Back to BeeHeard

Privacy Policy

Last updated: 8 October 2026

1. Introduction

BeeHeard ("BeeHeard", "we", "us", "our") is operated by BeeHeard Pty Ltd (beeheard.ai), an Australian company. We are committed to protecting your personal information in accordance with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth).

This policy explains how we collect, use, store, and disclose your personal information when you use our web application.

2. Information We Collect

We collect the following types of personal information:

  • Account information - your name, email address, and password (or Google account details if you sign in with Google)
  • Payment information - processed securely by Stripe. We store your Stripe customer ID and payment status but never store your credit card details directly
  • Brand framework data - information you provide about your business, ideal customer profile, brand story, authority markers, and content preferences
  • Content you create - posts, saved ideas, voice notes, transcripts, webinar content, and any text you enter into the platform
  • Photos and media - images you upload to your photo library
  • LinkedIn account data - if you connect your LinkedIn account, we store OAuth access and refresh tokens, your LinkedIn person ID, and your display name so we can publish content on your behalf. We do not access your LinkedIn connections, messages, or feed. Scopes requested: a personal connection requests w_member_social and r_basicprofile, plus the organisation scopes rw_organization_admin, w_organization_social and r_organization_social when you also connect a LinkedIn Company Page. For Company Page connections we also store your LinkedIn member ID, so your personal and Company Page connections can share one LinkedIn authorisation.
  • Facebook account data - if you connect your Facebook account, we access (via Meta's Graph API) the list of Facebook Pages you manage, and store the Page ID, Page name, and a long-lived Page access token (encrypted) for the specific Page you select. We do not access your Facebook friends, messages, News Feed, or engagement data (likes, comments, shares). Scopes requested: pages_show_list, pages_read_engagement, pages_manage_posts
  • Instagram account data - if your connected Facebook Page is linked to an Instagram Business or Creator account, we additionally store your Instagram Business Account ID and username for display in the app. The same Page access token is used to publish to Instagram - no separate Instagram token is stored. We do not read your followers, direct messages, comments, or insights. Scopes requested: instagram_basic, instagram_content_publish
  • Usage and feedback data - content feedback ratings, feature usage patterns, any feedback you submit directly, and diagnostic records of how the app behaved on your device (for example, that a page reloaded or an error occurred, and your device and browser type) so we can find and fix problems

3. How We Use Your Information

We use your personal information to:

  • Provide and operate the BeeHeard platform
  • Generate personalised content based on your brand framework and preferences
  • Process payments and manage your subscription
  • Publish content to LinkedIn, Facebook Pages, and Instagram Business accounts on your behalf (only when you explicitly publish or schedule a post)
  • Improve our AI content generation based on your feedback
  • Send you important account-related communications (welcome emails, password resets)
  • Provide customer support

4. AI Processing Disclosure

BeeHeard uses Google's Gemini AI to generate content. When you use our content generation features:

  • Your brand framework data and content inputs are sent to Google's Gemini API for processing
  • This data is used solely for generating your requested content and is not used by Google to train their AI models
  • Video and audio files you upload for transcription are processed through Google's Gemini API and are not retained by Google after processing
  • We do not sell or share your content with other users or third parties for AI training purposes

5. Third-Party Services

We use the following third-party services to operate BeeHeard:

  • Supabase (database and authentication) - stores your account data, content, and files. Hosted in cloud infrastructure with encryption at rest
  • Google Gemini AI (content generation) - processes your brand data and content inputs to generate personalised content
  • Stripe (payment processing) - securely handles all payment transactions. Subject to Stripe's own privacy policy
  • Resend (email delivery) - sends transactional emails such as welcome emails and password resets
  • LinkedIn API (content publishing) - used only when you explicitly connect your LinkedIn account and authorise content publishing
  • Meta Graph API (Facebook & Instagram content publishing) - used only when you explicitly connect your Facebook account. We send post text, image URLs, and video URLs to Meta when you publish or schedule a post. We only read what is necessary to display your Pages and connected Instagram account in our UI
  • Vercel (hosting) - hosts our web application. Subject to Vercel's privacy policy
  • Google Fonts (font previews) - when you open your Branding Guide, your browser loads font files from Google so you can preview each font before choosing it. Google receives your IP address and browser details to deliver those files. No account or content data is sent. Subject to Google's privacy policy

Each of these services has their own privacy policies. We encourage you to review them. We only share the minimum data necessary for each service to perform its function.

6. Data Storage and Security

Your data is stored securely using Supabase with row-level security (RLS) policies, meaning each user can only access their own data. All data is encrypted in transit (HTTPS) and at rest.

We implement reasonable security measures to protect your personal information from unauthorised access, modification, or disclosure. However, no method of electronic storage or transmission is 100% secure.

7. Cookies

BeeHeard uses cookies solely for authentication purposes - to keep you signed in and maintain your session. We do not use tracking cookies, analytics cookies, or advertising cookies.

8. Data Retention

We retain your personal information for as long as your account is active. If you delete your account, all your data is permanently removed from our systems, including your brand framework, content, photos, and any connected integrations.

Stripe may retain payment records independently in accordance with their own data retention policies and legal obligations.

9. Your Rights

Under the Australian Privacy Principles, you have the right to:

  • Access your data - you can export all your data at any time from the Settings page in your account
  • Correct your data - you can update your brand framework, content, and account details directly within the app
  • Delete your data - you can permanently delete your account and all associated data from the Settings page. See our Data Deletion page for detailed instructions
  • Complain - if you believe we have breached the APPs, you may lodge a complaint with us or with the Office of the Australian Information Commissioner (OAIC)

10. Government and Law Enforcement Requests

When we receive requests from public authorities or law enforcement for user data, we follow these principles:

  • Review of legality - we require all requests to be submitted in writing with valid legal process (warrant, subpoena, or court order) and verify the requesting authority's jurisdiction before responding
  • Challenging unlawful requests - we reserve the right to challenge, narrow, or refuse any request we believe to be unlawful, overbroad, or inconsistent with applicable privacy laws
  • Data minimization - we disclose only the minimum data specifically required by a valid legal request, and do not provide additional information beyond the request's explicit scope
  • User notification - we notify affected users of requests whenever we are legally permitted to do so

11. Children's Privacy

BeeHeard is not intended for use by individuals under 18 years of age. We do not knowingly collect personal information from children.

12. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any significant changes via email or through a notice within the application.

13. Contact Us

If you have any questions about this privacy policy or how we handle your personal information, please contact us at:

Email: hello@beeheard.ai

Operated by: BeeHeard Pty Ltd