Privacy Policy

Last updated: April 29, 2026

Banyan ("we", "us") operates the Banyan suite of go-to-market tools — including Canopy, Outpilot, and Herald — accessible via web at app.getbanyan.co and via the Banyan mobile app. This policy explains what data we collect, why, and what choices you have.

1. Data we collect

Account data

• Email, full name, and password (hashed with bcrypt) when you sign up.
• Profile timezone and notification preferences.
• Subscription status, plan tier, and Stripe customer ID for billing.

Integration data

• LinkedIn (Canopy): OAuth access and refresh tokens, your LinkedIn ID, and basic profile data (name, email, photo) — used to publish posts on your behalf.
• LinkedIn (Outpilot): Account email and password (encrypted at rest with AES), optional 2FA secret (encrypted), profile capability flags, and the conversations / connections we sync from LinkedIn through Unipile.
• Email (Herald): Mailbox OAuth tokens (Google or Microsoft) used to send and receive email on your behalf, plus campaign sends, replies, bounces, unsubscribes.

Usage data

• Posts, drafts, lead lists, campaigns, and conversation content you create or import into the platform.
• Server-side request logs (IP address, user-agent, traceId, latency) retained for up to 30 days for abuse prevention and debugging.
• Mobile app crash reports and basic device metadata (model, OS version) when crash reporting is enabled.

2. How we use your data

• To run the Banyan products you subscribed to — sending posts, running campaigns, syncing conversations, generating analytics.
• To bill you for paid plans through Stripe.
• To prevent abuse (rate limiting, fraud detection).
• To send you operational email — receipts, security alerts, your daily summary if you opted in.
• We do not sell your data, and we do not use your content to train third-party AI models.

3. Sub-processors

We share the minimum data required with these vendors, all of whom have a Data Processing Agreement with us:

• Stripe — billing and subscription management. Stores your name, email, and payment method.
• Unipile — LinkedIn API access for Outpilot. Stores LinkedIn session credentials and proxies requests.
• OpenAI / Anthropic — generative content for AI-assisted posts and reply suggestions. Prompts may include the post or message you're working on; outputs are not used for training (per their enterprise terms).
• Resend — transactional email (verification, password reset, daily summary).
• AWS / Hetzner — hosting and storage in the EU and US.

4. Data retention

• Active account data is retained for as long as your account is active.
• If you delete your account, we soft-delete your data within 24 hours and hard-delete within 30 days, except where retention is legally required (invoices, audit logs).
• Backups are encrypted and rotated on a 30-day cycle.

5. Your rights

Regardless of where you live, you can:

• Access a copy of your data — email ujjwal@codenicely.in.
• Correct data via the Profile page in the app.
• Delete your account at any time — see our Account Deletion page.
• Export your lead lists as CSV from inside the app.
• Object to certain processing or withdraw consent — email us.

6. Children

Banyan is not directed to children under 13 (or under 16 in the EU). We do not knowingly collect data from minors.

7. Security

• All traffic between you and Banyan is encrypted with TLS 1.2 or higher.
• Credentials and OAuth tokens are encrypted at rest with AES-256.
• Passwords are hashed with bcrypt (cost factor 12).
• Access to production data is limited to a small engineering team and audited.

8. Mobile-specific disclosures

• The Banyan mobile app uses the device's secure storage (Android Keystore / iOS Keychain) to store your authentication tokens locally.
• We request only the INTERNET permission. We do not access your contacts, location, camera, or files.
• The app does not contain advertising or third-party trackers.

9. International transfers

Your data may be processed in India, the EU, or the United States, depending on your region. We rely on Standard Contractual Clauses where applicable.

10. Changes to this policy

We'll notify you by email and in-app at least 14 days before any material change.

11. Contact

Questions or requests: ujjwal@codenicely.in
Banyan, c/o CodeNicely Software Services LLP, 2nd Floor, House 106/3, Avanti Vihar Rd, Geetanjali Nagar, Sector-3, Shankar Nagar, Raipur, Chhattisgarh 492004, India.