Privacy Policy

Updated 31 October 2026 · Controller: Belna, Stockholm, Sweden · support@belna.se

1. Data we handle

• Account and sign-in: email address, user ID, authentication details, sign-in provider, Terms acknowledgement version and time, and account settings. Supabase processes authentication. Google also processes information if you choose Google sign-in.
• Agent and workspace: prompts, replies, chat history, uploaded files, generated artifacts, memories, goals, tasks, automations, vault entries and settings you choose to provide or create.
• Connected apps and agent actions: connection identifiers, permissions, content returned by connected services, action requests and activity records. Data shared with a connected service depends on the permissions and actions you authorize. See Connected apps.
• Billing, wallet and support: plan, token balance and usage, transaction and subscription records, payment identifiers, wallet connection identifiers, balances, transfer and purchase activity, saved shipping addresses, withdrawal requests, support messages and correspondence. Subscription payment information is entered on Stripe's checkout or portal. New optional wallets use Privy for user-owned stablecoin wallets. Funding providers may require identity verification. Belna stores public wallet identifiers, balances and transaction requests; each money movement requires your wallet authorization. Previous Whop balances and unresolved payment records remain with the previous provider. Cards are currently an interest waitlist.
• Technical data: device and browser information, IP address, security and error logs, and browser storage described in our Cookie Policy.

2. Why we use it and legal basis

We use account, workspace and usage data to provide the features you request and manage your plan (performance of a contract). We use billing records to meet tax and accounting duties (legal obligation). We use limited technical and activity data to secure the service, prevent abuse and resolve faults (legitimate interests, balanced against your rights). If we ask for optional consent for a separate purpose, you can withdraw it without affecting earlier lawful processing. Agreeing to the Terms or acknowledging this notice is not consent to unrelated marketing or optional tracking.

3. Recipients and international processing

Relevant data may be processed by Supabase (account and database), Microsoft Azure and AI model services (hosting and agent features), Stripe (payment), Resend (email), the services you connect and, for connections set up before Belna's own integrations, Composio, Inc. (integrations; see Connected apps), and Google if you use Google sign-in or externally loaded fonts. Providers receive only data needed for the feature used, but prompts, files or connected-app content may be sent to an AI provider or integration when your request requires it. Some providers or their infrastructure may process data outside the EU/EEA. Ask support@belna.se for the current provider, destination and transfer safeguard details.

Additional providers include Privy for user-owned wallets and eligible funding or yield integrations, and Whop only for prior wallet and payment recovery; Lovable and Cloudflare for web hosting; Apple for notifications you allow in the iPhone and iPad app and Google Firebase Cloud Messaging for notifications you allow in the Android app; and Firecrawl and public search or source websites for requested web research. Supabase also stores private uploaded and generated files. Microsoft Azure AI Foundry processes AI responses, voice transcription and image generation, and Azure provides cloud workspaces for requested browser and computer tasks.

Connected apps

You can connect accounts you hold with other services so your agent can work in them for you. You choose which apps to connect and approve the permissions on the provider's own sign-in screen (OAuth), so Belna never receives your password for those services. The apps you can connect are shown in Belna under Connectors. Belna uses a connection only to do what you ask, such as reading, finding, drafting, creating or changing something in that account for a request or for an automation you set up. It does not scan, copy or index your connected accounts in the background. An action that sends, publishes, buys or changes something asks for your approval first, unless you chose otherwise in your agent's permission settings.

