The BindSignal weekly digest reads message metadata only — who corresponded with whom, when, and how often. That behaviour is unchanged by these terms and does not depend on them.
These terms cover the separate, optional features in which BindSignal reads the content of specific messages in order to produce a written briefing or a drafted follow-up. Those features are switched off by default. They cannot be switched on for your organisation until an authorised person has accepted these terms, and they can be switched off again at any time.
Message content is read only in response to a specific, deliberate request made by one of your users — for example, clicking "Brief me for this call" against a named firm in a digest. There is no background, scheduled or speculative reading of message content.
Each request is limited to the correspondence with the single firm named in that request, within the time window the digest covers. A request does not grant access to your wider mailbox, and one request does not authorise another.
Content is processed by a large language model hosted on Microsoft Azure OpenAI Service within BindSignal's own Microsoft tenancy, in the North Europe region. Microsoft acts as a sub-processor, as already described in our Privacy Policy.
Content is not sent to any third-party model provider. The service has no configuration in which it can be pointed at one.
We do not train models on it. Your content is not used to train, fine-tune or evaluate any model, whether ours, Microsoft's, or a third party's.
We do not keep it. Processing is transient. We do not store the message content we read, the briefing produced from it, a summary of it, or a hash of it. A repeated request is processed afresh rather than served from a cache, because no cache of that material exists.
We do not retain recipient addresses in our usage records. Where we need to count requests per recipient, we store a salted digest of the address rather than the address.
To operate usage limits, bill accurately and answer your questions about what the service did, we retain a record of each request containing: the domain of the firm the request concerned, the type of request, a salted digest of the recipient address, the time of the request, and the number of tokens processed.
This record contains no message content, no subject lines, no message identifiers and no email addresses.
We record who accepted these terms, when, and which version they accepted. That record is append-only: we do not edit or delete entries, because the history of what was agreed is itself part of the record.
You may withdraw consent at any time by contacting us or through the administrative interface. Withdrawal is recorded as a new entry rather than by deleting the original. On withdrawal, the AI features stop for your organisation. Because we retain no message content, there is no content for us to delete on withdrawal.
We distinguish between two kinds of change.
Material changes widen what we do with your content — for example, processing content in new circumstances, for a new purpose, or in a new location. A material change requires your fresh acceptance. Until you accept, the AI features stop; we will not process your content under terms you have not agreed to.
Non-material changes do not widen what we do with your content — corrections, clarifications, restructuring, or changes to our contact details. Your existing acceptance carries forward across such changes, and your access to the features you are paying for is not interrupted by them.
We publish which category each revision falls into. We will give you reasonable notice of a material change before it takes effect.
Questions about these terms, or about what the service did with a particular request, can be sent to hello@bindsignal.com.