Privacy Policy

Beech is operated as a sole proprietorship of Kiran George with a registered address at Kadeparambil House, Kavilkadavu, Kodungallur, Thrissur District, Kerala, India, 680664.

Privacy questions or data requests: [email protected]

Grievance contact (DPDP): [email protected] · +917907150993

Account data - firm name, user names, email addresses, job titles, and authentication credentials (stored as secure hashes).

Firm operational data - projects, drawings, tasks, reviews, vendor records, site visits, files you upload, meeting notes, chat conversations, and audit logs your team creates while using the product.

Financial and billing data - plan, billing interval, payment order details, and payment processor identifiers.

AI and voice data - BeeBo chat messages, Help chat prompts, Marketing chat prompts, and audio clips sent for transcription or voice responses.

Marketing lead data - if you request a demo or callback, we may store contact fields, your chat transcript, and a hashed IP identifier for abuse prevention.

Security and technical data - session cookies, IP address, browser type, device type, login events, anomaly flags, and usage logs needed to operate and secure the service.

We use collected information to:

• provide, maintain, and improve Beech
• authenticate users and enforce role-based access
• send transactional email (invites and notifications)
• respond to support requests and product feedback
• understand product usage via first-party analytics
• monitor security, prevent abuse, and meet legal obligations

We do not sell firm data. We do not use your project content to train third-party AI models.

BeeBo, Help chat, and Marketing chat use third-party AI processors. When used, we may send prompts and relevant context to process responses.

Voice features send audio clips for transcription and text for speech synthesis. Realtime voice mode may create a direct browser-to-provider audio stream for live processing.

AI outputs can be incorrect and should be reviewed by your team before operational use.

Beech uses an HTTP-only session cookie to keep you signed in. The cookie name is configured per deployment (default: beech_session).

On public pages, we ask for consent before setting non-essential analytics cookies. We use PostHog for first-party analytics and do not use advertising or cross-site tracking cookies.

Read our Cookie Policy for more details on consent and browser controls.

We rely on specialized service providers to operate Beech. The latest processor list is published on our Subprocessors page.

Current core providers include:

• OpenAI (AI and voice processing)
• Razorpay (payments)
• PostHog (product analytics)
• Sentry (error monitoring)
• Resend (transactional email delivery)
• Backblaze B2 and Cloudflare R2 (file/object storage)
• Google and Microsoft (OAuth sign-in)
• Upstash Redis (rate limiting, where configured)
• Langfuse (optional AI tracing, where enabled)
• Slack (integration notifications, where enabled)

Firm data is stored in tenant-scoped records. Data is encrypted in transit with TLS. Vault objects are encrypted at rest with AES-256 per-firm keys (SSE-C) on Backblaze B2. Sensitive secrets are encrypted with AES-256-GCM before persistence. See the Security page for the full data-handling statement.

We maintain security logging, rate limiting, and malware scanning safeguards. If we confirm a security incident affecting personal data, we notify impacted customers and regulators where required by law.

We retain firm data while your account is active. Firm Admins can request firm deletion from settings. Deletion includes a 7-day grace period before permanent removal.

Firm Admins can export core firm operational datasets. Exports do not include every internal store. As of this version, exports exclude BeeBo conversations, Studio files, firm audit logs, support tickets, and billing records.

Voice clips submitted for transcription are processed for transcription and are not stored by Beech as long-term customer records.

In-app notifications are pruned after 90 days, activity feeds look back 90 days, and firm audit logs are retained for one year.

Depending on your jurisdiction, you may have rights to access, correct, delete, or export personal data, and to object to or restrict certain processing.

For EEA/UK users, GDPR rights apply. For users in India, rights under the Digital Personal Data Protection Act, 2023 apply.

Some providers process data outside your home country, including in the United States and other jurisdictions where sub-processors operate. We use safeguards appropriate to applicable law.

Authorized Beech operators may access customer environments for support, security, and maintenance, including audited super-admin impersonation workflows when necessary to resolve incidents.

We may update this policy as the product evolves. Material changes will be reflected on this page with an updated date.

Privacy questions or data requests: [email protected]

See also our Terms of Service , Data Processing Addendum, Subprocessors and Refund & Cancellation Policy.