Privacy policy
Last updated October 16, 2026
BeHeard is a marketing platform powered by BeHeard Intelligence for brands in the Gulf and Pakistan, operated by Heard LLP. We use the data you give us, and the data from the platforms you connect, only to run BeHeard for you. We never sell personal data, never use it for advertising profiles and never use it to train generalised machine-learning models.
On this page
1.Who we are
BeHeard is operated by Heard LLP, a limited liability partnership registered in Pakistan ("Heard", "we", "us"). For account data we are the controller. For the content and customer data a workspace puts into BeHeard, the workspace owner is the controller and we act as processor under our Data Processing Agreement.
2.Data we collect
- Account data
- Name, email, password hash, language, two-factor status and sessions (device and IP address).
- Workspace content
- Brands, brand brain, products, drafts, posts, creatives, campaigns, reports, approvals and comments your team creates.
- Connected platforms
- Data from the platforms you choose to connect, described in the next section.
- Usage and logs
- Security and audit logs, error reports without personal data, and optional analytics only with your consent.
3.Data from platforms you connect
You decide which platforms to connect. Before you leave for a platform, BeHeard shows what it will be allowed to do; on the platform's consent screen you choose the pages and accounts to share and can decline permissions. We only receive data from the accounts you select.
- Meta (Facebook, Instagram, Messenger, WhatsApp)
- The Facebook Pages and Instagram professional accounts you select (name, ID, picture); their posts, reels and stories with likes, comments, shares and insights such as reach, impressions and followers; comments, and Messenger, Instagram Direct and WhatsApp Business conversations with your customers (names, profile IDs and message content) so your team can answer them; ad accounts, campaigns, ad sets, ads, creatives, spend and results; the businesses and catalogs you choose; your Facebook user ID and the access tokens Meta issues.
- Google (Ads, Analytics, Search Console, YouTube, Business Profile)
- Google Ads accounts, campaigns, keywords, spend and results; Google Analytics 4 reports (traffic, conversions, revenue); Search Console search performance (queries, clicks, positions); when you ask BeHeard to set them up, your Google Analytics account list, the property and website data stream it creates, and your website's Search Console verification tag and status; your YouTube channel, videos and analytics, and the videos you upload through BeHeard; Google Business Profile locations, reviews and posts; and your Google email address to name the connection.
- TikTok
- Profile (display name, avatar, follower and like counts), videos with views, likes, comments and shares, comments on your videos, and the videos you publish through BeHeard. For TikTok Ads: advertiser accounts, campaigns, creatives, audiences, pixel status, spend and results.
- Shopify, Salla, Zid and WooCommerce
- Store details, products, inventory, orders, checkouts, discounts and customers (name, email, phone, city and order history), to show sales next to marketing results and to answer order questions in the Inbox.
- Other platforms
- LinkedIn, X, Snapchat, Pinterest, HubSpot, Zoho CRM, Salesforce and Pipedrive: the pages, posts, ad results, contacts, leads and deals you choose to connect.
Access tokens for every connection are encrypted at rest with AES-256-GCM and are decrypted only to call the platform on your behalf.
4.How we use data
- To provide BeHeard to the workspace that connected the account: dashboards, Brand Pulse, reports, the Inbox, the Content Calendar and Creative Studio.
- To publish, reply and manage ads only as your team creates or approves, or as the autonomy, approval and budget rules you set allow.
- To keep accounts secure: authentication, fraud and abuse prevention, audit logs.
- To support you and send service emails such as verification, approvals and daily briefs.
- To meet legal obligations.
We do not sell personal data, do not use it for advertising or to build advertising profiles, and do not use your workspace content or connected-platform data to train generalised machine-learning models, ours or anyone else's.
5.Data from Meta
We process data received from Meta only to provide the BeHeard features described above to the workspace that connected the account, as the Meta Platform Terms require. We do not sell, license or buy it, do not use it to target or profile people outside the brand's own ads, and do not share it except with the sub-processors below who help us run BeHeard.
You can delete it at any time by disconnecting in BeHeard with "Also delete synced data", by removing BeHeard in your Facebook settings, or by emailing us. See the Data deletion page (https://beheard.agency/en/data-deletion).
