Service providers and data use

Updated September 30, 2026. Byndro is operated by Noah Graff trading as Byndro. This notice describes the functions of the services supported by Byndro; an optional integration receives data only when that integration is used. It is not a representation that every provider is active for every account.

Accounts, billing and support

• Stripe: payment details entered directly in Stripe, billing name/address, account contact details, subscription, invoice and payment events; used for payment processing, billing management, receipts and fraud prevention. Stripe privacy notice.
• Google/Firebase: authentication and configured phone verification, including account identifiers and authentication events. Firebase privacy and security.
• Microsoft Graph or configured SMTP provider: transactional mail, recipient address and the contents of account/support notices. Microsoft privacy statement.
• Didit (optional verification): identity information submitted in its verification flow, which can include identity documents and facial/liveness data, and verification results/references returned to Byndro. Provider-side retention and any use for model improvement depend on the provider notice and organization configuration. Didit privacy policy.

AI and research

• OpenAI (ChatGPT subscription or API), or NVIDIA APIs: search instructions and relevant public-source evidence used to discover and qualify business opportunities. When you use the AI assistant, OpenAI also receives the selected lead's evidence, your saved sender name and service description, and requested drafting direction to prepare outreach. The assistant currently uses the same ChatGPT subscription connection as included lead research; provider-side processing and retention depend on the active service and settings. This drafting feature does not send emails or make calls. The active included-AI provider can change; users may instead configure a supported research provider. OpenAI privacy policy · NVIDIA privacy policy.
• Exa and Jina (optional): search queries and requested web pages/evidence. Source restrictions and privacy rights still apply.
• Google Places, Overture Maps and OpenStreetMap (as configured): location/business search and map data. Each source has its own license, attribution, storage and export restrictions; access to an API is not permission to use every result without restriction.
• Reddit and other public project platforms (where permitted): request URLs, excerpts and research evidence; the original platform remains the response channel where its rules require it.
• A user-connected mailbox (optional outreach): sender and recipient details, message contents and response/opt-out handling. Outreach is separately permissioned and not enabled merely by buying a subscription.

Hosting, backups and international processing

Byndro uses VPS hosting, a private PostgreSQL database and encrypted off-site backups. Provider contracts, locations and transfer arrangements must be assessed for the actual processing. The operator is based in the UK; providers and authorized support operations may process data in other countries. Contact support@byndro.com for the providers and transfer information relevant to your workspace, or if your organization needs a data-processing agreement before using the service.

We do not claim that an integration is approved for every industry or jurisdiction. Do not upload sensitive personal information or regulated customer datasets to a research prompt unless a suitable agreement and lawful basis cover that processing.