form, you’re agreeing to be contacted by phone, SMS/iMessage, or email about your bill review. Specifically:

• Message frequency varies. Typically a few messages around your review — confirming receipt, asking for the bill copy, sharing what we found, following up on next steps.
• Message and data rates may apply. Standard carrier charges from your mobile plan.
• Reply STOP at any time to opt out of SMS or iMessage from us. Reply HELP for help. We honor STOP requests promptly.
• Email opt-out: any email we send will include an easy way to opt out, or you can email [email protected] and ask us to stop.
• No automated marketing blasts to leads. All outbound SMS and calls today are sent by a human operator following up on your specific request.

Submitting the bill-check form is your consent to be contacted at the phone number you provided about your bill review — by call, text / iMessage, or email. Today those follow-ups are sent by a human operator responding to your request, not by an automated dialing system. Your consent isn’t a condition of any purchase, and you can opt out at any time (reply STOP to texts, or email [email protected]). If we ever introduce automated calling or texting, we’ll update this policy and get any additional consent the law requires first.

Cookies and tracking

We and our service providers use cookies, local storage, and similar technologies to:

• Remember your theme preference (light or dark)
• Preserve marketing attribution between your first click and your form submission (so we know which campaign sent you)
• Measure how the site is performing — page views, button clicks, time on page, conversion events
• Help us spot abuse or fraud

Most browsers let you block or delete cookies. If you do, parts of the site may not work as expected — for example, your theme preference won’t persist between visits. You can also use browser “Do Not Track” or privacy extensions; and when your browser sends a Global Privacy Control signal, we honor it as an opt-out of sharing for advertising — see Advertising and conversion tracking.

Advertising and conversion tracking

We run advertising-measurement tools so we can see how our ads perform, optimize who we show them to, and reach people who visited but didn’t finish. The Meta (Facebook) Pixel loads directly on our pages, while Google Analytics 4 and Google Ads conversion tracking load through Google Tag Manager — a “tag manager” that lets us configure those Google tags in one place. When you visit the site, these tools record that a visit happened and — if you submit the form — that a lead conversion happened. They use cookies and similar identifiers to do this. We do not load any of these tools on the secure upload or client portal pages.

Meta and Google may match the information they collect from our site with information they already have about you, to help us understand which ads work and to show you relevant ads on their platforms. For their own advertising systems, Meta and Google each act as an independent data controller under their own terms — see Meta’s Privacy Policy and Google’s Privacy Policy .

Meta (Facebook & Instagram) Pixel

Many of our visitors arrive from a Facebook or Instagram ad. We use the Meta Pixel to:

• Measure which ads bring real visitors and leads (a PageView when you land, a ViewContent event when you open the audit form, and a Lead event if you submit it)
• Optimize delivery — let Meta show our ads to more people who look like the ones who actually request an audit
• Remarket — build a Custom Audience of people who visited the site or opened the form so we can follow up with a relevant ad, and build “lookalike” audiences modeled on them. We do not upload your email or phone to Meta to build these audiences; they’re based on the pixel events above.

What Meta receives from our site: only the fact that a page was viewed, that the form was opened, and that a lead happened — each tagged with a random reference code (for de-duplication), plus the cookie/identifier Meta sets in your browser. We do not send Meta your email, phone number, name, business name, notes, bill details, or any hashed version of those — Meta “Advanced Matching” is turned off. Your raw contact details go only to us, the first party, so a human can follow up.

Facebook click identifier (fbclid): when you click one of our ads, Facebook appends a click ID to the landing-page URL. We read that fbclid (along with any UTM tags) and store it first-party with your lead, so we can tell which campaign and ad sent you. We don’t send it back to Meta paired with your contact details, and it isn’t used to identify you beyond attributing the lead.

Lead ads / Instant Forms: if you submit your details through a lead form hosted directly on Facebook or Instagram (an “Instant Form”) instead of on this website, Meta collects that information on its platform and makes it available to us as the advertiser. Meta’s handling of that form is governed by Meta’s Privacy Policy ; once we receive your details, this Privacy Policy governs what we do with them — same free Bloat Audit, same contact consent, same “no sale of your data” promise as a form filled out here.

