WispBinderPrivacy
Last updated: 3 Nov 2026. This policy has not yet been reviewed by a lawyer. We will update it after review and show the new date here.
Who we are
WispBinder is run by Alfrets Bimbangnaung, a registered sole proprietor in Indonesia. Information you give us is handled from Indonesia and by the service providers listed below. Contact: alfrets@wispbinder.com.
What we collect
- When you contact us: your name, office name, business email, phone (if you give it) and domain.
- When you work with us: your answers to our office questionnaire: how the office works, the names, roles and work email addresses of people who use office systems, the software and service providers you use, and similar details needed to write your security plan.
- Check results and binder files (managed mode only, and only if you send them): the result files from our Windows check, which describe settings on office computers (for example encryption, updates and account names on that computer). They do not contain documents, tax returns or client files.
- We do not collect client tax data. We never ask for tax returns, Social Security numbers or client documents. Please do not send them.
The domain check, the check script and the results page
- Domain check on this site: the check runs in your browser. The domain you type is sent from your browser to Cloudflare's public DNS-over-HTTPS resolver (
cloudflare-dns.com) to look up its public DNS records. Cloudflare's own privacy policy applies to that lookup. The domain is not sent to WispBinder and we do not store it. - Windows check script: results are saved as a file on the PC where it runs. The script sends nothing anywhere. The download launcher then opens
wispbinder.com/resultsin your browser; that is a normal visit to this website (see Cloudflare below), and the result file is not sent. - Results page and binder on this site: when you open a result file on
wispbinder.com/results, it is read inside your browser and is not uploaded; a browser security rule on that page (connect-src 'none') blocks it from sending data. Your binder (action list, records checklist, change log, vendor and training lists, reviews) is kept only if you choose: as a binder file you save on your computer, or in this browser's storage on that computer if you tick "Remember". We cannot see either. Names you type into the binder stay there. "Clear binder", unticking "Remember" or clearing your browser data deletes the browser copy; your saved files stay where you put them.
Two ways to work with us
| Mode | What happens to check results |
|---|---|
| Self-managed | Everything stays on your office PC. You read the results and use our guides; nothing is sent to us. |
| Managed | With your permission, you send the result files to us by email (you attach them yourself) so we can prepare your plan and report. A binder file you choose to send is handled the same way. These files are deleted within 30 days after your report is delivered. |
How long we keep information
| Information | How long |
|---|---|
| Check result files and binder files you send us (managed mode) | Deleted within 30 days after your report is delivered |
| Your questionnaire answers, your security plan and the reports we delivered | While you use our service, so we can do rechecks and yearly updates, and up to 2 years after our last service to you. Then deleted |
| Emails with people who did not become clients | Up to 2 years, then deleted |
Your dated evidence pack is delivered to you to keep; you do not depend on our copy. You can ask us to delete your information earlier by writing to the contact address above.
How we protect it
Client information is kept in one folder on an encrypted computer. Backups are kept on an encrypted drive that is not left connected. The accounts we use for email, hosting and code use two-factor authentication. We apply the same checks to ourselves that we offer to you: see We check ourselves.
Sharing
- No selling or sharing of your information for marketing. This site uses no analytics and no advertising trackers.
- We disclose information only to the service providers below, or when the law requires it.
Service providers that process data for us
| Provider | Role | What they may process |
|---|---|---|
| Cloudflare | Website hosting and the public DNS resolver used by the domain check | Visitor IP addresses and request logs; the domain you type into the check |
| Hostinger | Email for our @wispbinder.com addresses | Emails you send us and our replies, including any files attached |
Each provider's own privacy policy applies to its processing.
Changes
When this policy changes, we update the date at the top of this page.