Privacy Policy

This Privacy Policy explains how IronPeak Trading - F.Z.E processes personal data in connection with binedge and the website https://www.binedge.net. IronPeak Trading - F.Z.E is a Free Zone Establishment with limited liability registered in the Ajman Free Zone under licence and registration number 57224, with its office at Office C1-1F-SF11725, Ajman Free Zone C1 Building, Ajman Free Zone, Ajman, United Arab Emirates (“binedge”, “we”, “us”).

1. Our role

• We are the controller for data about visitors to our website, people who contact us, customer contacts, and people who send us abuse or legal reports.
• We are a processor for files our customers store with binedge, for the request data generated when people open those files, and for the analytics events that customers’ websites and apps send to binedge. The customer that issued the link, published the file or sent the events decides why that data is processed. If you have a question about a file served from a binedge.net hostname, or about analytics on a website or app, contact the company that runs that website or app. We will forward requests that reach us to that customer.

2. Data we process

2.1 Website visitors

Our website consists of static pages delivered by Alibaba Cloud Edge Security Acceleration (ESA). To deliver and protect the pages, ESA processes your IP address, the requested address, the time of the request and headers sent by your browser, such as the user agent.

ESA sets two security cookies, acw_tc and cdn_sec_tc, to tell regular visitors apart from automated attacks. They contain a random identifier, cannot be read by page scripts and expire after one hour. The website sets no other cookies and uses no advertising or tracking cookies.

The language you choose on the website is saved in your browser’s local storage so that the next visit opens in the same language. This setting stays in your browser and is not sent to us.

2.2 People who contact us

When you email sales@binedge.net, support@binedge.net or abuse@binedge.net, or use the report form on our website, we receive your name, email address, company and anything you include in the message.

2.3 Customer contacts

For each customer we keep the names, email addresses and roles of the people who manage the account, together with orders, invoices and correspondence.

2.4 Request data from the service

When a browser or app uploads, downloads or requests an image from a binedge.net hostname, we and ESA process:

• the IP address and the time of the request;
• the hostname, the path of the file and the query parameters of the link;
• the request method and headers needed to serve it, such as user agent, Accept, Range, Content-Type and Content-Length;
• the response status and the number of bytes transferred.

We use this data to deliver files, enforce signed links, detect and stop abuse and attacks, fix errors, and measure each customer’s usage for billing. We do not use it to build profiles of the people who open files, and we do not sell it or use it for advertising.

2.5 Files stored by customers

Files uploaded through binedge are stored and delivered on the customer’s instructions. We do not look at their contents except as described in the Terms of Service, for example when we handle an abuse report.

When an image is resized or converted, EXIF, XMP, IPTC and ICC metadata, which can include camera details and location, are removed from the processed image. The original file is stored as uploaded.

2.6 Analytics events

When a customer’s web page, app or server sends events to its collect hostname, we process on that customer’s behalf:

• the IP address and time of the request, the approximate location derived from the IP address, such as the country, and request headers such as user agent and referrer, with credentials removed;
• the content of each event as the customer’s code sends it, typically an identifier stored in the browser or app, the customer’s own user ID after you sign in, the page or screen you viewed, the action you took, details of your device, operating system and browser, and other properties the customer chooses to send.

The customer decides which events to send and is responsible for telling you about them and, where required, asking for your consent, including consent for any cookie or local storage its pages use. We use this data only to provide analytics to that customer. Each customer’s analytics data is kept separate, and we do not combine it across customers, sell it or use it for advertising.

3. Legal bases

We process personal data:

• to perform our contracts with customers and take steps a customer asks for before entering into one;
• to comply with legal obligations, such as tax records and orders from competent authorities;
• where necessary for our legitimate interests in operating, securing and improving binedge and in handling abuse and legal claims, balanced against your rights; and
• with your consent where the law requires consent.

4. Service providers

We use the following providers to run binedge. Each processes personal data only to provide its service to us.

Provider	What it does for us	Location
Alibaba Cloud	Object storage, the servers that run binedge, the ESA edge network, hosting of this website, and sending the emails of the report form	Storage, servers and email sending in Singapore; edge locations worldwide
PingCAP (TiDB Cloud)	Databases that store analytics events	Singapore
TrueWatch	Collection of service logs and monitoring alerts	Asia-Pacific
Amazon Web Services	Receiving email sent to binedge.net addresses	India (Mumbai)
Google	The team mailbox to which binedge.net email is forwarded	Global
HetrixTools	Checking that our endpoints are reachable and publishing https://status.binedge.net	Global

We also disclose personal data when the law or an order of a competent authority requires it, and to the customer concerned when we handle an abuse report, as described in the Abuse Reporting and Handling policy.

5. International transfers

binedge stores files and analytics events in Singapore and delivers files through edge locations close to the person making the request, so request data can be processed in the country where that person is. Email to our binedge.net addresses is received in India. Where personal data is transferred out of the United Arab Emirates or another country whose law restricts transfers, we rely on the grounds that law provides, including contractual safeguards with our providers.

6. Retention

• Request logs and monitoring data are kept for a limited period for security and troubleshooting and are then deleted automatically. Usage totals used for billing are kept with our billing records.
• Customer files are kept until the customer deletes them, or until the end of the 30-day period after the agreement ends described in the Terms of Service. Incomplete uploads are deleted automatically after one day.
• Analytics events are kept until the customer deletes them, or until the end of the same 30-day period after the agreement ends.
• Correspondence, orders and invoices are kept for as long as the customer relationship lasts and afterwards for as long as tax and company law require.
• Abuse and legal reports are kept for as long as needed to handle them and to establish or defend legal claims.

7. Security

binedge hostnames and our website are served over HTTPS. Private files can be read only through signed links that expire. Storage buckets refuse requests that do not come from binedge servers or the ESA edge network, and binedge servers reach storage over the cloud provider’s internal network. Responses do not reveal storage bucket names or storage hostnames. Access to signing keys and storage credentials is limited to the systems and staff that need it.

8. Your rights

Depending on the law that applies to you, including Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data of the United Arab Emirates, you can ask us to:

• tell you whether we process your personal data and give you a copy;
• correct inaccurate data;
• delete data or restrict its processing;
• stop processing based on our legitimate interests; and
• move data you gave us to another provider.

Send requests to support@binedge.net. We may ask you to confirm your identity. For files stored by a customer and for analytics events sent by a customer, we will pass your request to that customer. You can also complain to the data protection authority in your country.

9. Children

binedge is a service for businesses and our website is not directed at children. We do not knowingly collect personal data from children.

10. Changes

We may update this policy. The date at the top of this page shows when it was last changed. We will email customers about material changes.

11. Language

This policy is published in English and Simplified Chinese. If the two versions differ, the English version prevails.

12. Contact

IronPeak Trading - F.Z.E, Office C1-1F-SF11725, Ajman Free Zone C1 Building, Ajman Free Zone, Ajman, United Arab Emirates. Licence and registration number 57224. Email: support@binedge.net.