Privacy Policy

1. Introduction

This Privacy Policy applies to BinEvo ("we," "our," or "us"), a B2B2C marketplace platform connecting homeowners with professional contractors and providing equipment rental and purchase services. By using our website, mobile applications, or services (collectively, the "Platform"), you agree to the collection and use of information in accordance with this policy.

1.1 Scope

This Privacy Policy covers:

• Personal information we collect
• How we use your information
• How we share your information
• Your privacy rights and choices
• Data security measures
• Children's privacy
• International data transfers

2. Information We Collect

2.1 Information You Provide

Account Registration Information:

• Full name
• Email address
• Phone number
• Password (encrypted)
• User role (Customer or Vendor)

Profile Information:

• For Customers: Address, contact preferences, project categories of interest, billing information
• For Vendors: Business name, business address, service areas, licenses, insurance information, portfolio images, business hours, payment details

Transaction Information:

• Order details and purchase history
• Payment information (processed securely through Stripe)
• Shipping and billing addresses
• Communication with vendors or customers

User-Generated Content:

• Reviews and ratings
• Project photos and descriptions
• Messages and inquiries
• Comments and feedback

2.2 Information Collected Automatically

Device and Usage Information:

• IP address
• Browser type and version
• Operating system
• Device identifiers
• Pages visited and time spent on pages
• Referring URLs
• Search queries

Location Information:

• Approximate location based on IP address
• Precise location (only with your permission) for service matching

Cookies and Similar Technologies:

• Session cookies for authentication
• Persistent cookies for preferences
• Analytics cookies for platform improvement
• Advertising cookies for targeted marketing

2.3 Information from Third Parties

• Authentication services (NextAuth.js)
• Payment processors (Stripe)
• Social media platforms (if you choose to connect)
• Background check services (for vendor verification)
• Public databases (for business verification)

3. How We Use Your Information

3.1 Platform Operation and Services

• Create and manage your account
• Process transactions and orders
• Match customers with appropriate vendors
• Enable communication between customers and vendors
• Provide customer support
• Send OTP verification for authentication
• Process payments securely

3.2 Platform Improvement

• Analyze usage patterns and trends
• Conduct research and development
• Test new features and functionality
• Optimize user experience
• Improve search and recommendation algorithms

3.3 Communication

• Send transactional emails (order confirmations, shipping updates)
• Provide important platform updates
• Send marketing communications (with your consent)
• Respond to inquiries and support requests
• Send notifications about platform activity

3.4 Safety and Security

• Verify vendor credentials and licenses
• Detect and prevent fraud
• Monitor for suspicious activity
• Enforce our Terms and Conditions
• Comply with legal obligations
• Protect against security threats

3.5 Legal Compliance

• Respond to legal requests and court orders
• Comply with applicable laws and regulations
• Establish, exercise, or defend legal claims
• Cooperate with law enforcement

4. How We Share Your Information

4.1 With Other Users

Customers can see:

• Vendor business name and profile
• Service areas and specialties
• Reviews and ratings
• Portfolio images
• Contact information (when initiating communication)

Vendors can see:

• Customer name and contact information (for active inquiries)
• Project details and requirements
• Delivery addresses (for completed orders)

4.2 Service Providers

We share information with third-party service providers who perform services on our behalf:

4.3 Business Transfers

In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.

4.4 Legal Requirements

We may disclose your information when required by law or in response to:

• Subpoenas or court orders
• Law enforcement requests
• National security requirements
• Protection of our legal rights
• Prevention of fraud or illegal activity

4.5 With Your Consent

We may share your information for other purposes with your explicit consent.

5. Data Retention

We retain your personal information for as long as necessary to:

• Provide our services to you
• Comply with legal obligations
• Resolve disputes
• Enforce our agreements

Retention Periods:

• Active accounts: Duration of account plus 3 years
• Transaction records: 7 years (for legal compliance)
• Marketing data: Until consent is withdrawn
• Analytics data: Aggregated/anonymized indefinitely
• Support communications: 3 years

After the retention period, we securely delete or anonymize your information.

6. Data Security

We implement industry-standard security measures to protect your information:

6.1 Technical Safeguards

• SSL/TLS encryption for data transmission
• Encryption of sensitive data at rest
• Secure password hashing (bcrypt)
• JWT-based authentication with NextAuth.js
• Regular security audits and penetration testing
• Firewalls and intrusion detection systems

6.2 Organizational Safeguards

• Access controls and role-based permissions
• Employee confidentiality agreements
• Security awareness training
• Incident response procedures
• Regular backup and disaster recovery

6.3 Payment Security

Payment information is processed through Stripe, a PCI DSS Level 1 compliant payment processor. We do not store full credit card numbers on our servers.

