Privacy Policy

• “Bernode”, “we”, “us” — the operator of the Bernode platform.
• “Studio” / “User” — a creative professional or organisation with a Bernode account.
• “Client” — someone who visits or uses a Studio’s Client Room (selection, revision gallery, collection, fileshare, or similar).
• “Personal information” — information that identifies or can reasonably identify a person.

For account, billing, and platform operations data about Studios, Bernode generally acts as a data controller (or equivalent under applicable law).

For Client personal information and Content that a Studio uploads or collects inside Client Rooms (names, emails, picks, comments, downloads, and similar), the Studio is typically the controller. Bernode processes that information on the Studio’s instructions to provide the Services (a processor / service-provider role).

If you are a Client and want to access, correct, or delete your information, contact the Studio that invited you first. We can help route requests to the right Studio when you email privacy@bernode.com.

Account information. When you register or manage a studio we may collect name, email, password (stored hashed), studio/business name, phone, branding assets, preferences, team invites, and similar profile data.

Client and delivery data. Studios may provide Client names, emails, access credentials for Client Rooms, selection picks, revision feedback, comments, and related activity. Clients may also submit information directly when they enter a room or leave feedback.

Content. Photos, videos, files, filenames, EXIF/metadata as processed for previews, watermarks, and delivery.

Billing information. Plan, invoices, payment status, and limited payment metadata from processors (such as Paystack or Flutterwave). Card numbers are handled by those processors, not stored in full by Bernode.

Log and usage data. IP address, device/browser type, timestamps, pages viewed, feature usage, error logs, and approximate location derived from IP.

Communications. Messages you send to support, and transactional email events (delivered, bounced, opened where instrumented).

Integrations. If you connect third-party services (for example cloud imports), we receive information authorised by those connections.

• Directly from you when you register, configure settings, upload Content, or contact us
• From Clients interacting with your Client Rooms
• Automatically via cookies, local storage, and similar technologies when you use the Services
• From payment processors and other service providers
• From integrations you enable

We use personal information to:

• Provide, operate, secure, and improve the Services (including galleries, previews, watermarks, and delivery)
• Authenticate users, prevent abuse, and protect accounts
• Process subscriptions, invoices, and payment status
• Send transactional notices (security, billing, product changes)
• Provide customer support
• Analyse aggregated usage to improve reliability and product design
• Comply with law and enforce our Terms
• With consent or where otherwise permitted, send product updates or marketing (you may opt out of marketing)

We do not sell your personal information. We share information only as needed to run Bernode:

• Service providers — hosting, storage/CDN, email delivery, error monitoring, payment processors, security tools — under contracts that limit use to providing services to us
• On Studio instruction — for example sending a Client an invite or showing Content in a Client Room
• Legal — when required by law, court order, or to protect rights, safety, and security
• Business transfers — in a merger, acquisition, or financing, subject to confidentiality and continued protection consistent with this policy

We do not use Studio Content to train public AI models for unrelated advertising. If we introduce AI features that process Content, we will describe that use in-product and update this policy.

Necessary cookies keep Bernode working — for example session and security cookies for sign-in, and preference cookies for theme and sidebar layout. These are always active and are not gated by cookie consent.

Optional cookies (analytics or marketing) are not loaded unless you accept them when we enable those categories. You can change your choice via Cookie settings in the app footer or sidebar.

Browsers may also allow you to block cookies; some features may not work if necessary cookies are blocked.

We use industry-standard technical and organisational measures designed to protect personal information against accidental or unlawful loss, alteration, or unauthorised access — including access controls, encryption in transit, and least-privilege practices for staff and systems.

No method of transmission or storage is perfectly secure. You can reduce risk by using strong passwords, enabling available security features, and configuring Client Room access carefully.

We retain personal information for as long as your account is active or as needed to provide the Services, comply with law, resolve disputes, and enforce agreements.

After account cancellation we may retain limited information for a reasonable period (for reactivation, backups, legal holds, or fraud prevention), then delete or anonymise it. Anonymised data that cannot identify a person may be kept to improve the Services.

Bernode is built for Nigerian studios and Clients anywhere. Personal information may be processed or stored in Nigeria and in other countries where we or our service providers operate (for example cloud regions).

Where required, we use appropriate safeguards for cross-border transfers recognised under applicable law (such as contractual protections with processors).

Subject to Nigerian data protection law (including the Nigeria Data Protection Act / NDPR framework) and other applicable laws, you may have rights to access, correct, delete, restrict, or object to certain processing of your personal information, and to data portability where applicable.

Studios can often update account information directly in settings. For other requests, email privacy@bernode.com. We may need to verify your identity before responding.

Clients should contact their Studio first. Bernode will assist Studios in responding to Client requests relating to data we process on the Studio’s behalf.

Where processing is based on consent, you may withdraw consent without affecting the lawfulness of processing before withdrawal.

The Services are directed to businesses and professionals, not to children under 18. We do not knowingly collect personal information from children. If you believe a child has provided personal information, contact privacy@bernode.com and we will take appropriate steps.

The Services may link to third-party sites or embed third-party tools. Their privacy practices are their own. Review their policies before providing information to them.

We may update this Privacy Policy from time to time. Continued use of the Services after an update means you acknowledge the revised policy. If changes are material, we will provide additional notice where appropriate.

Privacy questions or rights requests: privacy@bernode.com. General support: support@bernode.com.

Legal review pending before production launch — especially for NDPR compliance documentation, processor agreements, and any EU/UK operations.