Privacy
Plain-language privacy notice.
This notice explains the limited information bernan.ai receives and how it is used. Effective October 29, 2026.
What this site collects
If you join the operator list, the site receives your email address, your explicit consent choice and, if you pick one, how you heard about the site. The operator scan records a result category when you finish or book, not free-form business data. The scorecard records your stage, your three scores, your three size answers and any help pick you save. The AI Workshop for Owners list records the build you pick, your trade and your city. The starter worksheet saves a draft in your browser so a refresh does not erase your work. If you ask for a next step at the end of the starter worksheet, the site receives your email address, your consent to one reply, how you heard about the site if you pick one and, if you answer it, which video sent you. That request does not add you to any list, and your brief stays in your browser. If you comment a keyword on an @bernan.ai Instagram post and type your email in the reply, ManyChat passes it to the site. It sends your email, the keyword, the video and whether you own the business, with your consent to new guides. The client area uses one essential HttpOnly session cookie. Its map and install-surface preference stay in that browser's local storage and are not sent to bernan.ai.
How the site measures visits
The site uses PostHog to understand how it is used. It records the pages you view, how long you stay on each one and how far you scroll. It also records what you click, your device and browser, and the site that sent you. It works out your approximate location from your IP address. It makes screen recordings of visits, and everything you type is hidden in them. When you send a form, PostHog learns which form you used, never your email address or anything you typed. It uses one first-party analytics cookie and a little of your browser's storage. It uses no advertising cookies. It does not run when your browser sends Do Not Track or Global Privacy Control. It never runs in the client sign-in area or on the page that confirms a payment.
Why it is used
Email addresses are stored in the private bernan.ai lead vault only after explicit opt-in. Each address is encrypted before storage and joined to source, campaign, content, intent, first path, any referral code in the link you followed, any scan result you save, any answer to which video sent you, consent, and a pseudonymous session identifier. That answer is stored as plain text, with markup and the @ sign removed, and is never emailed. When you sign up on this site or by message on Instagram and agree to future emails, the site sends you a few emails through Resend. They carry each new free file as it comes out, a few notes on using them, and one note about paid help. Joining the Workshop list, or asking for one reply, never starts them. When you join a list or ask for a next step, I also get a short note by email through Resend. It says how you found the site and any scan result, never your address. To send those emails, Resend receives your address, how you found the site and which form you used. From Instagram, it also gets the keyword and whether you own the business. Resend keeps that as a contact under its own terms, apart from the encrypted vault. When you buy, the site keeps a private record of the purchase. It holds a one-way code made from your email, your Stripe customer number, what you bought, when, the checkout number and any credit code. It's kept for about 400 days, for receipts, credits and support. Secret-keyed network identifiers are used for rate limiting. Client session data is used to provide authorized access to private materials.
Service providers
The site uses Vercel for hosting, Upstash for the encrypted lead vault, abuse prevention, and funnel attribution, PostHog to measure visits, Resend to send me that short lead note and to send you the emails you asked for, ManyChat for replies to Instagram comments and messages, Stripe for payments, and Calendly for booking. Stripe handles your card under its own terms. I never see your card number. Calendly is not loaded when the page opens. It opens only after you choose a booking action. Those providers process limited data needed to operate their part of the service under their own terms.
Retention and control
Client login sessions expire after eight hours, are revoked on sign-out, and are revoked immediately when that client's access credential changes. Pack downloads require the active session, and install commands contain no access token. Local map state remains in that browser until sign-out or site-data clearing. How you found the site, meaning the link's source tags, any referral code and the first page you opened, stays in this browser for 30 days from that first visit and is sent only with the site's page counts, its PostHog measurements and any form you send. Starter drafts remain until you choose Clear saved draft or clear site data. Operational records are kept only as long as reasonably needed for delivery, security, and business records. You can ask for access, correction, or deletion by email. Every email the site sends you has a one-click unsubscribe link. A deletion request also removes your address from Resend.
What this site does not do
bernan.ai does not sell personal information. The public scan does not ask for files, passwords, financial records, or private company data. Client access codes are stored as one-way hashes, not readable passwords.
Plugins and connectors
Bernan Wage Check runs inside your own AI session. It sends nothing to Bernan. Your AI provider handles your files under its own terms. bernan.ai never sees the payroll, sign-in sheets or reports you check with it. A rate connector is planned and isn't live yet. When it opens, it will log only the tool name, trade, county, date, account and app store. It will never receive payroll rows or Social Security numbers. This notice will state how long those logs are kept before the connector opens.
Questions or requests: eugeen@bernan.ai