7. Your Privacy Rights

7.1 Access and Portability

You have the right to:

• Access the personal information we hold about you
• Request a copy of your data in a portable format
• View your account information in your profile dashboard

7.2 Correction and Update

You can update your account information at any time through:

• Customer profile settings
• Vendor dashboard
• Contacting our support team

7.3 Deletion

You have the right to request deletion of your personal information, subject to:

• Legal retention requirements
• Legitimate business interests
• Ongoing transactions or disputes

To delete your account, navigate to Account Settings or contact support@binevo.com.

7.4 Opt-Out Rights

• Marketing Emails: Click "unsubscribe" in any email or adjust settings in your account
• Cookies: Adjust your browser settings or use our cookie preference center
• Targeted Advertising: Opt out through industry opt-out tools
• Location Tracking: Disable location services in your device settings

7.5 California Residents (CCPA)

California residents have additional rights under the California Consumer Privacy Act:

• Right to know what personal information is collected
• Right to know if personal information is sold or disclosed
• Right to opt-out of the sale of personal information
• Right to non-discrimination for exercising privacy rights

Note: BinEvo does not sell personal information.

7.6 European Residents (GDPR)

If you are in the European Economic Area, you have rights under the General Data Protection Regulation:

• Right to access
• Right to rectification
• Right to erasure ("right to be forgotten")
• Right to restrict processing
• Right to data portability
• Right to object to processing
• Right to withdraw consent
• Right to lodge a complaint with supervisory authority

7.7 Exercising Your Rights

To exercise any of these rights, please:

• Email: privacy@binevo.com
• Use the "Privacy Request" form in your account settings
• Mail: BinEvo Privacy Team, [Address]

We will respond to your request within 30 days.

8. Cookies and Tracking Technologies

8.1 Types of Cookies We Use

8.2 Managing Cookies

You can control cookies through:

• Our cookie preference center (on first visit)
• Browser settings (may affect functionality)
• Industry opt-out tools (for advertising cookies)

9. Third-Party Links and Services

Our Platform may contain links to third-party websites or integrate with third-party services. This Privacy Policy does not apply to those external sites or services. We encourage you to review the privacy policies of any third-party sites you visit.

Third-Party Services We Integrate:

• NextAuth.js for authentication
• Stripe for payment processing
• Cost estimation tools (Procore, STACK, BuilderTREND, etc.)
• Social media platforms (Facebook, Twitter, Instagram)

10. Children's Privacy

BinEvo is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child under 18, we will take steps to delete such information promptly.

If you believe we have collected information from a child, please contact us at privacy@binevo.com.

11. International Data Transfers

BinEvo is based in the United States. If you access our Platform from outside the U.S., your information may be transferred to, stored, and processed in the U.S. or other countries where our service providers operate.

We ensure appropriate safeguards are in place for international transfers:

• Standard contractual clauses
• Privacy Shield frameworks (where applicable)
• Adequacy decisions by regulatory authorities

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect:

• Changes in our practices
• New legal requirements
• Platform updates and new features

We will notify you of material changes by:

• Email notification
• Prominent notice on the Platform
• In-app notification

The "Last Updated" date at the top of this policy indicates when it was last revised. Your continued use of the Platform after changes constitutes acceptance of the updated policy.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

BinEvo Privacy Team

• Email: privacy@binevo.com
• Support: support@binevo.com
• Phone: 1-800-BINEVO-1
• Mail: BinEvo Privacy Team
  [Company Address]
  [City, State, ZIP]

Data Protection Officer

For GDPR-related inquiries, you may contact our Data Protection Officer at: dpo@binevo.com

14. Additional State-Specific Rights

14.1 Nevada Residents

Nevada residents may opt out of the sale of certain covered information. BinEvo does not currently sell covered information as defined by Nevada law.

14.2 Virginia Residents (VCDPA)

Virginia residents have rights to access, correct, delete, and obtain a copy of their personal data, as well as opt out of targeted advertising and profiling.

14.3 Colorado Residents (CPA)

Colorado residents have similar rights to access, correct, delete, and port their data, plus opt-out rights for targeted advertising and profiling.