Enhanced Conversions (Google only)

When you submit the bill-check form, we send Google a hashed version of the email and phone number you entered, so Google can match your lead back to the ad you clicked. The hashing happens in your own browser, before anything is sent: we first standardize the values (email lowercased and trimmed, phone put into a standard format) and then turn each one into a one-way SHA-256 hash. A one-way hash is designed so it can’t be read back into your original email or phone number.

We do not send your raw email, phone number, name, business name, notes, or any bill details to Google. We send only the hashed values plus the fact that a lead happened. To Meta we send even less: only that a page was viewed and that a lead happened, tagged with a random reference code — we do not send Meta any email, phone, or hashed contact details. Your raw details go only to us, the first party, so we can follow up — not to the ad platforms to build a profile of you.

Your choices

Sharing these hashed identifiers with Google can count as “sharing” for advertising under some privacy laws. You can control ad personalization through the platforms’ own settings — for Meta, see your Facebook Ad Preferences ; for Google, see Google My Ad Center .

You can also opt out of broad interest-based advertising through the Network Advertising Initiative or the Digital Advertising Alliance .

Blocking cookies, using browser privacy settings, or using a privacy extension will limit this tracking. And when your browser sends a Global Privacy Control signal, we treat it as an opt-out of sharing for advertising and don’t load our advertising or analytics tools (the Meta Pixel and Google Tag Manager) at all on that visit. You can also email us at [email protected] and ask to be excluded from our advertising measurement.

How long we keep it

We keep your information for as long as we need it to provide the service and to meet our legal and accounting obligations. As a default:

• Lead information (form submissions, notes, attribution): kept for up to 24 months after your last interaction with us, then deleted or anonymized.
• Bill copies you send us: kept while we’re actively reviewing or negotiating, plus a reasonable period afterward to handle follow-up questions and recordkeeping — typically up to 24 months. Deleted on written request once any active engagement has concluded.
• Customer records (signed agreements, invoices, correspondence about a paid engagement): kept for the period our tax and recordkeeping obligations require, typically seven years.
• Server logs and analytics: short-lived, typically 30–180 days depending on the provider.

Your rights and choices

Depending on where you live, you may have specific rights over your information — including the right to:

• Know what personal information we have about you and how we use it
• Access a copy of the personal information we hold
• Correct information that’s inaccurate or incomplete
• Delete your personal information, subject to limited exceptions (e.g. records we have to keep for legal reasons)
• Opt out of “sale” or “sharing” of your personal information — Bloatweiler does not sell personal information, but if you want to be excluded from any future sharing for marketing measurement, email us and we’ll honor that
• Opt out of SMS, calls, or email from us at any time (see SMS consent)
• Not be discriminated against for exercising any of these rights

To exercise any of these, email [email protected] from the address on file, or text/call (609) 781-7939. We’ll respond within the time required by applicable law (typically 30–45 days). For our own protection, we may need to verify your identity before we act on a request.

If you’re in California, this is also your “Do not sell or share my personal information” request channel.

Security

We use reasonable technical, organizational, and physical safeguards to protect your information from unauthorized access, loss, or misuse. That includes encrypted connections to the site (HTTPS), access controls on our internal systems, and limiting who can see your bill copies.

No system is perfectly secure. If we ever become aware of a breach that affects your information, we’ll notify you and any required authorities consistent with applicable law.

Children’s privacy

Bloatweiler is a business-to-business service. It isn’t intended for people under 18, and we don’t knowingly collect personal information from anyone under 18. If you believe a minor has sent us information, please contact us and we’ll delete it.

International users

Bloatweiler is based in the United States. If you access the service from outside the US, your information will be transferred to, stored in, and processed in the United States. US privacy laws may differ from the laws where you live.

Changes to this policy

We may update this policy as our service changes or as the law requires. We’ll always post the current version here with a fresh “Effective” date at the top. If the change is material, we’ll do our best to give you a heads-up by email or on the site before it takes effect.

How to reach us

Privacy questions, deletion requests, opt-outs, or anything else about your information:

• Email: [email protected]
• Phone / SMS / iMessage: (609) 781-7939

Bloatweiler is operated by Ali Sheikh. Mailing address available on request.