Privacy Policy

Last updated: September 25, 2026

Intro

Privacy is a fundamental human right. We will uphold the privacy of our users by fighting against ads, trackers and other impingements on privacy. We will never profit by monetizing your data. This Privacy Policy explains how Bearly AI (bearly.ai) collects, uses, shares, and retains personal information when you use our websites, apps, and related services (the “Services”). Personal information includes information that identifies or can reasonably be linked to a person, directly or indirectly, including information about other people contained in the material you use with our Services. Third-party services you connect to or interact with have their own privacy policies.

Information Gathering

We learn information about you when: You directly provide it to us. For example, we collect: Name and contact information. We collect details such as name and email address. Payment information. If you make a purchase, we collect credit card numbers, financial account information and other payment details. Content and files. We collect and retain the photos, documents or other files you send to us in connection with delivering our Services, including via email or chat. We collect it automatically through our products and services. For instance, we collect: Identifiers and device information. When you visit our websites, our web servers log your Internet Protocol (IP) address and information about your device, including device identifiers, device type, operating system, browser, and other software including type, version, language, settings, and configuration. Geolocation data. Depending on your device and app settings, we collect geolocation data when you use our Services. Usage data. We log your activity on our website, including the URL of the website from which you came to our site, pages you viewed on our website, how long you spent on a page, access times, and other details about your use of and actions on our website. We also collect information about which web-elements or objects you interact with on our Service, metadata about your activity on the Service, changes in your user state, and the duration of your use of our Service. Someone else tells us information about you. Third-party sources include, for example: Third-party partners. Third-party applications and services, including social networks you choose to connect with or interact with through our services. Service providers. Third parties that collect or provide data in connection with work they do on our behalf, for example companies that determine your device’s location based on its IP address. When we try and understand more about you based on information you’ve given to us. We infer new information from other data we collect, including using automated means to generate information about your likely preferences or other characteristics (“inferences”). For example, we infer your general geographic location based on your IP address.

Agents, external tools, and connected accounts

When you use enabled tools, Bearly may access and process information needed to carry out your task. Depending on the tool and platform, this can include file contents and paths, commands and their output, screenshots, text and controls in apps and websites, browser tabs, and records returned by connected services. Screen and browser observations can include information about other people or unrelated sensitive material visible in the selected app or display. Review the access you enable and close or hide material you do not want included.

Relevant task information may pass through Bearly’s systems and be sent to AI providers processing your request. Tool calls may also send information to the website, connected account, or external server involved in the task. Running a tool locally does not mean that all information it reads stays on your device. Tool results and activity records may become part of your Bearly chat and are then handled like other chat content under this policy.

Tools can act through accounts you have signed in to. Bearly Browser uses its own browser session; importing browser cookies is a separate choice that can give it access to existing sign-ins. Connected Chrome uses your connected Chrome profile, including signed-in sites. Connector sign-in and configuration may involve access tokens or other authentication information needed to reach the service. Connecting an account and granting operating-system permissions remain separate from choosing a chat’s or routine’s permission mode.

Permission choices and organization controls

In an interactive chat, Standard asks for tool approval when needed and honors saved approvals. Where available, Full access lets enabled external tools run without a separate Bearly approval for each action, including actions that read, change, delete, or send information. For an interactive chat, it applies to that chat on one device. Tools and accounts you deliberately enable later can be used under that chat’s mode. Full access changes when Bearly asks for approval; it does not change the purposes for which we use personal information under this policy or remove your privacy rights.

Bearly remembers the permission choice for your account and chat on the current device. Restarting the app or returning after 24 hours away pauses Full access in that chat. You can choose Standard, revoke saved approvals, or use Clear all permissions from the chat’s permission control. Turning off Full access preserves saved approvals unless you also revoke them. These controls do not undo actions already completed or delete information already saved in a chat or received by another service. You can also disconnect a service in Bearly and revoke its authorization at that service. See Choose how Bearly uses external tools for the available controls.

Routines require separate Full access approval on the desktop device that runs them. Bearly keeps a device-local record of that approval, associated with the account, device, routine and the saved instructions and selected tool setup. It survives app restarts and time away; each run still requires current authorization. Material changes to the saved routine or its selected connector and skill setup require a new review. Copies and routines moved to another device start in Standard. Choosing Standard for a routine stops its Full access while preserving existing per-tool unattended permissions. A change made on another device takes effect when it syncs to the running device. Routine tool results and activity may be retained in the routine’s chat like other chat content.

For managed accounts, organization administrators control eligibility for Full access; members still choose whether to enable it for a chat or separately for a routine. We keep administrative audit records of eligibility changes, including the administrator, affected member or organization, time, and changed setting. Authorized organization administrators can review those changes. Granting eligibility does not itself give an administrator access to a member’s private chat content. Turning off Full access does not delete administrative audit records; their retention is governed by the purposes and legal obligations described below.

We also process permission-mode changes, approval decision sources, authorization failures, and related account or device identifiers to enforce access controls, investigate problems, and maintain service security and reliability. Full Access-specific access telemetry does not include the contents of commands, files, screenshots, messages, or credentials. This is separate from task information processed by tools or stored in chats as described above.

Information Use

We use each category of personal information about you:

To provide you with our Services
To improve and develop our Services
To communicate with you
To provide customer support

Google API data

If you connect Google Workspace, Bearly uses the Google account data you authorize only to provide the Gmail and Google Calendar actions you request. Gmail actions are limited to searching and reading email, messages, and threads; listing drafts and labels; creating drafts; removing the Inbox label to archive a message or thread; and moving a message or thread to Gmail Trash. Bearly does not send or permanently delete email, make other label changes, or download attachment files through this connection. Bearly receives attachment names, types, and sizes when Gmail provides them. You can find archived content in Gmail’s All Mail view and move it back to Inbox. You can restore content from Gmail Trash until Google permanently removes it under Gmail’s retention rules.

