What does bernard do with my data, and is it GDPR-compliant?
Handing your business to a new home means handing over data — your email, your site, your customers' details — so it's fair to want to know exactly what happens to it. Here is the plain version. The formal detail lives in our Privacy Policy and Terms, and everything below is consistent with them.
Your content and AI — the honest answer
bernard does not train anyone else's AI on your site, and never uses your data to serve another customer. What it does do — and it's worth being straight about this — is study how the product is used, including the editing conversations you have with your AI, so the tools get better over time. That study only ever happens in aggregated or de-identified form: patterns across many people, never your content handed to someone else.
If you connect your own AI, the key that connects it is encrypted and never shown back to your browser. Your site content and your chats aren't sold, aren't used for advertising, and aren't fed into anyone's model to be served up elsewhere. The Privacy Policy sets out the exact wording, including the lawful bases we rely on.
Where your data lives
Your data stays in the European Union. Your account, your site, your contacts and your files are held on EU-based infrastructure, so nothing quietly moves to another region without being accounted for. If any transfer outside the region is ever needed, it's covered under the International transfers section of the Privacy Policy.
Your rights under GDPR
You can see it, correct it, take it with you, or have it erased. Those are your rights under GDPR and bernard is built to honour them:
- See it — ask for a copy of the personal data we hold about you.
- Correct it — anything wrong, we'll put right. Most of it you can edit yourself.
- Export it — take your data with you.
- Erase it — deleting your account is a genuine, permanent erasure. It removes your account and its files for good; there's no hidden copy left behind. See how that works in the Terms.
To exercise any of these, email [email protected] — or read the Your rights section of the Privacy Policy, which also tells you how to complain to the regulator if you're ever unhappy with how we've handled a request.
Who else touches your data
A short list of trusted suppliers, and no one else. To run bernard we rely on a handful of specialist services — for payments, email, hosting and the AI features — and each only receives the data it needs to do its job. We choose them carefully and we never sell your data to anyone. The complete, named list of these suppliers is kept up to date in the Privacy Policy so you can always see exactly who is involved.
Cookies and tracking
Nothing tracks you until you say yes. When you first arrive, bernard asks about cookies and defaults to off — analytics only start once you agree, and you can change your mind at any time. There's no advertising tracking on the product. The cookies section of the Privacy Policy lists what each one does.
The people you serve
For your own customers' data, you're in charge and bernard works for you. The contacts, buyers and students you keep in bernard belong to you: you are the data controller, and bernard is your processor — holding that data on your instructions and never using it for its own ends. That matters because it lets you meet your own GDPR duties to the people you serve. If one of your customers asks to be removed or to see what you hold, you can view, correct, export or delete their record yourself, in a moment. Doing privacy properly for your audience is part of looking professional to them.
The prompt
“Tell me exactly what personal data you hold about me and about the people in my contacts, where it's stored, who else can see it, and the steps to export or delete all of it.”
The [bracketed] parts are yours to fill in. First time? Connect bernard to your AI over MCP — a one-time setup in bernard → your site → Use your own AI — then paste the prompt above.
Questions people ask
- Does bernard use my content to train AI?
- Not to train anyone else's AI on your behalf, and never to serve another customer. bernard does study how the product is used — including AI editing conversations — to make the editing better, but only in aggregated or de-identified form. We do not sell your data and we do not use it for advertising. The full wording is in our Privacy Policy.
- Where is my data stored?
- In the European Union. Your account, your site content, your contacts and your files are held with EU-based infrastructure, so your data stays in-region. The detail, including any international transfers, is set out in our Privacy Policy.
- Is bernard GDPR-compliant, and what are my rights?
- Yes. You can ask to see the data we hold, correct it, export it, or delete it. Deleting your account is a real erasure — it permanently removes your account and its files, not just a hidden flag — and, like every change on bernard, it only happens once you approve it, so nothing is erased by accident. To exercise any right, email [email protected], and see the Your rights section of the Privacy Policy.
- What about the data I keep about my own customers?
- For your contacts, buyers and students, you are the data controller and bernard is your processor — we hold that data on your instructions and never use it for our own purposes. You can view, correct, export or delete any contact whenever you need to, which is what lets you answer your own customers' requests.