Privacy policy
How Binaa collects, uses and protects personal data when you use Binaa and this website.
Who we are
Binaa is run by Binaa. For the data of this website, the demo, trial requests, messages to us and billing, we decide how it is used: we are its controller.
The data a firm puts into its workspace (its projects, files, staff and clients) is the firm's: the firm decides how it is used, and we process it on the firm's behalf. If you work for a firm that uses Binaa, your firm is your first contact about that data.
What we collect
- Account data: each user's name, email, phone and photo (if given), role and language, and the password in a protected (hashed) form. We never see the password itself.
- Workspace data: what your firm puts in: projects, drawings, files, contracts, payments, tasks, meetings, messages and the people named in them, with a history of who changed what.
- Billing data: your firm's bundle, invoices and payments. Card details are typed on the payment provider's own page; we never see or keep them.
- The 20-minute demo: the email you type, your IP address and the time, kept as a log so the demo is not abused. The sample firm and everything typed into it are deleted when the demo ends.
- Trial requests: your name, email, company, phone, country, company size, why you need Binaa, your language and your IP address.
- The contact form: your name and email, your phone, company and country if you give them, the topic and your message, with your language and your IP address.
- AI assistant use (when your firm has turned it on): who asked, when, about which file or project, which model answered and how much it used. We do not keep the questions or the answers.
- Security records: to stop floods and break-ins, we count recent requests per IP address and per email for a short time, and keep two-step login codes, protected, until they expire.
Why we use it
- To run the service: log you in, show your firm its data, and send the app's emails (invitations, invoices, notices).
- To bill your firm and keep the accounting records the law requires.
- To answer your messages and trial requests, and to set up your firm.
- To keep the service safe: stop abuse, floods and break-ins.
We rely on our contract with your firm, on our legal duties (such as keeping invoices), and on our legitimate interest in a safe service. Where the law asks for your consent, we ask for it.
We do not sell personal data, show ads, or build profiles of you. We use no analytics or advertising tools.
Cookies and browser storage
We set only the cookies the site needs to work, so they need no consent. There are no analytics, advertising or third-party cookies.
| Cookie | What it does | How long |
|---|---|---|
sessionid | Keeps you logged in. | Until you log out, or 2 weeks at most |
csrftoken | Protects forms against requests forged by other sites. | 1 year |
django_language | Remembers the language you chose. | Until you close the browser |
messages | Carries a one-time notice, such as “Saved”, to the next page. | Until that page is shown |
The app also keeps a few display choices in your browser's own storage (light or dark theme, the side menu, list or board views), and the AI assistant keeps the current conversation in the browser tab until it is closed. This storage is not sent to us, except the conversation, which goes with each new question.
The payment provider's pages set their own cookies, under their own policies.
Who processes it for us
- Hosting: our server provider, which stores the service and its data.
- Email: our email provider, which sends the app's emails.
- MyFatoorah: takes online payments by KNET and card. It receives the invoice and what you type on its payment page.
- Paddle (when we start using it): Paddle.com acts as our reseller and Merchant of Record for card payments in some countries, under its own privacy notice.
- An AI provider, only when the firm turns on the AI assistant with its own key: the questions, and the parts of the firm's files and projects they are about, go to the provider the firm chose (Google Gemini, Anthropic Claude or OpenAI), under the firm's own agreement with it.
Each gets only what it needs for its task. Some may process data outside your country; where the law asks, we make sure the transfer is protected. We also share data when the law requires it, for example on a court order.
How long we keep it
- Account and workspace data: while your firm's account is open. When a firm asks us to close it, we delete its workspace and users, except the invoices and payment records the law asks us to keep.
- Invoices and payment records: as long as accounting and tax laws require.
- The demo: the sample firm is deleted when the demo ends; the log of demo starts (email, IP address, time) is kept as long as it is needed to stop abuse.
- Trial requests and contact messages: as long as needed to answer and follow up; we delete them on request.
- Security counters and login codes: minutes to hours.
How we protect it
Each firm's data is kept apart from every other firm's. Passwords are stored hashed, and saved payment and AI keys are encrypted. The site is served over an encrypted connection (HTTPS), and two-step login by email code is available.
No system is perfectly safe. If a breach affects your data, we tell the firms concerned without delay.
Your rights
You can ask to see the personal data we hold about you, to correct it, to delete it, to get a copy, or to object to or limit how we use it. You can change many of your details yourself in the app, on your profile.
For data inside a firm's workspace, we pass your request to that firm, or act on its instructions.
You may also complain to the data protection authority of your country. Binaa is made for businesses and is not meant for children.
Changes to this policy
We may update this policy. The date at the top shows the last change; for an important change we tell the Tenant Admins by email.
Contact us
Questions about this page, or a request about your data or your account? Write to us:
Binaa Our contact form