Google Calendar actions are limited to listing calendars; reading events in a time range; and creating, updating, or deleting timed, one-time events without guests. Calendar data Bearly receives can include calendar and event identifiers, titles, descriptions, locations, times, time zones, organizer and creator details, attendees and response status, and recurrence information. Bearly does not invite guests, change or delete events with guests, change or delete recurring events, create calendars, or change calendar sharing. A deleted event moves to Google Calendar Trash for 30 days and can be restored there using Google Calendar on a computer.

These actions follow your instructions and the chat’s tool permissions. In Standard, Bearly asks when an action is not covered by an applicable saved approval. In Full access, supported actions can proceed without separate action-approval prompts. Full access does not connect a Google account, expand the Google permissions you granted, or add unsupported operations. The operation limits above describe the Google Workspace connector; browser and computer-control tools are separate capabilities with their own access controls.

Relevant Gmail and Calendar content may pass through Bearly’s systems and be sent to the AI model you selected to complete your request. Connector results can become part of the Bearly chat where you used them and are then handled like other chat content under this policy. Bearly does not use Google API data for advertising, sell it, or use it to determine creditworthiness or for lending purposes.

You can disconnect or remove Google Workspace in App Settings → Connectors. You can separately revoke Bearly’s Google authorization from your Google Account connections. To delete connector-derived content saved in Bearly, delete the chat that contains it or contact support@bearly.ai for an account deletion request.

Bearly’s use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

We share information about you: When we’ve asked & received your consent to share it. As needed, including to third-party service providers, to process or provide Services or products to you. To comply with laws or to respond to lawful requests and legal process, provided that we’ll notify you unless we’re legally prohibited from doing so. We’ll only release personal information if we believe in good faith that it’s legally required. Only if we reasonably believe it’s necessary to prevent harm to the rights, property or safety of you or others. In the event of a corporate restructuring or change in our organizational structure or status to a successor or affiliate. Please note that some of our Services include integrations, references, or links to services provided by third parties whose privacy practices differ from ours. If you provide personal information to any of those third parties, or allow us to share personal information with them, that data is governed by their privacy statements. Finally, we may share non-personal information in accordance with applicable law.

Information Protection

We implement physical, business and technical security measures to safeguard your personal information. In the event of a security breach, we’ll notify you so that you can take appropriate protective steps. We only keep your personal information for as long as is needed to do what we collected it for. After that, we destroy it unless required by law.

Other Information

We retain personal data for as long as necessary to provide the services and fulfill the transactions you have requested, comply with our legal obligations, resolve disputes, enforce our agreements, and other legitimate and lawful business purposes. Because these needs can vary for different data types in the context of different services, actual retention periods can vary significantly based on criteria such as user expectations or consent, the sensitivity of the data, the availability of automated controls that enable users to delete data, and our legal or contractual obligations. As part of our normal operations, your information may be stored in computers in other countries outside of your home country. By giving us information, you consent to this kind of information transfer. Irrespective of where your information resides, we’ll comply with applicable law and abide by our commitments herein. We don’t want your personal information if you’re under 13. Do not provide it to us. If your child is under 13 and you believe your child has provided us with their personal information, please contact us to have such information removed.

European Economic Area, United Kingdom, Swiss and California Users

The following rights are granted under the European General Data Protection Regulation (“GDPR”) and California Consumer Privacy Act (“CCPA”). Bearly AI applies these rights to all users of our products, regardless of your location: The right to know what personal information is collected. The right to know if personal information is being shared, and to whom. The right to access your personal information. The right to exercise your privacy rights without being discriminated against. EEA, UK, and Swiss Users: Our lawful bases for collecting and processing personal information under the GDPR include: Performing our contract with you and providing our services. Legitimate interests: we receive technical and interaction data of users, which may include IP addresses, to improve the security and reliability of our services and prevent abuse, and to understand where people learn about Bearly AI. Consent: where we ask for your consent to process your information, you can always withdraw this consent. Under the GDPR, EEA, UK, and Swiss users have additional rights: The right to request correction or erasure of personal information. The right to object to processing your personal information. The right to transfer or receive a copy of the personal information in a usable and portable format, when any automated processing of personal data is based on your consent or a contract with you. The right to withdraw your consent to processing, when the processing is based on your consent. When we are processing data on behalf of another party that is the “data controller,” you should direct your request to that party. You also have the right to lodge a complaint with a supervisory authority, but we encourage you to first contact us with any questions or concerns. California Users: Under the CCPA, California residents have additional rights: The right to request personal information to be deleted, subject to several exceptions. The right to opt-out of the sale of personal information. Note that we do not “sell” personal information as defined by the CCPA and have not done so in the past 12 months.

Exercising Your Rights

To exercise the rights described above or if you have a question or concern, please contact us at support@bearly.ai and we will aim to address or resolve it. If we cannot, you have the right to lodge a complaint with your local data protection authority.

Changes

We may update this Privacy Policy and related notices from time to time. We will identify the updated policy with a date and provide additional notice of material changes, or obtain consent, where required by applicable law. Choosing Full access is a tool-authorization choice, not consent to unrelated uses of personal information.

Contact Us

You can get in touch by emailing us at support@bearly.ai.