What we collect, and what we don’t.
Account info, the data you feed our agents, and the events your team generates while using Berry. We don’t buy contact lists, scrape personal social profiles, or harvest anything you didn’t ask us to.
When you sign up, we collect account data — name, email, company, role — and the workspace data you input: target accounts, ICPs, playbooks, integrations, and the prompts you submit to our agents.
While you use the platform we record product events against your workspace ID: which agents you ran, which leads you accepted, which sequences you launched. These are tied to your team, never sold, and used to keep Berry working for you.
Information we don’t collect
- We don’t buy or rent personal-data lists from data brokers.
- We don’t scrape consumer social profiles (Instagram, TikTok, personal Facebook).
- We don’t fingerprint visitors on your behalf or build cross-site advertising profiles.
- We don’t require analytics cookies — the banner is real, not a dark pattern.
We use it to do the work — nothing else.
Run your agents, deliver outreach you authorized, support your team, and improve the product for your team. Period.
We use your information to provide and improve the Service: train your private agents on your specific use cases, deliver outreach on your behalf to the contacts you targeted, and communicate with you about Berry.
We do not sell your personal information to advertisers, and we do not use your customer data to train foundation models we don’t control. Any model fine-tuning happens inside your workspace boundary.
If you delete a contact from your CRM, Berry will not continue to email that person. If you delete your workspace, every agent we trained on your data is destroyed within 30 days.
Encrypted, regional, audit-logged.
Your data is encrypted in transit (TLS 1.3) and at rest (AES-256). We host on AWS and GCP infrastructure in eu-central-1 (Frankfurt) and me-south-1 (Bahrain). Workspace data does not leave the region you signed up in.
Access is role-scoped and audit-logged. No engineer can read your raw outreach without a break-glass approval recorded in our SOC log — and break-glass events are surfaced in your workspace within 24 hours.
Google API Services User Data Policy.
Berry’s use and transfer to any other app of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.
What Berry accesses from Google
- Sign in with Google — your name, email address and profile photo, used only to create your account and sign you in.
- Connect Gmail (optional) — permission to send email from your Gmail account (the
gmail.sendscope). Berry uses it only to send messages you have reviewed and approved in Berry. Berry cannot read, search, modify or delete the messages in your mailbox, and never accesses your inbox.
Berry stores the access tokens it needs to send on your behalf, and a record of each message it sends for you (sender, recipient, subject, body and send time) so you can see your outreach history. You can disconnect Gmail at any time in Settings → Integrations, which revokes Berry’s access with Google; you can also remove it from your Google Account’s security settings.
Limited Use Disclosure
- Berry uses data received from Google APIs only to provide user-facing features: signing you in, and sending the emails you approve.
- Berry does not transfer this data to others except as necessary to provide those features, to comply with applicable law, or as part of a merger, acquisition, or sale of assets — with notice to you in each case.
- Berry does not use this data for serving advertisements, including retargeting, personalized, or interest-based advertising.
- Berry does not allow humans to read this data unless you give specific affirmative consent for specific messages, doing so is necessary for security purposes (such as investigating abuse) or to comply with applicable law, or the data has been aggregated and anonymized for internal operations.
- Berry does not use this data to develop, improve, or train generalized AI or machine-learning models.
We keep it only as long as it’s useful.
- Active workspace data — for the life of your account.
- Backups — 30 days rolling, then destroyed.
- Audit logs — 12 months (compliance requirement).
- After deletion — all production data is purged within 30 days; backups age out within 60.
Access, correct, delete, or just leave.
You can access, correct, or delete your personal data at any time. EU and UK residents have additional rights under GDPR and UK GDPR; KSA residents have rights under the Personal Data Protection Law (PDPL).
You can also object to specific kinds of automated decision-making by our agents and request a human review — for example, if Berry’s ICP qualifier excluded a lead you wanted included.
How to exercise these rights
- From the app — Settings → Privacy → Export / Delete my data (no support ticket needed).
- By email — privacy@getberry.ai. We respond within 5 business days.
- By form — the data-subject request form in our help center.
We tell you before we change it.
Material changes are announced in-product and by email at least 30 days before they take effect. The version number at the top of this page increments on every material change, and the previous version is archived at /legal/archive.
Questions? Ask a human.
Privacy questions go to privacy@getberry.ai. For security disclosures, see our coordinated disclosure policy. For everything else, get in touch.
Our Data Protection Officer is reachable at dpo@getberry.ai. Postal address: Berry AI FZ-LLC, Dubai Internet City, Dubai, UAE.