How Belna connects. Belna is moving connected apps to its own integrations, which use Belna's own app registration with each provider and connect Belna's servers directly to the provider. Until all connections have moved to Belna's own integrations, Composio, Inc. (United States) remains Belna's processor for the connections that were set up through it: it holds the access tokens for those connections and, while they are in use, passes Belna's requests and the results between Belna and the app. Those connections use the permissions you approved on the provider's screen when you connected. With Belna's own integrations, and within the permissions you approve, Belna can access:

• Google: Gmail (read, search, label, archive and draft messages, and send email you approve), Google Drive (find and read your files, and create and change files that Belna created), Google Docs and Slides (read, create and edit documents and presentations), Google Forms (create and edit forms and read responses), Google Contacts (find, add and update contacts), Google Tasks (read and manage task lists and tasks), Google Meet (create meeting spaces, and read details and records of meetings you can access) and Google Ads (read and manage the ad accounts you can access, such as campaigns, budgets and reports). To show which account is connected, Belna receives your Google account ID, email address, name and profile picture; it keeps the ID, email address and name and does not use the picture.
• Meta: Facebook Pages you manage (posts, comments, Page messages and insights), Instagram professional accounts (profile, content, comments, messages and ad reporting), Messenger conversations with your Pages, WhatsApp Business accounts (business conversations and message templates) and Meta Ads (campaigns, ad sets, ads and reporting for ad accounts you can access). To show what is connected, Belna receives your Meta user ID and name and the IDs and names of the Pages, business accounts and ad accounts you grant. Belna does not access personal profiles beyond your name and ID, or personal Messenger or WhatsApp chats.
• Slack: the channels, direct messages and group conversations you can see in the workspace you connect, with their messages and files, search results, and members' profiles and email addresses, and messages and files you approve sending as you.
• Zoom: your Zoom profile (name, email address and user ID), your meetings and their details, and meetings you ask Belna to schedule, change or delete.
• Canva: your Canva profile, designs, folders and uploaded assets, and designs, folders and assets you ask Belna to create, change, upload or export.
• Shopify: products, inventory, orders and locations of the store you connect, and changes to products, inventory and orders that you approve. Orders can include customers' names, contact details and addresses; Belna fetches them only when a request needs them and keeps no separate copy of your store's customer records.
• Stripe: customers, payments, invoices, subscriptions, products, prices and balances in your Stripe account, and changes you approve, such as creating or updating products, prices, coupons, customers, invoices, subscriptions and payment links, or issuing refunds. Belna cannot pay out, transfer or move money from your account, or change your account settings.
• Microsoft (Outlook, OneDrive, OneNote and Microsoft To Do): your Microsoft account's name and email address, your Outlook email (read, search, organize and draft messages, and send email you approve), your calendar events and the events you ask Belna to create or change, your contacts, the OneDrive files you ask Belna to find, read, save or organize, your OneNote notebooks and the pages you ask Belna to read or write, and your To Do lists and tasks.
• GitHub: your GitHub profile and email address, the repositories, issues and pull requests you can access (including private repositories), and issues, comments and other changes you approve. Belna never adds keys or webhooks to your account and never deletes a whole repository.
• Dropbox: your Dropbox account's name and email address, the names and details of your files and folders, the text of files you ask about, files you ask Belna to save, and moves, deletions and shared links you approve.
• Shop (Shop Pay): if you link your Shop account to pay with Shop Pay, Belna receives your Shop account's email address and name. When you approve a purchase, Belna sends the items and your name, email address and delivery address to the merchant's Shopify checkout to set up the order, and you pay with Shop Pay; Belna and the AI model never see your card details. Belna keeps a record of these orders in your account.

How the data is used. Content from a connected app is retrieved only when a request or an automation you set up needs it, and is used only to carry out that request, for example to summarise your unread email, draft a reply or report on a campaign. It is processed by Belna's servers and by our AI model provider, Microsoft Azure AI Foundry, which runs OpenAI GPT models in Belna's own Azure environment. Microsoft does not share it with OpenAI or other model makers and does not use it to train or improve models; it may keep content that its abuse monitoring flags for a limited time to investigate misuse, and the models may process requests in data centres outside the EU/EEA. Belna does not use data from connected apps to train, fine-tune or improve AI or machine learning models. Results can be saved in your chat and task history like other content you share with your agent. We do not sell data from connected apps or share it with data brokers, do not use it for advertising (other than managing your own ad accounts when you ask), and do not use it to build profiles, to decide anyone's eligibility for credit, housing, employment or insurance, or for surveillance.

