Skip to content

Binto Privacy Policy

Updated November 2, 2026 · Binto Privacy Policy (v2)

Binto LLC

6715 Raytown Rd, Raytown, MO 64133
admin@binto.ai

This Privacy Policy describes how Binto LLC (“Binto,” “we,” “us”) collects and uses information when you create an account or use Marketplace, Operations, or Commerce, on the web or in the Binto mobile app for phones and tablets. It applies generally at signup because you may later activate any of those products. Product-specific notices (including the Customer Payment Notice) add detail when you use that product.

Depending on how you use Binto, we may collect:

  • Account — name, email, phone, password (stored as a hash), role selections, and email-verification or password-reset tokens.
  • Marketplace — listing and profile content, inquiries, claim or representative invitations, and related usage.
  • Operations — documents, contacts, assets, team membership, and similar operating records you or your teammates store.
  • Commerce — organization and billing profile data, clients, invoices, payment instructions, payment-attempt metadata, agreement acceptance records, and related audit evidence.
  • Ask Binto (AI assistant) — the questions you ask, the answers, and the records Binto looks up to answer them. Conversation history is kept so you can return to it, and you can delete it.
  • Voice — when you hold the microphone button, a short audio clip is sent for transcription. Binto does not store the audio or the transcript on its servers; the text appears in your question for you to review.
  • Mobile app — app version, device model and operating system, the photos and files you choose to capture or upload, and the sign-in tokens that keep you signed in (stored in the device's secure storage).
  • Shared store tablets (Store Devices) — if your organization enrolls a tablet, a device key created on the tablet, the tablet's name and Location, which team members signed in on it and when, and each member's device PIN (stored only as a one-way hash).
  • Crash and error reports — when the app or our servers hit an error, technical details such as the error message, stack trace, app version, device model and an internal user id. We remove names, email addresses, phone numbers, passwords, tokens and the content of requests before a report is sent.
  • Technical — device, browser, IP address, approximate location derived from IP, and logs needed to operate, secure, and debug the service.

We collect information you submit, information generated by your use of the service, and information from providers that help us run it (for example Stripe account status, email delivery status, or address autocomplete).

We use this information to:

  • Create and secure your account, including sending the verification email.
  • Operate Marketplace, Operations, and Commerce features you use.
  • Send transactional messages (verification, invitations, invoices, payment and agreement notices).
  • Detect abuse, fraud, and operational risk.
  • Meet legal, tax, and accounting obligations that apply to Binto.
  • Answer questions in Ask Binto and read dates and titles from documents you upload.
  • Find and fix crashes and errors.
  • Improve reliability and support.

We do not sell your personal information.

We share information:

  • With other users, when the product requires it — for example a listing inquiry sent to a listing owner, a teammate you invite into Operations, or a client who receives a Commerce invoice and payment page.
  • With service providers that host databases, send email, store files, provide maps/address lookup, or process payments (including Stripe). Access is limited to what they need to perform that service.
  • With AI model providers that power Ask Binto, voice transcription and document reading (currently DeepInfra, hosted in the United States). We use only providers whose terms prohibit training on our data and that do not retain the requests we send.
  • With our error-reporting provider (Sentry), which receives the scrubbed crash and error reports described above.
  • With app stores and notification services when you install the app or, if notifications are turned on, to deliver them (Google, Apple and Expo). Notification messages carry no record content; the app fetches details after you open it.
  • When required by law, to protect rights and safety, or in connection with a corporate transaction involving Binto.

Public Marketplace pages are designed not to expose private contact email or phone fields. Verified users submit inquiries through the platform, and listing owners receive those details privately.

If you use Commerce online payments, Stripe processes card and ACH data. Binto receives payment status, identifiers, and related metadata needed to reconcile invoices. Binto is not the merchant of record for the underlying sale; see the Commerce Terms and Customer Payment Notice.

Operations documents and Commerce invoices can include business and personal information about your customers, vendors, and staff. You are responsible for collecting that information lawfully and for the access you grant inside your organization.

The app asks for the camera (to photograph documents, task photos, inspection evidence and assets), photos (to attach an existing image), the microphone (only while you hold the button to ask by voice), and Face ID or your fingerprint (to confirm it is you before showing a saved account number or login). Biometric data stays on your device; Binto only learns whether the check succeeded. You can change these permissions in your device settings at any time.

We retain account and transactional records for as long as needed to operate the service, resolve disputes, and meet legal obligations. You may send account or data questions to [admin@binto.ai](mailto:admin@binto.ai).

You can ask us to delete your account at any time: in the app (More → Delete my account), in your account settings on the web, or by following the steps at /delete-account. When you ask, we sign you out everywhere straight away and complete the deletion within 30 days. We delete or anonymize your profile and remove your access to organizations. Records your organization or other people still need, such as documents in an organization you do not own, or invoices and payment records we must keep by law, are kept but no longer linked to your profile where possible. If you own an organization, we will contact you about transferring or closing it first.

We use administrative, technical, and organizational measures appropriate to the nature of the service. No method of transmission or storage is perfectly secure.

The version published at /privacy is the current Privacy Policy. We will post updates there.