Privacy

What Binderkit holds, and what leaves it.

In plain words. If this page and a screen in the product disagree, the screen is the bug.

Protected health information

None. There is no field in this product that can hold a name, a date of birth, a diagnosis or a finding about a person.

Personal information

Your own account: an email address, and your membership of an organisation and its facilities.

Public

Six tables — the rule libraries, the templates and the plans, keyed by facility code.

Where it lives

Records are held in Convex, in the United States, under a business associate agreement. Stripe takes payment and holds the card; we never see a number. Email goes through Resend. Those three are the only processors.

It holds no protected health information, so there is no customer business associate agreement to sign.

What leaves the product

Channel by channel.

Logs: The Convex dashboard only. No third-party log destination.
URLs: Opaque short-codes. A link cannot be read for a name.

This website

If you join the early-access list, this site keeps the email you typed, a phone number if you gave one, the licence track and house count you picked, and the time you sent it. No analytics script, no advertising pixel, no third-party tag. We write once, when the product opens. Reply and we delete the row.

Cookies, and what is kept on your device

Nothing is kept until you answer the cookie question, except the display choices you made in the header. Saying no keeps nothing but the no.

pho-consent: Your answer, as the word all or min. It lasts a year so you are not asked on every visit.
pho-mode: Your dark-mode choice, and where offered your text-size choice as pho-text, in this browser’s local storage. Never sent to a server.
pho-draft: Only if you said yes. What you typed into a form and have not sent, so a refresh does not lose it. Deleted the moment the message sends.

None of it identifies you to us or follows you anywhere. Clear this browser’s site data and you are simply asked again.

Your rights

Export everything the product holds for your organisation at any time, and after a cancellation. Ask us to delete a record and we delete it; the audit log of who did what is kept, because a record that can be quietly removed is not an audit log.

The Terms of Service and, where one applies, the customer business associate agreement are presented at signup and kept in your account. This page summarises; it does not replace them.

Back to Binderkit