Privacy Policy
Last updated: October 20, 2026
Privacy is a fundamental human right. We will uphold the privacy of our users by fighting against ads, trackers and other impingements on privacy. We will never profit by monetizing your data. This Privacy Policy explains how Bearly AI (bearly.ai) collects, uses, shares, and retains personal information when you use our websites, apps, and related services (the “Services”). Personal information includes information that identifies or can reasonably be linked to a person, directly or indirectly, including information about other people contained in the material you use with our Services. Third-party services you connect to or interact with have their own privacy policies.
Information Gathering
Section titled “Information Gathering”We learn information about you when: You directly provide it to us. For example, we collect: Name and contact information. We collect details such as name and email address. Payment information. If you make a purchase, we collect credit card numbers, financial account information and other payment details. Content and files. We collect and retain the photos, documents or other files you send to us in connection with delivering our Services, including via email or chat. We collect it automatically through our products and services. For instance, we collect: Identifiers and device information. When you visit our websites, our web servers log your Internet Protocol (IP) address and information about your device, including device identifiers, device type, operating system, browser, and other software including type, version, language, settings, and configuration. Geolocation data. Depending on your device and app settings, we collect geolocation data when you use our Services. Usage data. We log your activity on our website, including the URL of the website from which you came to our site, pages you viewed on our website, how long you spent on a page, access times, and other details about your use of and actions on our website. We also collect information about which web-elements or objects you interact with on our Service, metadata about your activity on the Service, changes in your user state, and the duration of your use of our Service. Someone else tells us information about you. Third-party sources include, for example: Third-party partners. Third-party applications and services, including social networks you choose to connect with or interact with through our services. Service providers. Third parties that collect or provide data in connection with work they do on our behalf, for example companies that determine your device’s location based on its IP address. When we try and understand more about you based on information you’ve given to us. We infer new information from other data we collect, including using automated means to generate information about your likely preferences or other characteristics (“inferences”). For example, we infer your general geographic location based on your IP address.
Agents, external tools, and connected accounts
Section titled “Agents, external tools, and connected accounts”When you use enabled tools, Bearly may access and process information needed to carry out your task. Depending on the tool and platform, this can include file contents and paths, commands and their output, screenshots, text and controls in apps and websites, browser tabs, and records returned by connected services. Screen and browser observations can include information about other people or unrelated sensitive material visible in the selected app or display. Review the access you enable and close or hide material you do not want included.
Relevant task information may pass through Bearly’s systems and be sent to AI providers processing your request. Tool calls may also send information to the website, connected account, or external server involved in the task. Running a tool locally does not mean that all information it reads stays on your device. Tool results and activity records may become part of your Bearly chat and are then handled like other chat content under this policy.
Tools can act through accounts you have signed in to. Bearly Browser uses its own browser session; importing browser cookies is a separate choice that can give it access to existing sign-ins. A browser you connect to Bearly is used with that browser’s profile, including sites you are signed in to. Connector sign-in and configuration may involve access tokens or other authentication information needed to reach the service. Connecting an account and granting operating-system permissions remain separate from choosing a chat’s or routine’s permission mode.
When you connect a third-party account, Bearly uses the data you authorize from that account only to carry out the actions you request and the features you turn on. Bearly does not use data from connected accounts for advertising, sell it, or use it to determine creditworthiness or for lending purposes. The actions available through a connection are limited to the permissions you grant that service and the operations Bearly supports for it; Full access does not expand either.
You can disconnect an account in App Settings → Connectors and separately revoke Bearly’s authorization in that service’s account settings. Disconnecting stops future access; it does not delete content already saved in Bearly. To delete that content, delete the chat that contains it or delete your account.
Permission choices and organization controls
Section titled “Permission choices and organization controls”In an interactive chat, Standard asks for tool approval when needed and honors saved approvals. Where available, Full access lets enabled external tools run without a separate Bearly approval for each action, including actions that read, change, delete, or send information. For an interactive chat, it applies to that chat on one device. Tools and accounts you deliberately enable later can be used under that chat’s mode. Full access changes when Bearly asks for approval; it does not change the purposes for which we use personal information under this policy or remove your privacy rights.
Bearly remembers the permission choice for your account and chat on the current device. Full access stays on in that chat on this device until you choose Standard or revoke it. Bearly checks current authorization again after a restart and pauses Full access if it cannot confirm it is still allowed. You can choose Standard, revoke saved approvals, or use Clear all permissions from the chat’s permission control. Turning off Full access preserves saved approvals unless you also revoke them. These controls do not undo actions already completed or delete information already saved in a chat or received by another service. You can also disconnect a service in Bearly and revoke its authorization at that service. See Choose how Bearly uses external tools for the available controls.
Routines require separate Full access approval on the desktop device that runs them. Bearly keeps a device-local record of that approval, associated with the account, device, routine and the saved instructions and selected tool setup. It survives app restarts and time away; each run still requires current authorization. Material changes to the saved routine or its selected connector and skill setup require a new review. Copies and routines moved to another device start in Standard. Choosing Standard for a routine stops its Full access while preserving existing per-tool unattended permissions. A change made on another device takes effect when it syncs to the running device. Routine tool results and activity may be retained in the routine’s chat like other chat content.
