Privacy Policy

Last updated: 3 October 2026

1. Who we are

binidex ("we", "us") is an AI assistant platform operated by DIA DIGITAL, available at binidex.com. This policy explains what data we collect, why we collect it, and how we protect it. For any privacy-related question or request, contact us at info@binidex.com.

2. What sets binidex apart

Unlike most AI services, binidex runs its AI model on our own servers in the European Union (hosted in a data centre in Germany). Your conversations are never sent to third-party AI providers such as OpenAI, Google or Anthropic, and your data is never shared with or used to train anyone else's AI models. The only data we may use to improve binidex's own model are responses you explicitly rate with the thumbs up/down buttons — see section 4.

3. Data we collect

  • Account data — your email address, an optional display name, and a securely hashed password. If you sign in with Google, we store your Google account identifier and the name and email Google provides instead of a password.
  • Content you create — your conversations with the assistant, assistants you set up (their name, instructions and documents), the text extracted from documents you upload, the images you upload for the assistant to analyse, and audio recordings you upload for transcription (transcribed on our own servers). We store these so you can return to your conversation history.
  • Usage data — a daily count of the messages you send, used to enforce plan limits.
  • Feedback — if you rate an assistant response with the thumbs up/down buttons, we store that rating together with the rated response and the conversation context it relates to.
  • Safety records — if a message of yours is assessed as a request for help with violence against people and both of our safety checks agree, we store an excerpt of that message, the assessment and the time, to enforce our Terms. Messages about suicide or self-harm are never recorded this way.
  • Technical data — standard server logs (IP address, time of request) kept for security and abuse prevention.
  • Billing data — if you purchase a subscription, payments are processed by Stripe. We never see or store your card details; we only store a reference to your Stripe customer record and your subscription status.

4. How we use your data

  • To provide the service: generating responses, keeping your conversation history, processing your documents — including transcribing audio and building search indexes of larger documents so the assistant can find relevant passages. All of this happens exclusively on our own servers.
  • To secure the service: preventing abuse, spam registrations and unauthorised access.
  • To keep the service safe: every message, and the assistant's reply, is checked automatically by safety models running on our own servers — nothing is sent to third parties. Your device's time zone and browser language are used, without being stored, only to show crisis contacts for your country when someone may be at risk.
  • To answer with up-to-date information (paid plans): when the assistant decides to search the web, only the short search query it writes — not your conversation or account details — is sent to search engines through our own search server, and the pages it reads are fetched by our server.
  • To manage your subscription and billing (via Stripe).
  • To send you strictly transactional emails, such as the email-verification message, a one-time welcome message when you sign up, and the result of a background task you started. We do not send marketing emails.
  • To improve the quality of binidex's own AI model — using only the responses you have explicitly rated with thumbs up/down. Rating a response is entirely optional. This data is processed exclusively on our own infrastructure and is never shared with any third party. You can withdraw a rating at any time by clicking it again.

We do not sell your data, show ads, or share your data with third parties beyond the processors listed below.

5. Cookies

binidex uses only cookies that are strictly necessary for the service to work:

CookiePurposeDuration
sessionKeeps you signed in30 days
g_stateSecurity check during Google sign-in (CSRF protection)10 minutes

We use no analytics, advertising or tracking cookies. Because these cookies are strictly necessary, they don't require consent under the ePrivacy rules — but we tell you about them anyway. Your interface preferences (such as dismissing the cookie notice) are stored locally in your browser and never leave your device.

6. Who processes your data

  • Hetzner Online GmbH (Germany, EU) — hosting of all servers, including the AI model and the database.
  • Google LLC— only if you choose "Continue with Google"; Google shares your name and email address with us to create your account.
  • Stripe, Inc. — only if you purchase a subscription; Stripe processes your payment as an independent controller for payment data.
  • Search engines (such as Google and Microsoft Bing) — only on paid plans, when the assistant searches the web; they receive the search query from our server, without your identity or your conversation.

7. How long we keep your data

Your account data and conversations are kept until you delete them. You can delete individual conversations at any time in the app — deletion from our live systems is immediate. Deleted data may persist in our encrypted nightly backups for up to 14 days, after which backups are rotated and the data is gone permanently. To delete your entire account and all associated data, email us at info@binidex.com and we will erase it without undue delay. Technical logs are rotated automatically and are kept for a maximum of 30 days. Safety records are kept while the account exists; if an account is closed for breaching our Terms, we keep its email address and safety records only as long as needed to enforce the closure.

8. Your rights (GDPR)

As binidex is operated in the EU, you have the full set of rights under the General Data Protection Regulation: the right to access, rectify, erase and export your data, to restrict or object to its processing, and to withdraw consent at any time. Contact us at info@binidex.com to exercise any of these rights. You also have the right to lodge a complaint with your local data protection authority.

9. Security

All traffic is encrypted with TLS. Passwords are hashed with Argon2id and can't be recovered by anyone, including us. The AI model and the database run on infrastructure only accessible to authorised administrators. Documents you upload are processed on our servers and are never shared with third parties.

10. Changes to this policy

If we make material changes to this policy, we will update this page and the "last updated" date above. Continued use of binidex after a change means you accept the updated policy.