Bernar

Effective date: 17 May 2026

Privacy Policy

This Privacy Policy explains how Bernar collects, uses, stores and protects data when you use our Service.

1. Introduction

Bernar is a content scheduling and auto-posting service for TikTok, Instagram and YouTube with MCP integration for AI agents. This Privacy Policy applies to Bernar at https://bernar.xyz and related services operated in the EU / Finland jurisdiction.

2. Data We Collect

We collect only the data needed to provide and secure the Service, including:

  • OAuth access tokens: access tokens, refresh tokens, scopes, expiration times and account identifiers from TikTok, Instagram and YouTube when you connect social accounts.
  • Content data: videos, captions, thumbnails, metadata, platform selections, publishing schedules, timezone settings and publication status.
  • Usage data: logs, timestamps, API request status, error messages, security events, device and browser metadata, and operational diagnostics.
  • Contact data: email address and messages you send to Bernar for access, support or privacy requests.

3. How We Use Your Data

We use your data only to operate Bernar: connect your authorized accounts, schedule content, publish content, show publishing status, troubleshoot errors, secure the Service, respond to support requests and comply with legal obligations.

We do not sell your personal data. We do not share OAuth tokens or content data with third parties for advertising or unrelated purposes. We transmit data to third-party platforms only as needed to publish or manage content that you request.

4. Third-Party Services

Bernar integrates with third-party services including the TikTok API, Meta API for Instagram and YouTube Data API. When you connect an account or publish content, those services process data under their own terms, developer policies and privacy policies.

5. Data Storage and Security

We use reasonable technical and organizational safeguards to protect data, including encrypted transport, access controls and restricted operational access. OAuth tokens are stored securely and used only for authorized API requests. No method of storage or transmission is completely secure, so we cannot guarantee absolute security.

6. Data Retention

We retain OAuth tokens while your social account remains connected or as needed to provide the Service. Scheduled content is retained while needed for publishing, operational history, user access or legal compliance. Logs and usage data are retained for a limited period needed for security, debugging and reliability.

You may request deletion of your account data by contacting privacy@bernar.xyz. Some records may be retained where required by law, security, audit or dispute-resolution obligations.

7. Your Rights (GDPR)

Subject to applicable law, you may have the right to access, correct, delete, restrict or object to processing of your personal data, and the right to data portability. You may also withdraw consent where processing is based on consent.

To exercise these rights, contact privacy@bernar.xyz. We may need to verify your identity before completing a request.

8. How to Revoke Access

You can revoke Bernar's access to connected accounts at any time through the relevant platform settings:

  • TikTok: open TikTok account settings, review authorized apps or connected services, and remove Bernar's access.
  • Instagram / Meta: open Instagram, Facebook or Meta account settings, review apps and websites or business integrations, and remove Bernar's access.
  • Google / YouTube: open your Google Account security settings, review third-party access, and remove Bernar's access to YouTube permissions.

Revoking access may stop scheduled publishing for that platform. You may also contact privacy@bernar.xyz to request deletion of stored OAuth tokens and related account data.

9. Cookies

Bernar may use essential cookies or similar local storage only where needed for authentication, security, session management or product functionality. We do not use cookies on this static public website for behavioral advertising.

10. Children's Privacy

Bernar is not intended for children under 13 years old. We do not knowingly collect personal data from children under 13. If you believe a child has provided personal data to Bernar, contact us so we can take appropriate action.

11. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the effective date and, where appropriate, provide additional notice.

12. Contact Us

Privacy contact: privacy@bernar.xyz
Service: Bernar
Website: https://bernar.xyz
Jurisdiction: EU / Finland