Privacy Policy

1.1 Information You Provide

We collect information you voluntarily provide when using our Service, including:

• Account Information: Name, email address, password, organization (agency) name, and profile information when you create an account.
• Contact Information: Name, email, and message content when you contact us through our contact form or support channels.
• Payment Information: Billing address and payment details processed through our third-party payment processor (we do not store full payment card numbers).
• Client Data: The information you and your team enter or import into the CRM about your clients and prospects, such as contacts, policies, coverages, documents, notes, tasks, and communication history. We process this data on your behalf to provide the Service (see Section 10).
• Communications: Information you provide when communicating with us via email, chat, or other channels.

1.2 Information Collected Automatically

When you use our Service, we automatically collect certain information, including:

• Device Information: Device type, operating system, browser type and version, and unique device identifiers.
• Usage Information: Pages visited, features used, actions taken, time spent, and navigation patterns.
• Log Data: IP address, access times, request URLs, referrer URLs, and error logs.
• Session Information: Authentication and session data necessary to maintain your logged-in state.

1.3 Cookies and Similar Technologies

We use cookies and similar technologies to operate and improve the Service. These include:

• Essential Cookies: Required for the Service to function, including authentication and security.
• Analytics Cookies: Help us understand how visitors interact with our marketing website so we can improve it. We use Google Analytics for this purpose on our public website only, not inside the logged-in application.
• Preference Cookies: Remember your settings and preferences.

You can control cookies through your browser settings, but disabling certain cookies may limit some features of the Service. We do not currently respond to browser Do Not Track or Global Privacy Control signals.

We use the information we collect to:

• Provide, maintain, and improve the Service
• Create and manage your account and organization
• Process transactions and send related information
• Send administrative information, such as updates, security alerts, and support messages
• Respond to your comments, questions, and requests
• Monitor and analyze usage patterns to improve the user experience
• Detect, prevent, and address technical issues, fraud, and security threats
• Enforce our Terms of Use and comply with legal obligations
• Send promotional communications (with your consent, where required)

We use Client Data only to provide and support the Service for you. Some features may use third-party AI providers (such as Anthropic and OpenAI) to process information you submit, for example, to summarize notes or help draft communications. We send data to these providers only to deliver the feature you are using, and each provider processes that data under its own terms, which we encourage you to review. AI features may also operate through assistants you choose to connect, as described in Section 9. We do not sell Client Data, use it for advertising, or use it to train AI models.

We do not sell your personal information or your Client Data. We may share information in the following circumstances:

3.1 Service Providers

We share information with third-party vendors who perform services on our behalf, such as:

• Cloud hosting and infrastructure providers
• Payment processors
• Email and messaging delivery services
• Analytics providers
• Customer support tools

These providers are contractually obligated to protect the information and may only use it to provide services to us.

3.2 Business Transfers

If Binder Labs is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, information may be transferred as part of that transaction. We will notify you of any change in ownership or use of your information.

3.3 Legal Requirements

We may disclose information if required by law or in response to valid legal requests, such as subpoenas, court orders, or government regulations, and to:

• Comply with legal obligations
• Protect our rights, privacy, safety, or property
• Protect the rights, privacy, safety, or property of our users or others
• Enforce our Terms of Use
• Investigate potential violations or suspected illegal activity

3.4 With Your Consent

We may share information with third parties when you give us explicit consent to do so, for example, when you connect an integration you have chosen to use.

3.5 Within Your Organization

When you use the Service as part of an agency, information such as your name, email, and activity within the Service may be visible to administrators and other authorized members of your organization.

We implement appropriate technical and organizational measures to protect information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using TLS
• Encryption of data at rest in our managed database
• Row-level security that isolates each organization's data at the database layer
• Role-based access controls and secure, server-side sessions
• Automated backups

No method of transmission or storage is completely secure. While we work hard to protect your information, we cannot guarantee absolute security. You can learn more on our Security page.

If we become aware of a security breach that affects your personal information or Client Data, we will notify you without undue delay in accordance with applicable law.

We retain information for as long as necessary to provide the Service and fulfill the purposes described in this policy:

• Account Information: Retained while your account is active and for a reasonable period afterward for legal and business purposes.
• Client Data: Retained while your account is active. You may request an export of your data at any time, including before deletion on termination.
• Log Data: Typically retained for up to 12 months for security and debugging.
• Analytics Data: Aggregated and anonymized analytics may be retained indefinitely.

