Security policy

Last updated Oct 20, 2026

How are hosted sites protected?

• Web application firewall, DDoS protection and malware scanning
• Free SSL on every site
• Sites isolated with dedicated resources
• Nightly offsite backups kept 30 days

How do you handle access to my site?

• We access your site only to provide the service you asked for or to keep the platform safe
• Logins are shared only through Hub tickets
• The AI Site Agent uses least-privilege access you can revoke at any time, and saves changes as drafts for your approval

Payments

Card payments are processed by our payment processor. We never see or store full card numbers.

What do I need to do?

• Use strong, unique passwords and two-factor login where offered
• Keep plugins and themes updated, or let a Care plan do it
• Remove plugins you do not use

How do I report a vulnerability?

Email support@binbin.ink with “Security” in the subject, the affected URL and steps to reproduce. Please give us reasonable time to fix it before disclosing, and do not access other customers’ data or disrupt service while testing. We do not run a paid bug bounty.

What happens after a security incident?

If a breach affects your personal data, we tell you without undue delay and as the law requires.