Legal basis and other people's data. We process data from connected apps to provide the service you asked for (performance of a contract). The data comes from the services you connect. When it includes information about other people, such as people who email you, message your Page or buy from your store, Belna processes it only to carry out your requests and on your instructions, as described in the Terms (legitimate interests).

Storage, security and retention. For Belna's own integrations, access and refresh tokens are encrypted (AES-256-GCM) on Belna's servers. Tokens are never shown in the app or given to the AI model. Data travels over encrypted connections (HTTPS), and our database provider encrypts stored data. While an app is connected, Belna stores the connection: the provider, the account's ID, name and email address, the Pages or accounts you granted access to, and the permissions you approved. Belna deletes them when you disconnect or delete your account. App content is not copied into a separate store; it is kept only where it becomes part of your chats, tasks, files or memories, until you delete those items or your account. People at Belna do not read content from connected apps except in the cases listed under Google user data below.

Disconnecting. Disconnect an app at any time in Belna under Connectors; Belna then deletes that connection and its access tokens at once (for a connection set up through Composio, at Composio), so Belna can no longer access the account. Content already saved in your chats stays until you delete it; see Deleting data from connected apps. The app may still be listed in the provider's settings until you remove it there: your Google Account under Security → Your connections to third-party apps & services, Facebook under Settings & privacy → Settings → Business integrations, your Slack workspace's app management, the Zoom App Marketplace under Manage → Added apps, Canva under Settings → Connected apps, your Shopify admin under Apps, and the Stripe Dashboard under Installed apps. Removing it there also ends Belna's access.

Google user data

Belna's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Belna uses Google user data only to provide the user-facing features you use it for, such as reading, summarising, drafting, organising and creating items in your Google account at your request. Belna does not use Google user data, including Google Workspace API data, to develop, improve or train generalized or personalized artificial intelligence or machine learning models, and our AI model provider does not use it for training either. Belna does not sell Google user data, does not transfer it to advertising platforms, data brokers or information resellers, does not use or transfer it to serve or target ads (including personalised, retargeted or interest-based ads), does not use it to determine creditworthiness or for lending, and does not make it available to anyone for surveillance. Google Ads data is used only to show and manage your own ad accounts when you ask. People at Belna do not read Google user data unless you give us permission for specific data (for example in a support request), it is necessary for security purposes such as investigating abuse, it is needed to comply with applicable law, or it is aggregated and anonymised for Belna's internal operations. Google user data is transferred to others only as needed to provide those features (our hosting, database and AI model providers listed in section 3 and, for connections set up through it, Composio, which must keep it confidential), to comply with applicable law, or as part of a merger, acquisition or sale of assets with your explicit prior consent. Google user data is kept and deleted as described above: tokens and connection details until you disconnect, and content only where you keep it in your chats, tasks, files or memories.

Apple apps and AI data sharing

In the Belna app for iPhone, iPad and Mac, connecting Calendar, Reminders, Contacts or Health is optional. Apple asks for device permission; Belna separately asks for consent to share data with AI. Belna does not upload your address book, calendar or health store when you connect. Requested calendar entries, reminder details, matching contact names and selected email addresses or phone numbers are shared only for your agent requests. Health access is read-only: steps, walking/running distance, exercise time and sleep summaries for your own fitness and wellness. You review every health summary before sharing it with Belna’s server and Microsoft Azure AI, which processes it to answer your request. Health data is not used for advertising, marketing or profiling and is not backed up by Belna to iCloud. Empty health results may reflect missing records or denied permission.

Apple request arguments and results are encrypted in transient device-command storage. Requests expire after two minutes, and the server clears content when it consumes results or expires requests; scheduled cleanup removes expired records. Content you choose to share with your agent can appear in your saved chat and task history. Disconnecting a scope blocks future requests but does not erase previously shared chats. Withdraw AI consent and manage Apple connections in Apple apps → Privacy. You can delete account data in the iPhone, iPad and Mac app under Apple apps → Account → Delete my Belna account; in the Android app and on the web, ask Support or your agent and confirm on the card. You can also contact support for access or deletion requests and any remaining external workspace data.