6.BeHeard Intelligence
BeHeard Intelligence uses large language models from Anthropic (Claude) to draft content, analyse performance and suggest actions, and creative generation providers (Higgsfield, and OpenAI image models when enabled) to produce images and videos. Only the context needed for a task is sent. Under our agreements these providers do not use your data to train their models. Every action that spends money or publishes in your name follows the autonomy and approval rules you set.
7.Google user data
When you connect a Google account, BeHeard asks only for the access a feature needs: Google Ads (reading performance and managing campaigns within your guardrails), Google Analytics (reports, and creating a property and website data stream for your brand when you ask), Search Console (search performance, and adding and verifying your website when you ask), YouTube (channel, videos and analytics, and uploading or editing videos you approve), Google Business Profile (listings, reviews and posts, and creating your business location and verifying it with the code Google sends you when you ask), plus your Google email address to identify the connection. When you ask for a new Google Ads account, BeHeard creates it under BeHeard's Google Ads manager account with your brand's name, currency and time zone and invites your Google account as its owner; you add any payment method yourself.
BeHeard's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy (https://developers.google.com/terms/api-services-user-data-policy), including the Limited Use requirements.
- We use Google user data only to provide and improve the user-facing features you see in BeHeard, such as your reports and insights, and to carry out actions you ask for or approve, such as publishing a video or changing an ad budget.
- We do not transfer Google user data to others except to provide those features, for security, to comply with the law, or as part of a merger or acquisition with your prior notice.
- We do not sell Google user data, use it for advertising (including retargeting or personalised ads), or use it to develop, improve or train generalised AI or machine-learning models.
- People at BeHeard do not read this data unless you agree (for example when you ask for support), it is needed for security or abuse investigations, the law requires it, or it is aggregated and anonymised for internal operations.
- Tokens are encrypted at rest. You can disconnect any Google account in Integrations, which deletes its tokens, and choose to delete its synced data; or revoke access at any time at https://myaccount.google.com/permissions.
BeHeard uses YouTube API Services. By connecting YouTube you agree to the YouTube Terms of Service (https://www.youtube.com/t/terms), and Google's Privacy Policy (https://policies.google.com/privacy) applies to that data.
9.Retention
- Workspace data is kept while the workspace is active.
- Data from a connected platform is kept while the connection is active. When you disconnect, its access tokens are deleted at once, and its synced data is kept or deleted, as you choose.
- A deletion request from Meta (removing BeHeard in Facebook settings) is processed immediately and deletes that account's tokens and synced data.
- Deleted workspaces and accounts are purged after a 30-day grace period.
- Audit logs are kept for 365 days by default.
- Backups roll over within 30 days.
10.Your rights and choices
Depending on where you live (for example under the GDPR, the Saudi Personal Data Protection Law, the UAE Personal Data Protection Law or Pakistani law) you can access, correct, export or delete your data, object to or restrict processing, and withdraw consent. You can lodge a complaint with your data protection authority.
- Disconnect any platform in Integrations and choose whether to delete its synced data.
- Export all workspace data as a zip file, or delete the workspace or your account, in Settings.
- Follow the steps on our Data deletion page (https://beheard.agency/en/data-deletion), or email hello@beheard.agency.
11.Children
BeHeard is a business service for people aged 18 or over. It is not directed at children and we do not knowingly collect personal data from children. If you believe a child has given us personal data, write to hello@beheard.agency and we will delete it.
12.Security and international transfers
Data is encrypted in transit with TLS (HTTPS) and access tokens are encrypted at rest with AES-256-GCM; our database and file storage providers also encrypt stored data at rest. Access is limited by role, sensitive actions are audited, and two-factor authentication is available and can be required per workspace.
Data is stored in Germany (DigitalOcean) and India (MongoDB Atlas) and processed by providers in the USA. Where required we rely on appropriate safeguards such as standard contractual clauses.
14.Changes and contact
We will tell workspace owners about material changes before they take effect. Questions or requests: hello@beheard.agency. Heard LLP, Pakistan.