Privacy Policy

1. Who we are

BINAI is operated by Binai.it, VAT 01627330051, Via Angelo Brofferio 181, 14100 Asti (AT), Italy, which is the data controller. Contact: mail@binai.it.

2. Data we collect

We collect the data needed to operate the Service: your account details (an account identifier and, if you sign up with email or with Google, your email address and the basic profile details Google shares with us, described in section 3; a guest account has no email); the media and links you bring, such as videos, images, photos of products or people, voice samples and links to videos; your prompts, instructions and settings; the content we generate for you and the projects, workspaces and edits you make; your credit balance and usage records, such as which jobs ran and what they cost; and your subscription and billing status. We do not receive or store your full card details.

3. Google user data

You can sign in to BINAI with your Google account. This is the only way BINAI accesses data from your Google account.

• What we receive: when you choose "Continue with Google", Google shares your name, your email address and your profile picture, plus a Google account identifier. We do not request access to your Gmail, Google Drive, Google Photos, contacts, calendar, YouTube account or any other Google service.
• How we use it: only to create your BINAI account, sign you in and keep it secure, and to contact you about your account (for example service emails). Your Google data is not used to generate, train or improve AI models, is not used to create any image, video or audio, is not used for advertising, and is never sold.
• Who we share it with: it is stored by Supabase, which runs BINAI's sign-in, and is not shared with anyone else, except where required by law.
• How to remove it: deleting your BINAI account (Account settings → Delete account in the app) deletes the Google data we hold. You can also remove BINAI's access at any time from your Google Account at myaccount.google.com/permissions.

BINAI's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

Separately from sign-in, our servers use some Google APIs with BINAI's own credentials, not your Google account: the YouTube Data API to read the public details of a YouTube video you link (such as title and length), and Google's search and maps APIs to find reference images and draw maps from search terms. These requests contain no data from your Google account.

4. How we use your data

We use your content to do what you ask. Your prompts, media and the relevant parts of your projects are sent to the AI models and processing services each job needs, for example a transcript to choose clips, frames to run the content check, or a photo to swap a character. Requests may also be checked automatically to refuse sexual or intimate imagery of real people and any sexual content involving minors, as described in our Terms of Service. To frame shots around the person speaking, our own servers detect where faces are in a video; this is not used to identify anyone. Account, credit and usage data is used to provide the Service, enforce plan limits, charge credits, process payments, send service emails (such as the notice that your clips are ready) and provide support. We do not sell your personal data.

5. Who we share data with

To operate BINAI we rely on the following processors, each of which handles data only as necessary to provide their part of the Service:

• Supabase: handles sign-in and hosts your account, projects, uploaded and generated media files, credits, usage and subscription data.
• Stripe: processes subscription payments and stores billing information; BINAI does not store your card details.
• Apple App Store and Google Play: process subscriptions you buy in the iOS or Android app; we receive the purchase details needed to activate your plan.
• OpenRouter: our routing provider to AI models from Google, Anthropic, OpenAI and other model makers, used for text, images, video, speech and transcription. It receives the prompts, text, images, frames or audio each request needs.
• Replicate: runs hosted AI models for image, video and audio work, such as cut-outs, upscaling, image edits, character swap, music and separating audio tracks. It receives the images, video or audio each request needs.
• ElevenLabs: receives a voice sample when you choose to clone a voice.
• Resend: sends service emails, such as the notice that your clips are ready; it receives your email address and the content of that email.
• Vercel: hosts this website, the web app and our API, and processes the requests your browser or app sends to them.
• Hetzner and RunPod: host the servers that download, analyse and render your videos.
• People you invite: if you share a workspace or project, the people you invite can see and work on its content.

To find stock photos, maps and reference material for your projects, we send search terms, not your account details, to services such as Google's search and maps APIs, Pexels, Unsplash and Wikipedia. To download a public video you link to, our servers may connect through a proxy network (Webshare): it relays the connection to the video platform and does not receive your account details or the content of your projects. Some of our providers are located outside the EU/EEA; where personal data is transferred there, we rely on the safeguards required by the GDPR.

6. Data retention

We keep your account, projects and the content you upload or generate for as long as your account remains active, or as needed to comply with legal obligations, resolve disputes, and enforce our agreements. Source video we download from a link is kept only while the job runs and is deleted from our processing servers when the job finishes or fails; temporary files left behind by an interrupted job are removed automatically within a few hours. You can delete a project at any time, and when you delete your account, your account and the data linked to it are deleted. Payment records held by Stripe, Apple or Google are kept by them as required by law. You can request deletion at any time (see below).

7. Your rights (GDPR)

If you are located in the EU/EEA or UK, you have the right to access, correct, export, or delete your personal data, and to object to or restrict certain processing. To exercise any of these rights, contact us at mail@binai.it. We will respond within the timeframes required by applicable law. You can also lodge a complaint with your data protection authority; in Italy, the Garante per la protezione dei dati personali.

8. Cookies and analytics

This website (binai.it) sets a single cookie, NEXT_LOCALE, which remembers your language for up to a year, and uses no analytics or marketing cookies. The web app (app.binai.it) keeps your sign-in session in your browser's local storage, which is strictly necessary to keep you signed in, and uses no analytics or advertising trackers. In the editor, the app may load fonts from Google Fonts, which receives your IP address. Payment pages are run by Stripe, which may set its own cookies. If we introduce analytics or marketing cookies in the future, we will update this policy and request consent where required by law.

9. Security

We use industry-standard measures, including access controls and encrypted data transport, to protect your data. Media files in your projects are served from long, hard-to-guess links so they can be played and shared; anyone who has such a link can open the file, so share links with care. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

10. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above.