Privacy policy

Who we are

Berry is provided by Strawberry Labs LLC ("Berry", "we", "us"), Sharjah Media City, Sharjah, United Arab Emirates. For questions about this policy or your personal information, write to [email protected].

What this policy covers

This policy explains how we handle personal information in connection with:

• the Berry software when an organization runs it on its own infrastructure ("self-hosted Berry");
• Berry instances we operate for an organization ("managed Berry"), including dedicated instances;
• the Berry mobile app for iPhone and Android;
• this website, berry.me, and your communications with us.

Your organization decides how it uses Berry and is responsible for the personal information it puts into Berry. Its own privacy notice governs that use. Ask your organization's Berry administrator if you have questions about how your organization handles your information.

Self-hosted Berry

When your organization runs Berry on its own infrastructure, everything you do in Berry (your account, prompts, files, task history, memory, usage and audit records) is stored and processed on systems your organization controls. We do not receive or have access to that information, and we are not responsible for how your organization processes it. Your organization is the controller of that information.

If your organization asks us for help, for example with a support issue, it may choose to share specific information with us. We use it only to provide that help, under our agreement with your organization.

Managed Berry

When we operate a Berry instance for your organization, we process the information in it on your organization's behalf and under its instructions, as its processor or service provider. That includes account details (name, email address, organization role), the content you create and upload, and the usage, security and audit records Berry keeps. We use this information only to provide, secure and support the service for your organization, as set out in our agreement with it. We don't use your organization's content to train AI models.

The Berry mobile app

The mobile app is a companion to your organization's Berry. It connects only to the Berry server you sign in to by scanning a code from the web.

• What the app sends, and where. Your prompts, attached photos and files, answers to the agent's questions, approvals and reports of responses are sent to your organization's Berry server. When you sign in, the app also sends your phone's model, operating system version and app version, which are shown to you on the web and in your list of signed-in phones.
• What stays on your phone. The app keeps its session token in the iOS Keychain or Android Keystore, and a local cache of your tasks, drafts and preferences. Signing out deletes them.
• Permissions. The camera is used to scan the sign-in code and to take photos you choose to attach. Photo and file access is used only for items you pick. The app doesn't use your location, contacts or microphone.
• No analytics or tracking. The app contains no analytics, advertising or crash-reporting SDKs and doesn't track you across apps or websites. It sends nothing to us.
• Review workspace. The app includes a sample workspace used for app store review. It uses sample data stored on your phone and sends nothing anywhere.

Before you first use the app with your organization's server, it explains where your information goes and asks for your agreement.

This website

This website uses no cookies, analytics or third-party scripts, and loads no third-party fonts. Our hosting provider processes standard request information (such as your IP address, browser type and the page requested) to deliver the site and protect it from abuse, and keeps these server logs for a limited time.

When you contact us

If you email us or book a demo, we use your name, email address, organization and the content of your message to reply, provide the demo or support you asked for, and keep a record of our conversation. We rely on our legitimate interest in responding to you and, where you are entering into an agreement with us, on that agreement.

AI model providers

To answer you, Berry sends your prompts and the relevant files to AI model providers. Which providers are used is chosen by your organization: they may be commercial providers, routing services or models your organization hosts itself. Those providers process the information under their own terms and their agreements with your organization (or, for managed Berry, with us on your organization's behalf). Berry shows your organization which models are available and lets it restrict them.

How we share information

We don't sell personal information or share it for advertising. We share it only:

• with service providers who host, operate and support our services for us, under contracts that limit their use of it;
• with AI model providers, as described above, for managed Berry;
• when the law requires it, or to protect the rights, safety and security of our users, the public or us;
• as part of a merger, acquisition or sale of assets, with notice to you where required.

International transfers

For managed Berry, your organization chooses where its instance is hosted where options are available. Where we or our service providers process personal information outside the country in which it was collected, we use safeguards required by applicable law, such as standard contractual clauses.

How long we keep information

For managed Berry, we keep your organization's information for as long as its agreement with us requires, then delete it, subject to backups that expire on a fixed schedule. Your organization's administrators control retention of content and audit records within Berry. We keep correspondence for as long as needed to respond and to keep business records, typically no longer than three years after our last contact.

Security

We protect information with measures appropriate to its sensitivity, including encryption in transit, access controls, tenant isolation in the database, isolated execution for agent tools and audit logging. No system is perfectly secure; if we become aware of a breach affecting your information, we will notify your organization and, where required, you and the authorities. See our security overview.

Your rights

Depending on where you live, you may have the right to access, correct, delete or export your personal information, to object to or restrict its processing, and to withdraw consent. For information in your organization's Berry (self-hosted or managed), please contact your organization first: it controls that information, and we will help it respond. For information we hold as a controller, such as correspondence with us, write to [email protected]. We will respond within the time the law requires. You may also complain to your local data protection authority.

Deleting your account. The mobile app does not create accounts. Accounts belong to your organization and are created and deleted by its administrators. Signing out of the app deletes the app's session and the data it stored on your phone.

Children

Berry is a workplace product and isn't intended for children. We don't knowingly collect personal information from anyone under 16.

Changes to this policy

We will update this policy when our practices change and show the date of the latest version at the top. If a change is significant, we will give notice through the website, the app or your organization.

Contact

Strawberry Labs LLC, Sharjah Media City, Sharjah, United Arab Emirates
Email: [email protected]