Notifications are optional. If you allow them in the Belna app for iPhone, iPad or Android, Belna stores that device’s notification token with your account and sends short notifications through Apple Push Notification service (iPhone and iPad) or Google Firebase Cloud Messaging (Android) when your agent finishes a task, needs your approval or has a question, or when an automation or update arrives. A notification shows the task title and the beginning of the result or request, and your device may show it on the lock screen; results based on Health data are never included. Turn notifications or previews off in your device’s Settings. Signing out, withdrawing AI consent or turning notifications off removes the token from your account, and queued notifications are deleted within a day.

4. Retention and deletion

Account and workspace data is kept while needed to provide your account. You can delete individual memories, secrets and other items where controls are available; for a full account-data request, contact us. We may need to retain transaction records for statutory accounting periods and limited records to resolve disputes or protect the service. Browser storage remains on your device until you clear it, sign out where applicable, or your browser removes it. Deleting browser data does not by itself delete server records. Connections to other apps and their access tokens are deleted when you disconnect; see Connected apps. Contact us for the retention period of a particular record.

Deleting data from connected apps

To delete the data Belna has received from Facebook, Instagram, Messenger, WhatsApp, Meta Ads or any other connected app:

1. Open Belna, go to Connectors, choose the app and select Disconnect for each connected account. Belna immediately deletes the access tokens and connection details for that account and stops all access.
2. Delete the chats, Library files and memories that contain content from the app. To delete everything, delete your Belna account: in the Belna app for iPhone, iPad or Mac under Apple apps → Account → Delete my Belna account, or on the web and in the Android app by asking Support or your agent and confirming on the card.
3. Or email support@belna.se from your account's email address and ask us to delete the data from a named app, or all of it. This also covers a Shop account you linked for Shop Pay and connections set up through Composio.
4. You can also remove Belna in the app's own settings, for example on Facebook under Settings & privacy → Settings → Business integrations → Belna → Remove, or in the Zoom App Marketplace under Manage → Added apps → Remove. For apps connected through Belna's own integrations, Belna deletes the connection automatically when Meta or Zoom tells Belna that you removed the app, and when Shopify sends its store deletion notice 48 hours after you uninstall.

Disconnecting and the automatic removals take effect at once, and we complete other deletion requests within 30 days. Deleted data may remain in encrypted backups for a limited period until they are overwritten. We keep only what the law requires, such as payment records that Swedish bookkeeping law requires us to keep for seven years, and if we cannot delete something we tell you why. If you asked Facebook to delete your data, Belna deletes all your Meta connections at once and Facebook shows you a confirmation code. To also have chats, tasks or files with content from Meta apps deleted, or to check the status of your request, email the code and your Belna account's email address to support@belna.se.

5. Your choices and rights

Depending on the circumstances, you can request access, correction, deletion, restriction, portability, or object to processing based on legitimate interests. Email support@belna.se; we may need to verify your identity. You may complain to Integritetsskyddsmyndigheten (IMY) in Sweden or your local data protection authority. Providing an email is necessary to create an account; other data depends on the features you choose. AI suggestions do not by themselves make decisions with legal or similarly significant effects about you.

6. Security and contact

We use access controls and security measures described on our Security page. No online service can guarantee absolute security. For privacy questions, requests or concerns, write to support@belna.se. See also Terms and Cookies.

Optional advertising measurement

Meta Pixel runs only after a separate marketing choice in the cookie banner. Meta receives public-page visits, completed paid-purchase events with amount and currency, and browser and advertising identifiers. This is based on consent, which you can withdraw in Cookie settings. The pixel does not run in native Belna apps. We do not send chat content, files or account email addresses to it. See the Cookie Policy for details and Meta's policy.