What we collect
In alpha: email, name, country, and transfer metadata. KYC uploads are mocked and never stored. Logs include request timestamps, status codes, IP addresses, and user-agent strings.
What we don't collect
No tracking pixels. No third-party analytics. No ad networks. Google Fonts is loaded with preconnect and used only for Hanken Grotesk, Inter, and JetBrains Mono.
Where it lives
A single DigitalOcean droplet in SFO3. All at-rest encryption is at the volume level today; field-level encryption lands in M3. All in-transit traffic is TLS 1.3.
How long we keep it
Alpha accounts and their data may be purged at any time. Production retention schedule will be posted here before Phase 1 go-live and will meet BSA record-keeping requirements for US send-side transfers (five years from completion).
Your rights
Email privacy@binta.com to request a data export or deletion. GDPR and CCPA request handling will be formalized before any marketing in the EU or California.