Privacy Policy

What we collect

Account data: your name, email address and, if you set one, your position in the team.

Content: the messages you send, the chats you import, and the AI questions and answers in your team.

Billing data: the team owner’s billing details are collected and stored by Stripe; we keep only the subscription status and identifiers.

Technical data: logs of requests needed to run, secure and debug the service. Logs never contain message text.

Usage data, only when analytics is enabled: the pages you visit, clicks on sign-in, product events such as creating a team, your device and browser type, and a one-way SHA-256 hash of your email address. It never includes message content, names or chat titles.

How we use it

To provide Binom Chat: delivering messages, notifications and AI answers, and keeping your team’s chats in sync across devices.

To bill the team owner, prevent abuse and keep the service secure.

To understand how Binom Chat and other Binom products are used and improve them, through analytics when it is enabled.

We do not sell personal data, do not show ads and do not use your content to train AI models.

The legal bases are performing our contract with you, our legitimate interest in running a secure service, and complying with the law. Analytics relies on our legitimate interest in improving our products; you can opt out at any time, as described in Cookies and storage.

AI processing

To answer questions, relevant pieces of your team’s chat history are sent to AI model providers through OpenRouter. We allow only providers that do not store or train on the data they receive. Requests do not include your email address.

Voice messages and voice questions: the audio is stored with the message (a question to the AI assistant: with its line in your AI chat). The audio is sent to a speech-to-text provider (ElevenLabs, through OpenRouter) to be transcribed, the same way in the web version and the desktop app; your browser’s own speech service is not used. A recording without any sound is not transcribed. The transcript is stored with it and used like any other message text.

The AI only ever uses chats the person asking is a member of, inside their own team.

Who else processes your data

We use a small number of processors under data processing agreements: our hosting provider (servers and database), Stripe (payments) and OpenRouter with the AI providers it routes to (AI answers). When analytics is enabled, Amplitude and Google (Google Analytics) also process usage data. Some of them may process data outside the UK, under the safeguards the UK GDPR requires.

How long we keep it

Team content is kept while the team exists, including while it is read-only after a subscription ends. When a team is deleted, all its messages, imports and AI data are deleted. Removing a member from a team does not delete the messages they sent there.

Invoices and payment records are kept by Stripe for as long as tax law requires.

Analytics data is kept by Amplitude and Google according to the retention settings of those services.

Your rights

You can ask for a copy of your personal data, ask us to correct or delete it, object to or restrict its processing, and ask for it in a portable format. Write to us and we will answer within one month.

If you are not satisfied with our answer, you can complain to the Information Commissioner’s Office (ico.org.uk).

Cookies and storage

Strictly necessary cookies keep the web version working and need no consent. __Host-aicorp_session keeps you signed in for 30 days. __Host-aicorp_signin exists for 10 minutes while you sign in. Both are set only by chat.binom.com and cannot be read by page scripts.

Analytics cookies are set only when analytics is enabled. Amplitude sets its cookie on .binom.com, so it is shared with other Binom products, and Google Analytics sets its _ga cookies. They record the pages you visit, clicks on sign-in and product events such as creating a team. They never include message content, names or chat titles, and invite tokens in addresses are masked. Your email address is sent only as a one-way SHA-256 hash, so we can recognise the same account across Binom products.

Your browser also keeps some data in its local storage, for example aicorp_cookie_notice (that you have seen the analytics notice), aicorp_analytics (after you choose Opt out) and interface preferences such as column widths.

To opt out, choose Opt out in the notice banner and analytics stops in that browser. You can also block or delete cookies in your browser settings; the strictly necessary ones are needed to stay signed in.

The desktop app sends Amplitude events without cookies, without Google Analytics and without the banner.

Contact

Privacy questions and requests: support@corpchat.app.