Privacy Policy

1. Who we are

Becode is the controller of the personal data described in this policy. You can reach us at info@becodee.com.

2. The data we collect

• Account: your name, your email address, your password (stored only as a secure hash that can't be read back) and the picture you choose to upload.
• Onboarding: the answers you give when you join (your role, how you found us, what you want to research) and the plan you're interested in.
• Your use of Becode: the SaaS you track, your boards, the SaaS pages you open (to count your plan's weekly limit), the questions you ask the assistant, the ideas you send us and your notifications.
• Payments: payments are handled by Stripe. We receive your Stripe customer reference and your subscription's plan, status and dates. Stripe keeps your card, your billing address and, if you enter it, your VAT number: we never see your full card number.
• Security: the IP address and browser of your signed-in sessions, and short-lived records that limit repeated sign-in attempts.
• Emails: what you write to info@becodee.com or support@becodee.com, and the delivery status of the emails we send you.

3. Why we use it

• To provide Becode: create and protect your account, show your data, apply your plan, take payments and send the emails the service needs (address verification, password reset, receipts, changes to your plan). Legal basis: the contract with you (Art. 6(1)(b) GDPR).
• To keep Becode secure and prevent abuse, for example by limiting sign-in attempts. Legal basis: our legitimate interest (Art. 6(1)(f) GDPR).
• To keep accounting and tax records. Legal basis: our legal obligations (Art. 6(1)(c) GDPR).
• To answer your messages and improve Becode with the ideas you send us. Legal basis: our legitimate interest.

We don't sell your personal data, we don't use it for advertising and we don't send you marketing emails unless you ask for them.

4. Who processes it for us

These providers process personal data on our behalf, only to run Becode and under data processing agreements:

• Amazon Web Services: our servers and database, in Frankfurt (Germany).
• Cloudflare: website hosting, our domain, email forwarding and the storage of uploaded pictures.
• Stripe: payments. Stripe is also an independent controller of the payment data it processes.
• Resend: sending our emails.
• Google: the mailbox where the emails you send us arrive.
• Anthropic: only when you use the assistant (Ask Becode), to answer your question.

5. Transfers outside the EU

Some of these providers are based in the United States. Transfers of personal data outside the European Economic Area rely on the EU-US Data Privacy Framework or on the European Commission's Standard Contractual Clauses.

6. How long we keep it

• Account data: as long as your account is open. When you ask us to close it, we delete your data within 30 days.
• Security records (sessions and sign-in attempts): only as long as they are needed for security. A session lasts at most 7 days without use.
• Payment records and invoices: as long as tax law requires (10 years in Italy).
• Your emails to us: as long as needed to answer and follow up.

7. Your rights

You can ask to access, correct or delete your personal data, to restrict or object to its processing (in particular processing based on our legitimate interest), and to receive it in a portable format. Write to info@becodee.com: we answer within one month.

You can also lodge a complaint with your data protection authority. In Italy it is the Garante per la protezione dei dati personali (garanteprivacy.it).

8. Cookies

Becode uses only what it needs to work: a cookie that keeps you signed in to the app, and a setting saved in your browser that remembers the light or dark theme. We don't use analytics, advertising or tracking cookies, so we don't ask for your consent.

Stripe's checkout and billing pages, hosted by Stripe, use their own cookies to process payments and prevent fraud.

9. People and businesses in the Becode catalog

Becode collects public information about SaaS businesses: their websites, the revenue figures they make public, their ads in public ad libraries, traffic estimates and the technology they use. For some businesses this includes the name and public social profile of a founder, as published by the founder or the business.

We process this information on the basis of our legitimate interest in providing market research, limited to what is already public. If you are named in Becode and want to object or ask us to remove your information, write to info@becodee.com.

10. Minors

Becode is for adults: we don't knowingly collect data from anyone under 18.

11. Changes to this policy

We may update this policy. We'll tell you about important changes by email or in the app; the date at the top shows the current version.