Legal/Privacy Policy

Privacy Policy

Last Updated: 9th October 2026

This Privacy Policy describes how Bineric AS ("Bineric," "we," "us," or "our") collects, uses, and shares information about you when you use our products, services, and websites, including NorskGPT ("Services").

Bineric AS (org. no. 926 115 626), Pilestredet 52, 0167 Oslo, Norway, is the data controller for the personal data described here. Where you use the Services through an account provided by your employer or another organisation, that organisation is the controller of the content you submit and we process it on its behalf.

1. Information We Collect

1.1 Information You Provide to Us

We collect information that you provide when you interact with our Services, including:

  • Account Information: Information such as your name, email address, and password when you create an account.
  • Payment Information: If you make a purchase, we may collect payment details, including billing address and payment method. Payment information may be processed by a third-party payment provider.
  • User Content: We prioritize your privacy and give you control over how your content is managed. Here's how we handle the content you upload (e.g., chats, prompts, files, images, and audio):
    1. Server Storage: Your chats and uploaded content are stored on our servers so that you can access your history across devices. Stored chats are encrypted at rest, and access is restricted to your account and to the automated systems that deliver the Services.
    2. Content Processing: Content you submit is processed in real-time to deliver results. We do not use your content to train our models or for any purpose beyond providing the Services to you.
    3. Limited Sharing: To generate a response, your content is sent to the provider that runs the model or tool you have selected (see sections 3 and 5). We do not otherwise share your content with third parties unless required by law.
  • Memory: If you turn on memory, we store short facts and conversation summaries derived from your chats so that responses can be personalized. Memory is off by default, and you can view, delete, or disable it in your settings at any time.
  • Connectors and MCP Servers: If you connect a third-party account (such as Google, Microsoft, Slack, or GitHub) or an MCP server, we store the access credentials in encrypted form and keep a record of the actions performed through the connection. Content retrieved from a connected service is used only to fulfil your request.
  • Group Chats and Shared Links: Messages you post in a group chat are visible to the other members of that group. If you create a share link for a conversation, anyone with the link can view it until you revoke the link or delete your account.
  • Voice and Audio: Audio you record or upload is processed to produce a transcription.
  • Scheduled Tasks: When you set up a scheduled task, we store its instructions and the results of each run.
  • Communication Information: When you reach out to us, we may collect personal details such as your name, contact information, and the content of your messages.
  • API Usage Data: When you use Bineric API, we collect API requests, response metadata, usage statistics, and API key identifiers for rate limiting, billing, and service improvement. We do not store the content of your API requests beyond what is necessary for processing.
  • CLI Data: When you use Bineric CLI, the tool may access files and code in your local environment to provide context for AI responses. This data is processed in real-time and sent to our servers only as needed to fulfill your requests. We do not persistently store your codebase or local files on our servers.
  • Agent Task Data: When you use Bineric Agents, we collect information about tasks you assign, agent actions, tool usage, and execution logs. This data is used to execute your requests and may be stored to allow you to review agent activity history.

1.2 Information We Collect from Your Interactions with Our Services

When you access or use our Services, we automatically collect technical details:

  • Log Data: Information such as your browser type, settings, visit date/time, and how you interact with our Services.
  • Device Details: Data about the device you use, like device name, operating system, and browser type.
  • Location Data: Approximate location (city and country) derived from your IP address. We do not collect GPS or other precise location data.
  • Session and Security Data: For each sign-in we record your IP address, device, browser, operating system, and approximate location, so that you can review your active sessions and we can alert you to new sign-ins. For visitors who use the Services without an account, we store a hashed form of the IP address to enforce usage limits.
  • Cookies and Related Technologies: Used to support functionality and, with your consent, analytics. See our Cookie Policy for details.

1.3 Information from Third Parties

We may receive information about you from third parties, such as business partners, affiliates, or service providers, as part of providing the Services.

2. How We Use Your Information

  • Service Delivery: To provide, operate, and improve our Services.
  • Account Management: For managing accounts, transactions, and support.
  • Improvement and Development: To analyze data and develop new features.
  • Security and Compliance: To monitor security, enforce terms, and comply with regulations.
  • Marketing and Communications: With consent, to provide promotional communications (opt-out available).

