Bin & Box

Privacy Policy

Last updated: 19 July 2026

Template — pending legal review. Placeholder text to structure the policy. Have qualified counsel finalize it and confirm it matches your actual data practices and obligations (e.g. GDPR/CCPA, and any data-processing agreement you offer regulated customers).

This Privacy Policy explains how [LEGAL ENTITY] ("Bin & Box", "we", "us") collects, uses, and shares information in connection with the Bin & Box platform (the "Service"). For business customers, Bin & Box acts as a processor of the data you submit; you are the controller of that data.

1. Information we collect

2. How we use information

To provide, secure, and improve the Service; to authenticate users; to communicate about your account (e.g. verification and password-reset emails); to enforce our Terms; and to comply with legal obligations. We do not sell personal information.

3. How we share information

With service providers who process data on our behalf under contract (e.g. hosting, email delivery), only as needed to run the Service; when required by law; and in connection with a business transfer. Each customer's data is logically isolated from other customers'.

4. Sub-processors

We use a limited set of vendors to operate the Service (for example, cloud hosting and transactional email). A current list is available on request; [MAINTAIN A SUB-PROCESSOR LIST HERE].

5. Data retention

We retain Customer Data for as long as your account is active and as needed to provide the Service. After termination, data may be retained for a limited window to allow export, then deleted or anonymized in line with our retention practices and legal requirements. An append-only audit log may be retained longer where required for compliance.

6. Security

We use administrative, technical, and physical safeguards appropriate to the data, including encryption in transit and access controls. No system is perfectly secure.

7. Your rights

Depending on your location, you may have rights to access, correct, delete, or export personal data, or to object to or restrict certain processing. Business customers can exercise many of these directly in the app or by contacting us; end-user requests should generally be directed to the customer (controller) whose workspace holds the data.

8. International transfers

Data may be processed in the countries where we or our providers operate. Where required, we rely on appropriate safeguards for cross-border transfers.

9. Cookies

We use a single strictly-necessary session cookie to keep you signed in. We do not use advertising or third-party tracking cookies.

10. Changes

We may update this policy; material changes will be communicated through the Service or by email.

11. Contact

Privacy questions or requests: [email protected].

← Back to Bin & Box  ·  Terms of Service  ·  Contact support