BinaYön is operated by Besa Software, LLC (Wyoming, USA). This policy explains how your personal data is processed under international data protection regulations including GDPR for EU users, KVKK for Turkey users, and CCPA for California users.
1. Data Controller
Company: Besa Software, LLC
Registered in: Wyoming, United States of America
Email: privacy@binayon.com
Besa Software, LLC acts as the data controller for personal data processed within the BinaYön platform. Building managers may also act as data controllers or processors for data relating to their own residents.
2. Personal Data Collected
BinaYön processes the following categories of personal data:
Category
Scope
Purpose
Identity
Name, surname, ID / passport no, nationality
User identification, legal obligation
Contact
Email, phone, address
Notifications, support, contract performance
Financial
Payment history, dues information, debt status
Building management, accounting
Technical
IP address, session data, browser type
Security, debugging
Property
Unit / building info, rental / ownership status
Building management service
3. Legal Basis for Processing
Your personal data is processed under the following legal bases:
EU
GDPR
Contract performance (Art. 6/1-b)
Legitimate interest (Art. 6/1-f)
Legal obligation (Art. 6/1-c)
Explicit consent (Art. 6/1-a)
TR
KVKK
Contract performance (Art. 5/2-c)
Legitimate interest (Art. 5/2-f)
Explicit consent (Art. 5/1)
CA
CCPA
Business purpose use
No data selling
Opt-out right granted
4. Purposes of Data Use
Providing the building and site management service
Tracking dues, expenses, and debts
Sending announcements and notifications to residents
Handling support requests
Fulfilling legal obligations
Maintaining platform security and integrity
Improving service quality (anonymous analytics only)
5. International Data Transfers
Because Besa Software, LLC is incorporated in the USA, your personal data may be transferred outside the European Economic Area (EEA) or Turkey. Such transfers are protected by:
For EU users: Standard Contractual Clauses (SCCs / GDPR Art. 46)
For Turkey users: Explicit consent or adequate protection under KVKK Art. 9
Infrastructure providers have signed Data Processing Agreements (DPAs)
6. Data Sharing
Your personal data is never sold or commercially shared with third parties without your consent.
Payment processor: For subscription payment processing (card numbers are not stored by BinaYön)
Building manager: Managers only see resident data for their own site
Legal requirement: Upon request from competent authorities in the USA, EU, or other jurisdictions
7. Data Security
Encrypted transmission via HTTPS/TLS
Encrypted password storage (bcrypt)
Role-based access control (RBAC)
Regular backups and audit logging
Organization isolation — data from different sites is kept completely separate
8. Data Retention
Active account data: For as long as the account is active
Financial records: 7 years as required by law (US federal requirements)
Log files: 12 months
After account deletion: Permanently deleted or anonymized within 30 days
9. Your Privacy Rights
Depending on your location, you may exercise the following rights:
Access
Request information and a copy of the data we process about you
Rectification
Request correction of inaccurate or incomplete information
Erasure
Request deletion of your data ("right to be forgotten")
Restriction
Request restriction of certain processing (GDPR/KVKK)
Portability
Receive your data in a machine-readable format
Opt-Out
Object to or opt out of certain data processing activities
Submit your requests to privacy@binayon.com. Requests are answered within 30 days (1 month for GDPR, 45 days for CCPA). EU users have the right to lodge a complaint with their competent Data Protection Authority (DPA).
10. Cookies
BinaYön uses only essential session cookies:
Session cookie: Required for secure session management; deleted when the browser is closed
Preference cookie: For language and interface preferences (12 months)
No third-party tracking, advertising, or analytics cookies are used.
11. Policy Changes
When this policy is materially changed, you will be notified at your registered email address and the updated version will be published on this page. Continued use of the platform after a change constitutes acceptance of the updated policy.