Your privacy at Bard

This page explains what Bard keeps about you, why we keep it, and what you can do about it. We wrote it in plain words on purpose. If anything is unclear, email us at [email protected].

Who we are

Bard is run by numly, Artemisstraat 517 2321LA Leiden, registered with the Dutch Chamber of Commerce (KvK) under number 65756452. We decide what happens with your data, so under European privacy law (the GDPR) we are responsible for it. You can reach us at [email protected].

What we keep

• Your email address. So you can log in, and so we can send you login links and notes about your posts.
• The videos and songs you add, and the clips Bard makes. Your video is deleted from our server once the clips are made. Songs stay until you remove them. Clips stay until you delete them.
• The lyrics Bard writes down from your song. They stay with that song until you remove it.
• What you plan to post. Captions, titles, times and the settings you pick for each post, your release day if you give one, and a link to the post once it is live.
• Your payment status. Stripe handles your card. We never see or store your card number. We keep your Stripe customer number and whether your plan is active.
• Connected accounts. When you connect TikTok, Instagram, Facebook or YouTube, we keep that account's id, name, username and picture, and the login keys that let Bard post for you. Login keys are stored locked (encrypted).
• Artist names you add, so a manager can keep several artists apart.
• Technical basics. Your IP address for 24 hours when you ask for a login link, to stop abuse, and short error logs so we can fix problems.
• One cookie. A session cookie that keeps you logged in. No advertising or tracking cookies. Visitor counts come from Simple Analytics, which does not use cookies and does not collect personal data.

Why we keep it

• To run Bard for you: make your clips, post them where you ask, and log you in. The legal reason is our agreement with you (performing a contract).
• To take payments and keep accounting records. Our agreement with you, and Dutch tax law, which asks us to keep invoices for 7 years.
• To keep Bard safe and working: stop abuse and fix errors. The legal reason is our legitimate interest in a working, safe service.

We do not sell your data. We do not use it for ads. We do not use your videos or music to train AI.

How long we keep it

• Uploaded videos: deleted as soon as the clips are made.
• Clips, songs and planned posts: until you delete them, or delete your account.
• Connected account data and login keys: until you disconnect that account, or the app stops letting Bard in. After that it is gone within 7 days.
• Login links stop working after 15 minutes.
• When you delete your Bard account, we delete everything within 30 days, except payment records the law makes us keep.

Who helps us

A few companies help run Bard. They only get what they need for their part, and they may only use it for Bard.

• Stripe takes payments.
• Resend sends our emails, like your login link.
• Cloudflare stores your clips (Cloudflare R2) and protects the website.
• Our server host runs Bard in the European Union.
• Simple Analytics counts visitors without personal data.
• Telegram carries error alerts to the founder. These never include your videos, captions, email address or login keys.
• TikTok, Meta (Instagram and Facebook) and Google (YouTube), but only when you connect them. We only send them the clips and words you ask us to post. Google user data that YouTube sends to Bard is not passed on to TikTok or Meta. Who receives that data is listed under YouTube below.
• xAI hears your song when you add it, and sends back the lyrics so Bard can write them on your clips. The video is not sent. xAI does not use that audio to train its models, and deletes the request after 30 days.

Data outside the European Union

Some of these companies are based in the United States. When your data goes there, it is protected by the EU-US Data Privacy Framework or by the European Commission's standard contract clauses.

Connected accounts, one by one

Bard only does what you ask: it posts the clips you pick, with the words and settings you pick, at the time you pick. Deleting something in Bard does not remove a post that is already live. To remove a live post, delete it in that app.

YouTube

Bard uses YouTube API Services. When you connect YouTube, Google gives Bard your channel id, name, username and picture, and a login key so Bard can upload videos to your channel. Bard also checks the status of a video it just uploaded, so it knows when your post is live. Bard does not read your other videos, comments or statistics. Bard uses this Google user data only to show you which channel is connected, and to post the clips you ask it to post.

Who we share, transfer, or disclose Google user data with. We do not sell Google user data. We do not share, transfer, or disclose Google user data to third parties for any purpose other than running Bard for you:

• Our server host in the European Union stores your channel id, name, username, picture and login key, so Bard can show your channel and post for you. The login key is locked (encrypted). The host may only use it to run Bard.
• Cloudflare protects the website, so your channel name and picture can pass through when you open Bard. Cloudflare does not receive your YouTube login key, and may only use what it sees to protect and deliver the site.

We do not share, transfer, or disclose Google user data with anyone else. Not with TikTok, Meta, Stripe, Resend, Simple Analytics, Telegram or xAI. Not with advertisers or data brokers. We do not use Google user data for ads, and we do not use it to train AI.

We protect this Google user data. Bard uses a secure connection (HTTPS). The YouTube login key is stored locked (encrypted). Only the founder can reach the server.

The clips and words you ask Bard to post are sent to YouTube, because that is the post you asked for.

Google's Privacy Policy also applies: policies.google.com/privacy.

You can remove Bard's access at any time by pressing Disconnect in Bard, or on Google's security settings page: security.google.com/settings/security/permissions. When access is removed, we delete the YouTube data we stored within 7 days. Bard also checks at least every 30 days that it still has access, and deletes that data if it does not.

Bard's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

TikTok

When you connect TikTok, Bard reads your basic profile (your account id, display name and picture), and each time you post, the posting options TikTok allows for your account. Bard then sends the clips you choose, as a post or into your TikTok drafts, with the caption and settings you choose. To do that, TikTok picks the clip up from a private Bard link that stops working after a few hours. Bard does not read your other videos, followers or messages.

To remove access, press Disconnect in Bard, or open TikTok and go to Settings, then Security, then Manage app permissions.

Instagram and Facebook

For Instagram, Bard reads your professional account's id, username and picture, and publishes the Reels you choose. For Facebook, Bard reads the list of Pages you manage so you can pick one, and publishes Reels to that Page. Bard does not read your messages, followers or other posts.

To remove access, press Disconnect in Bard, or remove Bard in your Instagram or Facebook settings under apps and websites. See how to delete your data.

Your rights

You can ask us to show you the data we have about you, fix it, delete it, send you a copy you can take elsewhere, or stop using it. Email [email protected] and we answer within a month. If you are not happy with how we handle your data, you can complain to the Dutch privacy authority, the Autoriteit Persoonsgegevens.

Delete everything

Go to Your plan and press Delete my Bard account. Or email us from the address you use with Bard. More about deleting your data.

Keeping it safe

Bard runs over a secure connection (HTTPS). Login keys for your accounts are locked (encrypted). Your files get random names and are kept away from the public part of the website. Only the founder can reach the server.

Age

Bard is for people who are 16 or older.

Changes

If we change this page in a way that matters, we email you before it takes effect. The date at the top shows the last change.