Privacy Policy
Last updated 20 October 2026
Effective 20 October 2026.
BinaDesk turns the bank statements you send us into workbooks. This policy says what we collect, why, who handles it, how long we keep it and what you can do about it. How we protect it is on our Security page.
What we collect
- Your account details. Your name and email address, and your company and phone number if you give them. Your password is stored only as a one-way hash that we can't read back.
- Your files. The statements and other documents you upload, the workbook we build from them, and your answers to any questions we ask about them.
- What you tell us. Notes on an order, change requests, and your answers to the short survey after delivery.
- Sign-in records. When you sign in, failed attempts (so we can stop password guessing), and the codes we email you to confirm a new browser.
- A record of staff access. Every time a person on our team opens your files, we record who and when.
- Connection details. Like any website, the companies that serve our site and portal see your IP address and browser when you connect. We use your IP address to limit how many accounts one address can open.
We don't use advertising or analytics trackers on binadesk.com or in the client portal today. If we ever add one, we'll name it on this page first.
How we use it
- To build and deliver your workbook, and to ask you about anything your statements can't settle.
- To run your account: sign-in, emailed codes, password resets and emails about your orders.
- To keep the service secure, stop abuse and investigate problems.
- To improve the service, using your survey answers.
When we identify a business on a statement, such as a store or a utility, we remember what kind of business it is so we don't look it up again. That memory holds the business's name as it appears on statements and its category. It is shared across clients and holds no order number, amount, date or account. If you tell us what a business is, we keep the category you chose for it, but not your words.
We never sell your data or use it for advertising. The AI companies we use work under business terms that say they don't train their models on your data.
Who handles it
Only these companies:
| Company | Security certification |
|---|---|
| Anthropic | SOC 2 Type II, ISO 27001 |
| Cloudflare | SOC 2 Type II, ISO 27001 |
| Google Cloud | SOC 2 Type II, ISO 27001 |
| Microsoft | SOC 2 Type II, ISO 27001 |
| n8n | SOC 2, audited every year |
| OpenAI | SOC 2 Type II, ISO 27001 |
| Render | SOC 2 Type II, ISO 27001 |
| Resend | SOC 2 Type II |
| Slack | SOC 2 Type II, ISO 27001 |
When an AI looks up a merchant, it searches for the merchant's name as it appears on your statement. Your own name is taken out first, and a charge that names a private person is never searched.
We also disclose information when the law requires it, for example under a valid court order. If BinaDesk is ever sold or merged, your data would pass to the new owner under this policy.
How long we keep it
- Files you send us: deleted 30 days after we deliver your workbook. If an order is cancelled or never finished, its files are deleted 30 days after the last activity on it.
- Your workbook: kept in your portal until you delete it or close your account.
- Your account: kept until you close it. Closing your account deletes your account, your files and your workbooks at once.
- Security records, such as sign-in records and the record of staff access: kept as long as we need them to protect the service.
Deleted files can remain in our host's daily backups for a short time, until those backups expire.
Your choices
- Delete an order's files or its workbook at any time with the button in your portal.
- Close your account in the portal, which deletes everything.
- Ask for a copy of your data, or a correction, by emailing info@binadesk.com. We answer within 30 days.
- The survey after delivery is optional.
Cookies
The portal uses only the cookies it needs to work. There are no advertising or tracking cookies.
| Cookie | What it does | How long it lasts |
|---|---|---|
| bd_session | Keeps you signed in | Ends after 15 minutes without activity |
| bd_device | Remembers a browser you confirmed with an emailed code | 30 days |
| bd_signin | Holds your sign-in while you enter the emailed code | 10 minutes |
Where your data goes
Your files are stored in the United States. Some of the companies above work from other countries: n8n runs our order steps from Frankfurt, Germany.
Children
BinaDesk is not for anyone under 18, and we don't knowingly collect data from them.
If something goes wrong
If we learn that your data has been exposed, we'll tell you within 72 hours, with what happened and what we're doing about it.
Notice under the Gramm-Leach-Bliley Act
If the federal law on financial privacy, the Gramm-Leach-Bliley Act, applies to the service we give you, this section is our notice under it. It sums up the rest of this policy.
What we collect. Your name, email address and other contact details; the bank statements you send us, with the account numbers, balances and transactions in them; and the workbooks we build from them.
How we share it.
| Reason we could share your information | Does BinaDesk share? | Can you limit it? |
|---|---|---|
| For our everyday business purposes, such as processing your orders, or to answer court orders and legal investigations | Yes | No |
| For our marketing, to offer our products and services to you | No | We don't share |
| For joint marketing with other financial companies | No | We don't share |
| For our affiliates' everyday business purposes | No | We have no affiliates |
| For our affiliates to market to you | No | We have no affiliates |
| For companies not affiliated with us to market to you | No | We don't share |
Our everyday business purposes means only the companies listed under "Who handles it", each doing its own part of your order, and disclosures the law requires.
How we protect it. As our Security page describes: encrypted connections, encrypted disks, an emailed code on every new browser, a record of every time staff open your files, and deletion of your files 30 days after delivery.
Former clients. When you close your account we delete your data as described above. This notice keeps applying to anything we still hold, such as security records.
Questions. Email info@binadesk.com.
Changes to this policy
We'll post any change here with a new effective date. If a change matters to how we use your data, we'll email account holders before it takes effect.
Contact
Email info@binadesk.com, or security@binadesk.com for a security problem. By post: BinaDesk, 400 Boulevard of the Americas, Suite 404, Lakewood, NJ 08701.