We may retain certain information as required by law or for legitimate business purposes, such as resolving disputes or enforcing our agreements.

Depending on your location, you may have certain rights regarding your personal information:

6.1 Access and Portability

You may request access to the personal information we hold about you and request a copy in a portable format.

6.2 Correction

You may request correction of inaccurate or incomplete personal information. You can update much of your account information directly in your settings.

6.3 Deletion

You may request deletion of your personal information, subject to certain exceptions required by law or legitimate business purposes.

6.4 Opt-Out of Marketing

You may opt out of promotional emails by following the unsubscribe instructions in those emails. We may still send non-promotional, service-related messages.

6.5 Cookie Preferences

You can manage cookie preferences through your browser settings or any cookie consent tools we provide.

If you are an individual whose data an agency stores in Binder (for example, a policyholder), please direct your request to that agency, which controls the data. To exercise your own rights, contact us at [email protected].

Binder Labs is based in the United States, and the Service is intended for use by insurance agents and agencies in the United States. We do not market or direct the Service to individuals in the European Economic Area, the United Kingdom, or other regions with separate data-transfer requirements.

Your information is stored and processed in the United States. If you access the Service from outside the United States, you understand that your information will be transferred to and processed in the United States, where data protection laws may differ from those in your country.

The Service is not intended for individuals under the age of 18, and we do not knowingly collect personal information from children. If we learn we have collected information from a child without parental consent, we will delete it promptly. Contact us at [email protected].

The Service may contain links to, or integrations with, third-party services that we do not operate. This policy does not apply to those services. We encourage you to review their privacy policies, and we are not responsible for their practices or content.

This includes any third-party AI assistant you choose to connect (such as Claude or ChatGPT). When you connect one, the data you make available to it is handled under that provider's terms and privacy policy, not this one. You control what you connect and can revoke access at any time.

Binder's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Where you choose to connect a Google Workspace account (for example, Gmail or Google Calendar) to Binder, we access the data in that account only to provide the integration features you have enabled, such as syncing emails or calendar events with your CRM records. We do not use data obtained through Google Workspace APIs to serve advertisements, and any use of AI or machine learning models on that data is solely to provide or improve user-facing features you have requested, subject to the Limited Use requirements linked above. Human review of this data is limited to what is necessary for security, legal compliance, or with your explicit consent for support purposes. You may revoke Binder's access to your Google account at any time from your Google Account settings or from within Binder.

Who controls the client data in your CRM

The Service lets you store and manage information about your clients and prospects, including contacts, policies, documents, and communications ("Client Data").

For Client Data, your agency is the data controller and Binder Labs acts as a service provider (processor). We process Client Data on your behalf and according to your instructions, solely to provide and support the Service. We do not sell it, share it with other organizations, or use it for advertising.

Client Data may include information regulated under insurance and financial-privacy laws. As the controller of this data, your agency is responsible for handling it in compliance with the laws that apply to you. We process it solely to provide the Service and apply the security measures described in Section 4.

You are responsible for collecting and using your clients' information lawfully, including providing any required notices, honoring consents, and responding to your clients' privacy requests. We will support you in meeting those obligations, including by enabling export and deletion of data.

If you are a California resident, you may have additional rights under the CCPA/CPRA, including:

• Right to Know: Request the categories and specific pieces of personal information we have collected.
• Right to Delete: Request deletion, subject to certain exceptions.
• Right to Correct: Request correction of inaccurate personal information.
• Right to Opt-Out: We do not sell personal information, so there is nothing to opt out of.
• Right to Non-Discrimination: We will not discriminate against you for exercising your rights.

To exercise these rights, contact us at [email protected]. We may need to verify your identity first.

We may update this policy from time to time. We will note material changes by posting the updated policy with a new "Last Updated" date and, where appropriate, by emailing you. Your continued use of the Service after changes indicates acceptance of the updated policy.

If you have questions, concerns, or requests regarding this policy or our data practices, contact us at [email protected]. We will respond as soon as reasonably practicable and in accordance with applicable law.