← Back to Sign Up

Privacy Policy

Last updated: January 2026

1. Introduction

BTN PTE LTD ("BTN", "we", "us", or "our") operates Birdseye Enterprise ("the Service"). This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our Service.

By using the Service, you consent to the data practices described in this policy.

2. Information We Collect

We collect the following types of information:

Account Information

Data Purpose
Email address Account identification, notifications, password reset
Username Display name, collaboration invitations
Password (encrypted) Account authentication
Account creation date Account management

Usage Data

Data Purpose
Projects and files you create Providing the core service functionality
Diagram content (nodes, links, views) Storing your work
Story content (slides, elements) Storing your presentations
Collaboration data Enabling real-time teamwork

Technical Data

Data Purpose
Browser user agent string Session management, device identification, compatibility
Session timestamps Security, active session tracking
Cursor positions (real-time) Collaboration presence indicators

Security Data (if enabled)

Data Purpose
Two-factor authentication status Account security
Recovery codes (hashed) Account recovery

3. How We Use Your Information

We use your information to:

  • Provide, maintain, and improve the Service
  • Authenticate your identity and secure your account
  • Enable collaboration features with other users
  • Send transactional emails, including: account verification, welcome messages, password resets, project invitations, two-factor authentication confirmations, recovery code usage alerts, security notifications, and account deletion confirmations
  • Respond to your inquiries and support requests
  • Detect and prevent fraud or abuse
  • Comply with legal obligations

4. Data Storage and Security

Where We Store Data: Your data is stored on Google Firebase infrastructure, which maintains data centers with industry-standard security measures.

Security Measures:

  • All data transmission is encrypted using HTTPS/TLS
  • Passwords are never stored in plain text
  • Recovery codes are hashed using SHA-256
  • Access to data is controlled by security rules
  • Optional two-factor authentication for enhanced security
  • Automated security alerts when recovery codes are used or two-factor authentication settings are changed

5. Third-Party Services

We use the following third-party services to operate Birdseye Enterprise:

Service Provider Purpose
Firebase Authentication Google User login and account management
Cloud Firestore Google Primary database for projects and files
Firebase Realtime Database Google Real-time collaboration features
Resend Resend Inc. Transactional email delivery

These services have their own privacy policies. We encourage you to review them:

  • Google Firebase Privacy Policy
  • Resend Privacy Policy

6. Data Sharing

We do not sell your personal information. We may share your data only in these circumstances:

  • With collaborators: When you invite others to your projects, they can see your username and shared content
  • With service providers: Our third-party services process data as described above
  • For legal compliance: If required by law, court order, or governmental request
  • Business transfers: In connection with a merger, acquisition, or sale of assets

7. Data Retention

We retain your data as follows:

  • Account data: Retained until you delete your account
  • Project data: Retained until the project owner deletes it or their account
  • Session data: Automatically expires when you log out or close your browser
  • Real-time presence data: Cleared automatically when you disconnect

8. Your Rights

You have the following rights regarding your data:

  • Access: View your account information in the settings page
  • Export: Download your projects and files using the export features
  • Correction: Update your username and account settings
  • Deletion: Delete your account and all associated data at any time

When you delete your account, we permanently remove:

  • Your user profile and credentials
  • All projects you own and their contents
  • Your username reservation
  • Your recovery codes and security settings
  • Your membership in others' projects (you're removed as a collaborator)

9. Cookies and Local Storage

The Service uses browser storage technologies:

  • Local Storage: To maintain your login session and preferences
  • Session Storage: For temporary session data

These are essential for the Service to function and cannot be disabled while using the Service.

10. Children's Privacy

The Service is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

11. International Data Transfers

Your data may be transferred to and processed in countries other than your own. By using the Service, you consent to the transfer of your information to countries that may have different data protection laws than your jurisdiction.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting a notice on the Service or by email. Your continued use of the Service after changes become effective constitutes acceptance of the updated policy.

13. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us at:

BTN PTE LTD
Email: team@brdsy.com