Privacy Policy

This Privacy Policy explains how bernard, a service operated by Bernard Moves Ltd (company no. 17343403) ("bernard", "we", "us" or "our"), collects, uses, shares and protects your personal data when you use the bernard websites, applications and services (the "Service"). It also explains your rights and how to exercise them.

For personal data about your own audience that you upload or collect through bernard (your contacts, buyers and students), you are the data controller and we act as your processor - see "Data you manage about other people" below.

Who we are

bernard is operated by Bernard Moves Ltd, a company registered in England and Wales (company no. 17343403, registered office 1 Mentmore Terrace, London E8 3PN). We are the data controller for the personal data described in this policy (except the contact data you manage about your own audience). You can reach us about privacy at hello@bernardmoves.com.

What data we collect

• Account data - your name, email address, password (stored only as a secure hash) and account settings.
• Sign-in data from Google - if you choose "Continue with Google", we receive your name, email address, language/locale and profile picture from your Google account. See "Signing in with Google" below.
• Your content - the website we Move for you and everything you create or store in bernard (pages, images, products, courses).
• Data you manage about other people - the contact records of your own audience that you upload or collect.
• AI Web Developer data - when you use the Bernard AI Web Developer, we store your conversations with it (the messages you send, the assistant’s responses and the edits it proposes), together with related metadata such as which AI provider and model were used and timestamps.
• Your AI credential - if you connect your own AI (Claude, ChatGPT or Gemini), we store the API key or subscription token you provide. It is encrypted at rest, never shown back to your browser, and used only to carry out your requests.
• Connected social accounts - if you connect Instagram, a Facebook Page or LinkedIn, we receive the account or Page id, its name and picture, the permissions you granted and an access token, which we keep encrypted. See "Connecting your social accounts" below.
• Billing data - if you subscribe, our payment processor (Stripe) handles your card details; we receive limited information such as your subscription status and the last four digits of your card. We do not store full card numbers.
• Usage and device data - log data such as IP address, browser type, pages viewed and actions taken, used to operate and secure the Service.
• Cookies - see "Cookies and similar technologies" below.

How we use your data, and our lawful bases

We use personal data to:

• provide the Service - create and run your account, Move your site, host your content and deliver bernard’s features (lawful basis: performance of our contract with you);
• communicate with you - send sign-in codes, service and security notices, and respond to support requests (contract / legitimate interests);
• bill you - process subscriptions and prevent payment fraud (contract / legal obligation);
• keep the Service safe - monitor for abuse, secure accounts and enforce our Terms (legitimate interests);
• improve the Service - understand how it’s used and develop new features (legitimate interests);
• publish aggregated statistics - analyse and publish aggregated, de-identified statistics about how the Service and the sites we host are used and accessed (for example, how often automated crawlers visit hosted sites), combined across many sites and in a form that does not identify any customer, site or individual (legitimate interests);
• run and improve the AI Web Developer - carry out the edits you ask for, keep an editable history, and improve bernard’s AI editing using your conversations in aggregated or de-identified form. We do not use the content of your site or conversations to serve any customer other than you except as such aggregated or de-identified insights (contract / legitimate interests); and
• meet legal obligations - such as accounting and responding to lawful requests (legal obligation).

Where we rely on legitimate interests, we balance them against your rights. Where we rely on consent (for example certain marketing), you can withdraw it at any time.

Signing in with Google

When you sign in with Google, Google shares a limited set of profile information with us - your name, email address, locale and profile picture - so we can create or recognise your bernard account.

• We use this information only to authenticate you, create and manage your account, and contact you about the Service.
• We do not use it for advertising, and we do not sell it.
• bernard’s use of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.
• You can revoke bernard’s access at any time from your Google Account permissions.

Connecting your social accounts

You can connect your Instagram account, a Facebook Page you manage or your LinkedIn account (your own profile, or a company Page you administer), so that Bernard can post for you and, for Instagram, bring your own posts onto your site. Nothing is ever posted until you approve the exact post and press Schedule.