For managed accounts, organization administrators control eligibility for Full access; members still choose whether to enable it for a chat or separately for a routine. We keep administrative audit records of eligibility changes, including the administrator, affected member or organization, time, and changed setting. Authorized organization administrators can review those changes. Granting eligibility does not itself give an administrator access to a member’s private chat content. Turning off Full access does not delete administrative audit records; their retention is governed by the purposes and legal obligations described below.
We also process permission-mode changes, approval decision sources, authorization failures, and related account or device identifiers to enforce access controls, investigate problems, and maintain service security and reliability. Full Access-specific access telemetry does not include the contents of commands, files, screenshots, messages, or credentials. This is separate from task information processed by tools or stored in chats as described above.
Information Use
Section titled “Information Use”We use each category of personal information about you:
- To provide you with our Services
- To improve and develop our Services
- To communicate with you
- To provide customer support
Google user data
Section titled “Google user data”The connected-account terms above apply to data Bearly receives from Google APIs. Bearly’s use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
Information Sharing
Section titled “Information Sharing”We share information about you: When we’ve asked & received your consent to share it. As needed, including to third-party service providers, to process or provide Services or products to you. To comply with laws or to respond to lawful requests and legal process, provided that we’ll notify you unless we’re legally prohibited from doing so. We’ll only release personal information if we believe in good faith that it’s legally required. Only if we reasonably believe it’s necessary to prevent harm to the rights, property or safety of you or others. In the event of a corporate restructuring or change in our organizational structure or status to a successor or affiliate. Please note that some of our Services include integrations, references, or links to services provided by third parties whose privacy practices differ from ours. If you provide personal information to any of those third parties, or allow us to share personal information with them, that data is governed by their privacy statements. Finally, we may share non-personal information in accordance with applicable law.
Information Protection
Section titled “Information Protection”We implement physical, business and technical security measures to safeguard your personal information. In the event of a security breach, we’ll notify you so that you can take appropriate protective steps. We only keep your personal information for as long as is needed to do what we collected it for. After that, we destroy it unless required by law.
Other Information
Section titled “Other Information”We retain personal data for as long as necessary to provide the services and fulfill the transactions you have requested, comply with our legal obligations, resolve disputes, enforce our agreements, and other legitimate and lawful business purposes. Because these needs can vary for different data types in the context of different services, actual retention periods can vary significantly based on criteria such as user expectations or consent, the sensitivity of the data, the availability of automated controls that enable users to delete data, and our legal or contractual obligations. As part of our normal operations, your information may be stored in computers in other countries outside of your home country. By giving us information, you consent to this kind of information transfer. Irrespective of where your information resides, we’ll comply with applicable law and abide by our commitments herein. We don’t want your personal information if you’re under 13. Do not provide it to us. If your child is under 13 and you believe your child has provided us with their personal information, please contact us to have such information removed.
European Economic Area, United Kingdom, Swiss and California Users
Section titled “European Economic Area, United Kingdom, Swiss and California Users”The following rights are granted under the European General Data Protection Regulation (“GDPR”) and California Consumer Privacy Act (“CCPA”). Bearly AI applies these rights to all users of our products, regardless of your location: The right to know what personal information is collected. The right to know if personal information is being shared, and to whom. The right to access your personal information. The right to exercise your privacy rights without being discriminated against. EEA, UK, and Swiss Users: Our lawful bases for collecting and processing personal information under the GDPR include: Performing our contract with you and providing our services. Legitimate interests: we receive technical and interaction data of users, which may include IP addresses, to improve the security and reliability of our services and prevent abuse, and to understand where people learn about Bearly AI. Consent: where we ask for your consent to process your information, you can always withdraw this consent. Under the GDPR, EEA, UK, and Swiss users have additional rights: The right to request correction or erasure of personal information. The right to object to processing your personal information. The right to transfer or receive a copy of the personal information in a usable and portable format, when any automated processing of personal data is based on your consent or a contract with you. The right to withdraw your consent to processing, when the processing is based on your consent. When we are processing data on behalf of another party that is the “data controller,” you should direct your request to that party. You also have the right to lodge a complaint with a supervisory authority, but we encourage you to first contact us with any questions or concerns. California Users: Under the CCPA, California residents have additional rights: The right to request personal information to be deleted, subject to several exceptions. The right to opt-out of the sale of personal information. Note that we do not “sell” personal information as defined by the CCPA and have not done so in the past 12 months.
Exercising Your Rights
Section titled “Exercising Your Rights”To delete your account and its personal information, use App Settings → Account → Delete account in Bearly; Delete your Bearly account explains what is deleted and what is kept. If you can no longer receive email at your account address, contact support@bearly.ai and we will schedule the deletion once you show that you own the account, as described on that page. To exercise the other rights described above or if you have a question or concern, please contact us at support@bearly.ai and we will aim to address or resolve it. If we cannot, you have the right to lodge a complaint with your local data protection authority.
Changes
Section titled “Changes”We may update this Privacy Policy and related notices from time to time. We will identify the updated policy with a date and provide additional notice of material changes, or obtain consent, where required by applicable law. Choosing Full access is a tool-authorization choice, not consent to unrelated uses of personal information.
Contact Us
Section titled “Contact Us”You can get in touch by emailing us at support@bearly.ai.