BHIND, INC. · Legal
Privacy Policy
This Privacy Policy explains how BHIND, INC. ("BHIND," "we," "us," or "our") collects, uses, discloses, and protects personal information when you visit bhind.ai, contact us, schedule a product conversation, inquire about working with us, or otherwise interact with us in a business context.
At a glance
The important points, before the legal detail.
- BHIND, INC. is the company responsible for the public website and business-contact data described here.
- The current website does not deploy first-party analytics, advertising cookies, or cross-site tracking in its application code.
- Customer-directed product processing is governed by the applicable enterprise agreement and data-processing terms, not this website notice alone.
- Privacy requests may be sent to demo@bhind.ai or to the company address listed below.
1. Scope and controller
This Policy applies to the public bhind.ai website, direct email and business communications with BHIND, product walkthrough and pilot inquiries, work and recruiting inquiries, relationship-management records, and other interactions where BHIND determines why and how personal information is processed.
BHIND, INC., a Delaware corporation, is the controller or business responsible for that information. Our contact address is 131 Continental Dr, Suite 305, Newark, New Castle County, Delaware, United States.
When BHIND processes information, application artifacts, or report data on behalf of an enterprise customer under the customer's instructions, the customer may be the controller or business and BHIND may act as its processor or service provider. Those activities are governed by the applicable agreement, order form, and data-processing terms.
2. Information we handle and where it comes from
The information available to BHIND depends on how you interact with us. You are not required to provide sensitive personal information to browse the public site, and you should not send credentials, private keys, payment-card data, government identifiers, or sensitive target artifacts through ordinary email.
| Category | Examples | Typical source |
|---|---|---|
| Business contact information | Name, work email, organization, role, professional profile, and communication preferences | You, your organization, or a business scheduling provider you choose to use |
| Inquiry and relationship information | Messages, meeting details, target-app scope, use case, procurement context, support history, and follow-up records | You, meeting participants, or your organization |
| Work and recruiting inquiry information | Professional background, work samples or links, role interests, correspondence, and interview or evaluation notes | You, professional references you identify, or public professional sources |
| Website and security information | IP address, request time, browser or device information, referring page, requested URL, and security events | Your browser and the infrastructure used to deliver and secure the website |
| Commercial and administrative records | Business billing contact, order or invoice status, account organization, and contract records | Your organization and service providers supporting an enterprise relationship |
| Product and customer-directed data | Authorized Android artifacts, package and release identifiers, analysis inputs, report evidence, provenance, and support materials | Enterprise customers, authorized acquisition channels, and the inspected artifacts themselves |
3. Why we use information
BHIND uses personal information only for defined business, service, security, and legal purposes. Where laws such as the GDPR or UK GDPR require a legal basis, the basis depends on the context and may include steps requested before a contract, performance of a contract, compliance with law, consent, or BHIND's legitimate interests in operating and protecting a business-to-business technology service.
| Purpose | Information commonly involved | Typical basis where required |
|---|---|---|
| Respond to inquiries and schedule conversations | Business contact, inquiry, and meeting information | Requested pre-contract steps or legitimate interests |
| Evaluate and respond to work or recruiting inquiries | Contact, professional background, work samples, and correspondence | Requested pre-contract steps, consent where applicable, or legitimate interests |
| Evaluate, establish, and administer an enterprise relationship | Contact, commercial, contract, and account records | Contract, requested pre-contract steps, legitimate interests, or legal obligation |
| Provide and support contracted services | Account, support, product, and customer-directed data | Contract and the customer's documented instructions |
| Operate, secure, troubleshoot, and improve the website and service | Website, security, support, and product-operation records | Legitimate interests and legal obligation |
| Maintain records and protect legal rights | Communications, contracts, security events, and transaction records | Legal obligation and legitimate interests |
4. Website information and product data are different
The public website explains BHIND's product and provides ways to contact the company. It does not install or execute a target Android application and does not contact the endpoints discovered in a static report.
An enterprise inspection may involve authorized Android application artifacts and technical evidence that can include strings, endpoints, source-like output, identifiers, and other data embedded by the application publisher. The exact scope, permitted sources, roles, retention, access, subprocessors, and deletion obligations for that data must be defined in the applicable enterprise agreement and data-processing terms.
Do not provide an application artifact or confidential report data unless BHIND has agreed to receive it through an authorized channel and your organization has the right to provide it.
5. When information may be disclosed
BHIND may disclose personal information to service providers that support website delivery, security, communications, scheduling, professional services, customer operations, and contracted enterprise services. They may process information only for the applicable service and subject to the terms governing that relationship.