What we receive when you connect. The network asks you to approve bernard on its own screen. We then receive the id, name and picture of the account and of each Page you choose, the list of permissions you granted, and an access token. The access token is encrypted at rest and never shown back to your browser. For Instagram we also read your own posts and media when you ask us to bring them onto your site.

What we do with it.

• publish the posts you approve, with the words, photos and films you approved, to the account or Page you chose, at the time you choose;
• show you which accounts and Pages are connected, and warn you before a connection runs out;
• check afterwards that a post went live, and keep its id and link so you can open it;
• bring your own Instagram posts and media onto your site when you ask us to.

The networks may also let us read how your own posts perform (views, clicks and reactions). If we use that, it is only to report back to you about your own posts.

What we do not do. We do not read or keep other people’s profiles, posts or activity. We do not use data from Instagram, Facebook or LinkedIn for advertising, sales leads, recruiting, building audiences or feeds, or to enrich any contact record, and we never share it between customers. We do not sell it.

What we keep, and for how long. We keep the connection (ids, names, pictures, permissions and the encrypted token) while it is connected, and the ids and links of the posts we published for you while your account is open. The photos and films we prepare for a post are working copies, deleted after 30 days.

Disconnecting and deletion. You can disconnect any account or Page at any time from Account, Workshop keys, Social accounts. We stop using it at once, and any post scheduled to it is stopped. When nothing of that login is still connected, we delete its access token. You can also remove bernard in the network itself: in Instagram (Settings, Apps and websites), in Facebook (Settings and privacy, Settings, Business integrations) or in LinkedIn (Settings, Data privacy, Permitted services). Instagram and Facebook tell us when you do, and we delete the access we held for you. LinkedIn does not tell us, so also press Disconnect in bernard. You can ask us to delete all data we hold from a network at any time by emailing hello@bernardmoves.com; we do so within 10 days. We delete it all when you close your bernard account.

Your use of each network is also governed by that network’s own terms and privacy policy.

Data you manage about other people

When you upload or collect personal data about your own contacts, fans, buyers or students, you are the controller of that data and we process it on your behalf under our agreement with you. You are responsible for having a lawful basis to hold and use that data and for honouring those individuals' rights. We will process it only to provide the Service to you and in line with your instructions.

Cookies and similar technologies

We use a small number of essential cookies that are necessary to run the Service - for example to keep you signed in, to keep your session secure, and to remember your cookie choices. With your consent we also use Google Analytics 4 to understand aggregate usage, and Microsoft Clarity for anonymised heatmaps and session replays, so we can see how the product is used and improve it; you choose whether to allow these via our cookie banner, and you can change your mind at any time. Google Analytics is loaded in Consent Mode with advertising signals disabled, and neither tool is loaded until you accept - we do not use advertising cookies and do not use either to target ads.

Microsoft Clarity runs only on bernardmoves.com. It is not used in your signed-in account or on sites we host for you. Microsoft acts as an independent controller of the Clarity data, under the Microsoft Privacy Statement.

Sites we host for you. When you switch it on from your site’s Analytics page, we also measure your site’s visitors with our own Google Analytics tag, alongside any analytics you already run, so that Bernard can tell you what is working and what to change. It collects standard page-view data for that site (pages viewed, how visitors arrived, device and country) into bernard’s own Google Analytics property, holds nothing personal about you, and runs only for visitors who accept the cookie notice on your site. You can switch it off again at any time from the same page. The Terms describe this under "Measuring your site".

