Privacy and security
The full policy is at binbox.ai/privacy. This page sums up what matters most for administrators.
Each client account is kept apart
Section titled “Each client account is kept apart”- Every file, report and member belongs to one client account.
- The database checks every request against the signed-in person’s role in that account. Nobody in one client account can reach another’s data, even by guessing an address.
- Viewers see only what is shared with them.
Sign-in
Section titled “Sign-in”- BInbox is by invitation. Only invited addresses can sign in.
- Microsoft and Google share only your name and email address with us, and Google also a link to your profile picture. We never see your password.
- Signing out, or being removed from an account, ends access on our side at once, not only on that browser.
Where your data is kept
Section titled “Where your data is kept”| What | Where |
|---|---|
| Accounts, saved files and the account’s log | Supabase, US East (Ohio) |
| The app at app.binbox.ai | Vercel |
| Sign-in and invitation emails | Resend, sent from binbox.ai |
The account’s log
Section titled “The account’s log”Saved files, shares and member changes are recorded with who made each one and when.
Your files are your company’s
Section titled “Your files are your company’s”Files a client account saves belong to that company. Its owners and admins decide who sees them. To have them deleted, an owner writes to contact@binbox.ai.