Privacy Policy

Who is responsible

When an organization enrolls its people, that organization decides what information to share and how it is used; Bintera processes it on their behalf, under our Data Processing & Security Terms. If you are a learner, your organization is your first point of contact for questions about your training data.

For visitors to our website and for the people who sign up for or buy Bintera, Bintera decides how that information is used.

What we collect

• Account details: name, work email, organization name, department, site and group, and the role (learner or administrator). If your organization connects Microsoft 365, the directory identifiers needed to keep the list in step.
• Training activity: which lessons were assigned, started and finished, the choices made at each decision point, quiz answers, scores and dates.
• Reported emails: if your organization uses the Outlook report button, the sender, subject, technical headers and links of the email you report, any note you add, and your email address. We never receive the message body or attachments.
• Sign-in and security: the time of each sign-in, the browser type, a one-way scrambled form of the network address (we do not keep the address itself), and an activity log of administrator actions. If you turn on an authenticator app, its secret is stored encrypted.
• Demo requests: if you ask for a demo, your name, work email, phone number, job title, company, company size and any message. We use them only to contact you about Bintera. Unconfirmed requests are deleted after 7 days, confirmed ones after two years.
• Website visits: standard server logs kept by our hosting provider for security and reliability. We do not use advertising or cross-site tracking.

We do not ask for, and the Service has no place for, home addresses, health information, government identifiers or payment card numbers.

How we use it

• to provide the training, send invitations and reminders, and show administrators progress and records;
• to keep accounts and the Service secure, detect misuse and fix problems;
• to answer support requests and send service notices (such as renewal or security notices);
• to improve our lessons using aggregated results that do not identify anyone.

We do not sell or rent personal information, share it for cross-context behavioral advertising, or use it to train artificial-intelligence models.

Who we share it with

Only with the service providers that help us run Bintera, under contracts that limit them to doing that work and require them to protect it:

• a cloud infrastructure provider that runs the service;
• an email delivery provider that sends sign-in links, invitations and reminders;
• a payment processor for paid plans.

Organizations that use Bintera can find the named providers in our Data Processing & Security Terms.

If your organization connects Microsoft 365, Slack, Microsoft Teams or a webhook, we exchange information with those services at your organization’s direction. We may also disclose information if required by law, to protect people’s safety or our rights, or as part of a merger or sale of our business, in which case this policy continues to apply.

Cookies

We use only the cookies needed to keep you signed in and to complete a two-step sign-in. They are strictly necessary, so there is no cookie banner. Your choice of light or dark mode is saved to your account, not a cookie.

How long we keep it

• Training records are kept while your organization uses Bintera, so it can show its history to auditors.
• An administrator can remove a person at any time; their training record stays with the organization’s history unless the organization is deleted.
• When an organization is deleted, access ends immediately and all of its data is permanently erased after 30 days. Our hosting provider’s backups roll over within a further 30 days.
• Sign-in links expire after 15 minutes (72 hours for invitations) and work once. Email delivery history is kept for 30 days, without the message contents.

Your choices and rights

Depending on where you live, you may have the right to access, correct, delete or receive a copy of your personal information, or to object to or restrict certain uses. Learners should contact their organization first; we will help them respond. Others can write to privacy@bintera.com. We will not treat you differently for exercising these rights, and we respond within the time the law requires. You may also complain to your local data protection authority.

How we protect it

Every connection is encrypted, each organization’s records are kept separate, there are no passwords to steal, lesson links are private and short-lived, and administrator actions are logged in a record that cannot be edited. More on our Security page.

Where it is processed

Bintera is based in the United States, and our providers may process information in the United States and other countries where they operate. Where the law requires, we rely on appropriate safeguards such as standard contractual clauses for these transfers.

Children

Bintera is designed for adults at work and is not directed to children. Organizations must not enroll anyone under 16. If we learn we have information about a child, we will delete it.

Changes and contact

We will post changes here and, for material changes, email account owners in advance. Questions: privacy@bintera.com, Bintera Technologies LLC.