Who we share data with

We share personal data only as needed to run the Service, with service providers ("sub-processors") who act on our instructions, including:

Provider	Purpose
Supabase	Database, authentication and storage, held in Ireland
Amazon Web Services	Cloud hosting and infrastructure, held in Ireland: the app, your site’s history, published files and media, forum uploads and backups. Amazon SES also sends the emails you send to your own audience; we keep a copy of each message body for 90 days
Cloudflare	Content delivery, DNS and security for published sites; keeps cached copies of your published pages in its data centres around the world
Postmark	Account and transactional email delivery
Stripe	Subscription payments, and, through Stripe Connect, payments from your buyers into your own Stripe account
Google	“Continue with Google” sign-in; Google Analytics 4 on bernardmoves.com (with your consent) and on sites we host for you where you switch it on (with your visitors’ consent); Search Console data for your site, stored in BigQuery in London; Cloud Vision checks on images; Safe Browsing and PageSpeed Insights, which receive page addresses (URLs) only
Deepgram	Transcribing the speech in course videos and in audio and video in your library, in the United States
Meta (Instagram and Facebook)	When you connect Instagram or a Facebook Page: publishing the posts you approve, importing your own Instagram posts and media when you ask us to, and confirming a post went live
LinkedIn	When you connect LinkedIn: publishing the posts you approve to your profile or to a company Page you administer, and confirming a post went live
OpenRouter, and the AI model providers it routes to	bernard-run AI features you choose to use
Anthropic (Claude)	bernard-run AI editing: the Bernard AI Web Developer can run on Claude directly, on bernard’s own account, rather than through OpenRouter
Anthropic (Claude), OpenAI (ChatGPT), Google (Gemini)	When you use the Bernard AI Web Developer with your own AI, your prompts and site content are sent to the provider whose credential you connected, to generate the requested edits

Microsoft Clarity is not on this list because Microsoft is not our processor for it: see "Cookies and similar technologies" above.

Third parties you add to your own site. You can choose to put other companies’ tools on a site we host for you: for example a booking calendar, a video player, a newsletter or enquiry form, a chat widget, or your own analytics and advertising tags. You choose these tools, and your agreement with each company covers what it collects from your visitors. They are not bernard’s sub-processors, and bernard does not control the data they collect.

We may also disclose data if required by law, to protect our rights or the safety of others, or in connection with a merger, acquisition or sale of assets (with notice where required). We do not sell your personal data.

International transfers

Some of our providers process data outside the UK/EEA. Where they do, we rely on appropriate safeguards to protect your data. For personal data from the UK, these are the UK’s adequacy regulations where they apply (for example, for transfers to the EEA), and otherwise the UK International Data Transfer Agreement (IDTA) or the UK Addendum to the EU Standard Contractual Clauses. For personal data from the EEA, these are adequacy decisions where they apply, and otherwise the EU Standard Contractual Clauses.

How long we keep data

We keep personal data for as long as your account is active and for a reasonable period afterwards to meet legal, accounting and security obligations, after which we delete or anonymise it. Bernard AI Web Developer conversations are kept while your account is active so you have an editing history, and for a reasonable period afterwards, after which we delete them or retain only aggregated or de-identified information. Your stored AI credential is deleted as soon as you remove or replace it, and when your account is closed. A social account connection is deleted as described in "Connecting your social accounts". You can ask us to delete your account and data at any time (see "Your rights").

How we protect your data

We use technical and organisational measures appropriate to the risk - including encryption in transit, access controls, row-level security and secure authentication. No system is perfectly secure, so we cannot guarantee absolute security, and you are responsible for keeping your credentials safe.

Your rights

Subject to applicable law, you have the right to access, correct, delete, restrict or object to our processing of your personal data, to data portability, and to withdraw consent where we rely on it. To exercise any of these, email hello@bernardmoves.com. You also have the right to complain to a supervisory authority - in the UK, the Information Commissioner’s Office (ico.org.uk).

Children

The Service is not directed at children under 18, and we do not knowingly collect their personal data. If you believe a child has provided us with personal data, contact us and we will delete it.

Changes to this policy

We may update this policy from time to time. If we make material changes, we will take reasonable steps to notify you (for example by email or an in-product notice). The "Last updated" date above shows when this version took effect.

Contact us

Questions about your privacy or this policy? Email hello@bernardmoves.com.