Privacy Policy

Overview

Bynli, Inc. ("Bynli," "we," "us," or "our") operates bynli.com and the Bynli community management platform. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our services, whether as an organization ("Team"), a Team member, or a visitor to our site.

By using Bynli, you agree to the collection and use of information as described in this policy. If you do not agree, please discontinue use of the platform.

Information We Collect

Account and Profile Information

When you create a Bynli account or join a Team, we collect your full name, email address, and password (stored as a one-way hash). Team administrators may also collect your phone number, role, and any profile details required by their organization.

Phone Numbers and SMS Opt-In Data

If you opt in to receive SMS or MMS messages from a Team on Bynli, we collect and store your mobile phone number and a record of your opt-in consent, including the method and date of consent. The consent statement shown at opt-in reads: "By providing your phone number you agree to receive text messages from this Team via Bynli. Message & data rates may apply. Reply STOP to unsubscribe at any time."

This data is used solely to deliver messages from Teams you have affirmatively opted into and to comply with A2P 10DLC carrier registration requirements (TCPA, CTIA). We do not sell or share your phone number with third parties for marketing purposes. See our SMS & MMS Messaging Terms for full details.

Form Submissions

When you submit a Bynli-hosted form (public forms, registration forms, lead-capture forms), we collect the fields defined by the Team. Public form submissions also store your IP address and a session token for security and deduplication. Form data is owned by the Team that created the form.

Usage and Log Data

We collect standard server log data including your IP address, browser type, referring page, and pages visited. This data is used for security monitoring, debugging, and platform analytics. It is not sold or shared with advertising networks.

API Request Data

If you or your Team uses the Bynli Read API or Webhooks, we log request metadata including endpoint, timestamp, team identifier, and response status. API request logs are retained for 90 days and used for rate-limiting, abuse prevention, and debugging. API keys are stored as secure hashes; the raw key value is never stored after initial issuance.

Webhook Delivery Data

If your Team configures outbound webhooks, we store the delivery URL, event type, payload hash, and delivery status. Delivery URLs are treated as confidential configuration data and are not shared outside your Team.

Widget Embed Data

The Bynli embeddable widget is served from Bynli's infrastructure and renders community resources on third-party websites. When a visitor loads a page with the widget, a request is made to Bynli's API. We log this request (timestamp, widget key, referring domain) for analytics and rate-limiting. No personally identifiable visitor information is stored from widget loads unless the visitor submits a resource suggestion through the widget.

Payment Information

Bynli does not store full payment card numbers. Payments are processed through PayPal and other providers whose privacy policies govern payment data handling. We store transaction references, amounts, and status codes for billing records.

How We Use Your Information

• Service delivery — providing the platform features you and your Team use;
• SMS messaging — delivering messages from Teams you have opted into, and maintaining opt-in records required by TCPA and carrier A2P registration;
• Security and fraud prevention — detecting abuse, enforcing rate limits, and protecting accounts;
• Communication — sending service-critical emails such as password resets, account notifications, and billing receipts;
• Platform improvement — aggregated, anonymized usage analytics to guide feature development;
• Legal compliance — complying with applicable law, court orders, or regulatory requirements.

We do not use your data for targeted advertising, sell your data to data brokers, or use your data to build third-party advertising profiles.

How We Share Your Information

• Within your Team — Team administrators and managers can access member data for users within their Team.
• Service providers — We use Twilio for SMS/voice, PayPal for payments, and Gmail SMTP for email. Each provider is bound to handle data only as needed to provide their service.
• Legal requirements — We may disclose data when required by law, subpoena, or court order.
• Business transfers — In the event of a merger or acquisition, your data may transfer as part of that transaction. We will notify affected users.

We do not sell personal information to third parties.

Data Retention

We retain your data for as long as your account is active or as needed to provide services. Deleted accounts are purged within 30 days except where retention is required by law. SMS opt-in records are retained until opt-out and for a compliance period thereafter. API request logs are retained for 90 days.

Security

We use encrypted storage for sensitive credentials, HTTPS for all data in transit, CSRF protection on all write operations, and role-based access controls. Report suspected security issues to bynli@bynefit.org.

Your Rights

You may request access to, correction of, or deletion of your personal information by contacting bynli@bynefit.org. You may opt out of SMS messages at any time by replying STOP. We respond to data requests within 30 days.

Children's Privacy

Bynli is not directed to children under 13. We do not knowingly collect personal information from children under 13. Contact us if you believe a child has submitted data and we will delete it promptly.

Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via the Bynli dashboard and/or email. Continued use of Bynli after changes are published constitutes acceptance of the updated policy.

Contact

Questions about this Privacy Policy: bynli@bynefit.org or Bynli, Inc., Atlanta, GA.