Privacy Policy

What this policy covers

This policy explains what data Bina ("we", "us") collects when you use our web app at bina.app and our Chrome extension Bina — Click Capture, how we use that data, and your rights over it.

What we collect

• Account data: your email, name, hashed password (bcrypt), and workspace name. Used only to authenticate you and route your data to your workspace.
• Procedure content: anything you type, record, or capture inside Bina — text, step titles, descriptions, uploaded images, screen recordings, and procedure metadata.
• Browser extension data: when you explicitly start a capture session, the extension records (a) screenshots of the visible tab, (b) the URL + page title of pages you capture, and (c) the clicked element's accessible label. It does NOT record keystrokes, form values, or any page content outside the visible-tab screenshot.
• Billing data: handled entirely by Stripe. We store only the Stripe customer ID, your plan, and your transaction history (amount, status, timestamps). We never see your card details.
• Logs: standard server logs (IP, user-agent, timestamps, response codes) retained for 30 days for abuse prevention and debugging.

What we do NOT do

• We do not sell your data to anyone, ever.
• We do not show ads or use your data to target ads.
• We do not use your procedures to train AI models.
• The extension does not read or transmit any page content other than the visible-tab screenshot you explicitly capture by clicking.

Third-party processors we use

• Anthropic (Claude Sonnet 4.5): receives the rough notes or transcript you submit for AI procedure generation. Anthropic's policy prohibits training on customer API data.
• OpenAI (Whisper-1): receives audio you upload for transcription. OpenAI's policy prohibits training on customer API data.
• Stripe: handles all payments. We never see your card details.
• MongoDB Atlas: hosts your encrypted-at-rest workspace data.

How long we keep data

We retain your account and procedure data for as long as your workspace exists. If you delete your workspace, all associated data is hard-deleted within 30 days. Server logs are retained for 30 days. Stripe retains transaction records per their own policy (typically 7 years for tax compliance).

Your rights

You can export, edit, or delete your data at any time from the Settings page. You can revoke the browser-extension connection token from Settings → Browser extension at any time. If you'd like a full data export or a hard delete, email privacy@bina.app.

Contact

Questions about this policy or your data? Email privacy@bina.app. We respond within 5 business days.