2.1 Legal Bases

Under the GDPR, we rely on the following legal bases:

  • Performance of a contract: To provide the Services, manage your account, and process payments.
  • Legitimate interests: To keep the Services secure, prevent abuse, and maintain and improve the Services.
  • Consent: For analytics cookies, marketing communications, and optional features such as memory and connectors. You can withdraw consent at any time.
  • Legal obligation: To meet accounting, tax, and other statutory requirements.

3. Sharing Your Information

  • Service Providers: With vendors performing functions on our behalf, listed below.
    • Amazon Web Services: Hosting, database, and file storage (Sweden), and AI model hosting.
    • Microsoft Azure: AI model hosting and speech transcription.
    • Google: Gemini models, reCAPTCHA bot protection, and email delivery.
    • Perplexity: Web search model, when you select it.
    • Firecrawl: Web retrieval for Deep Research.
    • Stripe: Payment processing.
    • PostHog: Product analytics (EU hosted), with your consent.
  • Services You Connect: When you use a connector or MCP server, we exchange data with that service as needed to carry out your request.
  • Business Transfers: During a merger, acquisition, or asset sale.
  • Legal and Regulatory: If required by law or to protect Bineric's or others' rights.
  • With Your Consent: In other cases, only with your explicit consent.

4. Your Choices and Rights

Under GDPR, you have the right to:

  • Access and Correction: Request access or corrections to personal information.
  • Data Portability: Request a copy of your information in machine-readable format. You can request an export of your account data from your privacy settings.
  • Deletion: Chats you delete are permanently removed. Deleting your account closes it, ends your access, and revokes your shared links. To have all personal data associated with a closed account erased, contact us and we will complete the erasure within one month, except for data we are legally required to keep.
  • Restriction and Objection: Ask us to restrict processing, or object to processing based on our legitimate interests.
  • Withdraw Consent: Withdraw any consent you have given, without affecting processing that has already taken place.
  • Opt-Out of Marketing: Follow unsubscribe instructions in communications or contact us.
  • Cookie Preferences: Manage preferences through our Cookie Preference Center or your browser settings.

To exercise these rights, contact us at support@bineric.com. We respond within one month. You also have the right to lodge a complaint with the Norwegian Data Protection Authority (Datatilsynet) or the supervisory authority in your country of residence.

5. International Data Transfers

Your account data, chats, and uploaded files are stored within the European Economic Area (EEA). Most of the models we offer are hosted in the EEA, and each model is labelled with its hosting location.

Some models and tools are hosted in the United States. When you select one of these, the content of that request is sent there for processing. This currently applies to certain models on Amazon Bedrock and Microsoft Azure, Google Gemini, Perplexity, and Deep Research (Firecrawl).

Where personal data is transferred outside the EEA, we rely on an adequacy decision of the European Commission (such as the EU-U.S. Data Privacy Framework) or on Standard Contractual Clauses.

6. Data Storage and Security

  • Hosting: Account data, chats, and uploaded files are stored on secure servers located in Sweden.
  • Encryption: Chat content is encrypted at rest using AES-256 and in transit using TLS.
  • Access: Our staff do not read your chat content in the normal course of operating the Services. Access is limited to automated processing, except where you ask us for support or where it is needed to investigate a security incident or comply with the law.
  • Retention: We retain chats until deleted by the users.

7. Data Retention

We retain personal information as needed to fulfill outlined purposes, including legal, accounting, or reporting obligations.

  • Chats, files, and memory: Until you delete them.
  • Account information: For as long as your account is open, and afterwards until erasure is requested or no longer needed for the purposes above.
  • Server logs: 14 days.
  • Notifications: 90 days after being read, or 180 days if unread.
  • Data export archives: 7 days after they are created.
  • Billing records: As long as required by Norwegian accounting law.

8. Children's Privacy

Our Services are intended for users aged 18 and over, and are not directed to children under 13. We do not knowingly collect personal information from children under 13. We delete such data if collected inadvertently.

9. Changes to This Privacy Policy

We may update this Privacy Policy. When we do, we will update the date at the top of this page, and we will notify you of significant changes by email or within the Services.

10. Contact Us

If you have any questions or concerns about this Privacy Policy or our data practices, please contact us:

Copyright © 2026 All rights reserved. Bineric.com