Privacy Policy

01What we collect

When you create an account, we collect your name, email address, and password, stored as a bcrypt hash. When you use the platform we collect the content you create, including site pages, project entries, and visitor inquiries, and usage data to operate and improve the service.

If you use Binaav to send messages, we also process the contact details you upload or collect — phone numbers, WhatsApp IDs, email addresses and names — together with the messages sent, their delivery status, and any reply or button response the recipient sends back. Where you are messaging your own customers, you are the controller of that data and Binaav processes it on your instructions.

02How we use it

We use your data solely to provide Binaav: authenticating your session, rendering your sites, delivering messages you send, generating invoices, and monitoring platform reliability.

03Data sharing

We do not sell personal data. We share it only with the sub-processors necessary to run the service, under data processing agreements. These include cloud hosting and storage, payment processing, email delivery, SMS delivery, and — for WhatsApp — Meta Platforms, Inc.

To deliver a WhatsApp message we must send Meta the recipient’s phone number and the message content, because that is how the WhatsApp Business Platform works. Meta processes it under its own terms and privacy policy. We share no more than delivery requires, and we never pass your contact lists to Meta for advertising.

04Messaging channels

Binaav sends WhatsApp, email and SMS messages on behalf of the businesses that use it. Recipients must have opted in before a business messages them, and Binaav customers are contractually required to hold that consent.

We retain message and delivery records so senders can see what was delivered, so recipients’ responses reach the right business, and so we can investigate abuse complaints. We do not read message content for any other purpose, and we do not use it to train AI models.

Deletion requests, including from recipients who never held a Binaav account, are handled through our Data Deletion Instructions.

05Cookies

We set two strictly necessary cookies: __cms_session (your login token, signed JWT) and __cms_csrf (cross-site request forgery protection). No third-party tracking or advertising cookies are used.

06Retention

We retain your data while your account is active. Message and delivery logs are retained for 24 months so that senders can audit what was sent and we can answer abuse complaints, after which they are deleted or anonymised. Opt-out records are kept indefinitely, because deleting one would let us message someone who asked us not to.

To request deletion, follow our Data Deletion Instructions. Your projects and personal data are removed within 30 days.

07International transfers

Binaav operates from India. Some sub-processors — including Meta Platforms, Inc. for WhatsApp — process data outside India, principally in the United States and the European Union. Where data leaves India we rely on the contractual protections in our agreements with those processors.

08Security

All data in transit is encrypted via TLS. Passwords are hashed with bcrypt. Sessions use signed JWTs stored in HttpOnly cookies. We conduct periodic security reviews and patch promptly.

09Your rights & deletion

You may request access to, correction of, or deletion of your personal data at any time, and you may object to processing or ask us to restrict it. Contact us at the address below and we will respond within 30 days.

Step-by-step deletion instructions, for account holders and for message recipients alike, are at binaav.in/data-deletion.

10Children

Binaav is not intended for children. You must be at least 18 to hold an account, and we do not knowingly collect personal data from anyone under 13. If you believe a child’s data has reached us, write to us and we will delete it.

11Contact

Privacy questions or data requests: privacy@binaav.in. General enquiries: hello@binaav.in. Binaav Technologies Pvt Ltd, India. We typically respond within two business days.