BHIND may also disclose information when reasonably necessary to comply with law or valid legal process, protect rights and safety, investigate misuse, establish or defend legal claims, or evaluate and complete a financing, merger, acquisition, reorganization, or transfer of all or part of the business.
BHIND does not use the public website to sell personal information or for cross-context behavioral advertising. The website application code does not currently load advertising pixels or third-party analytics trackers.
- Infrastructure, communications, scheduling, and professional-service providers
- Customer-authorized providers used to deliver a contracted service
- Government authorities or other parties when legally required or necessary to protect rights
- Parties to a legitimate corporate transaction, subject to appropriate protections
7. Retention
BHIND retains personal information for no longer than reasonably necessary for the purpose for which it was collected, including to respond to an inquiry, administer a business relationship, provide contracted services, maintain security and audit records, comply with law, and establish or defend legal claims.
The retention period depends on the nature and sensitivity of the information, the relationship, contractual requirements, operational need, risk of harm, legal obligations, and applicable limitation periods. Customer artifacts, temporary extraction data, reports, backups, and support records may have different schedules defined in the applicable agreement.
When information is no longer required, BHIND will delete, de-identify, or securely dispose of it as appropriate, subject to lawful backup and recordkeeping requirements.
8. Security
BHIND uses administrative, technical, and organizational safeguards intended to protect information in light of its nature, sensitivity, context, and the risks involved. No method of storage or transmission is completely secure, and this Policy does not promise absolute security.
BHIND uses layered safeguards for application intake, analysis, access, evidence handling, and AI-assisted review. Customer-specific security, retention, support, and deployment commitments are documented in the applicable enterprise agreement.
9. International processing
BHIND is a United States company. Personal information may be processed in the United States and other locations where BHIND or its service providers operate. Those locations may have data-protection laws different from the laws where you live.
Where applicable law requires a transfer mechanism or additional safeguards, BHIND will use an appropriate mechanism for the relevant processing. Enterprise customers should refer to their agreement and data-processing terms for customer-data transfer details.
10. Your privacy rights and choices
Depending on your location and the circumstances, you may have the right to request access, correction, deletion, restriction, objection, portability, or withdrawal of consent, and to appeal certain decisions. These rights are not absolute and may be subject to identity verification, legal exceptions, and the role BHIND has in the processing.
To make a request, email demo@bhind.ai with the subject “Privacy Request” and describe the request and your relationship with BHIND. Do not send identity documents unless BHIND requests an appropriate verification method. If BHIND processes information only for an enterprise customer, we may direct the request to that customer or assist it as required by our agreement.
BHIND will not discriminate against you for exercising an applicable privacy right. You may also use browser controls to clear or block cookies and local storage used by external sites.
11. Additional regional notices
Residents of certain U.S. states may have rights to know, access, correct, delete, or obtain a copy of personal information and to opt out of sale, targeted advertising, or certain profiling. The public website does not currently sell personal information, use cross-context behavioral advertising, or intentionally process sensitive personal information for an inferential purpose.
Because the current site does not engage in sale, targeted advertising, or cross-site behavioral tracking, it does not change website behavior in response to Do Not Track or Global Privacy Control signals. If those practices change, BHIND will update this notice and implement the controls required for the applicable activity.
Individuals in the EEA or United Kingdom may also have the right to complain to their local supervisory authority. Individuals in Brazil may have rights under the LGPD, including confirmation of processing, access, correction, portability where applicable, information about sharing, and deletion or anonymization in circumstances provided by law.
12. Children
The website and services are intended for business users and are not directed to children. BHIND does not knowingly use the public website to collect personal information from children under 13. If you believe a child has provided personal information to BHIND, contact us so we can evaluate and address the request.
13. Changes to this Policy
BHIND may update this Policy to reflect changes in the website, services, data practices, or legal requirements. We will post the revised Policy at this URL and update the effective date. If a change materially affects how we use information already collected, we will provide additional notice or request consent where required by law.
14. Contact BHIND
Questions, requests, or concerns about this Privacy Policy may be sent to demo@bhind.ai with the subject “Privacy Request,” or by mail to BHIND, INC., 131 Continental Dr, Suite 305, Newark, New Castle County, Delaware, United States.
Email is not a secure channel for target application artifacts, passwords, authentication tokens, private keys, payment-card details, government identifiers, or other highly sensitive information. Contact us first to agree on an appropriate channel.