Privacy Policy

Last updated: September 28, 2026

Banyan ("we", "us") operates the Banyan suite of go-to-market tools, including Canopy, Outpilot, and Herald, accessible via web at app.getbanyan.co and via the Banyan mobile app. This policy explains what data we collect, why, and what choices you have.

1. Data we collect

Account data

• Email, full name, and password (hashed with bcrypt) when you sign up.
• Profile timezone and notification preferences.
• Subscription status, plan tier, and Stripe customer ID for billing.

Integration data

• LinkedIn (Canopy): OAuth access and refresh tokens, your LinkedIn ID, and basic profile data (name, email, photo), used to publish posts on your behalf.
• LinkedIn (Outpilot): Account email and password (encrypted at rest with AES), optional 2FA secret (encrypted), profile capability flags, and the conversations / connections we sync from LinkedIn through Unipile.
• Email (Herald): Mailbox OAuth tokens (Google or Microsoft) used to send and receive email on your behalf, plus campaign sends, replies, bounces, unsubscribes.

Usage data

• Posts, drafts, lead lists, campaigns, and conversation content you create or import into the platform.
• Server-side request logs (IP address, user-agent, traceId, latency) retained for up to 30 days for abuse prevention and debugging.
• Mobile app crash reports and basic device metadata (model, OS version) when crash reporting is enabled.

Cookies, analytics and advertising (websites)

On getbanyan.co and app.getbanyan.co we use:

• Essential cookies to keep you signed in and remember your choices, including your cookie choice itself (_banyan_consent).
• Google Analytics (GA4) to understand which pages and features people use.
• Advertising tags from Google Ads and Meta to measure whether our ads lead to sign-ups and purchases, and to show our ads to people who have visited our site.
• An attribution cookie (_banyan_attr) that records how you first found us: the campaign in the link you clicked (UTM tags and the ad click IDs Google and Meta add, such as gclid), the page you arrived on and the site that referred you. It's stored with your account when you sign up.

When you sign up, start a trial or buy a plan, we may send that event to Google Ads and Meta so they can match it to the ad you clicked. Google receives your email address in hashed form (SHA-256, a one-way code; the address itself isn't sent) and the ad click ID. Meta receives your hashed email, first and last name and country, your account ID, and Meta's own browser identifiers. We never send the content of your campaigns, leads or messages to ad platforms.

Your choices. Visitors from the European Economic Area, the UK and Switzerland see a cookie banner. Until they accept, we set no analytics or advertising cookies and don't record which ad or campaign they came from. The Google and Meta tags still load in a restricted mode: Google may receive cookieless signals (for example, that a page was viewed) which it uses only in aggregate, and Meta receives nothing. If you decline, we also don't send your sign-up or purchase events to Google Ads, Meta or Google Analytics from our servers. You can change your choice any time with the "Cookie settings" link at the bottom of every page. You can also opt out through Google's ad settings, the Google Analytics opt-out add-on, and Meta's ad preferences.

2. How we use your data

• To run the Banyan products you subscribed to, sending posts, running campaigns, syncing conversations, generating analytics.
• To bill you for paid plans through Razorpay (India) or Stripe (elsewhere).
• To measure and improve our own advertising, as described under "Cookies, analytics and advertising".
• To prevent abuse (rate limiting, fraud detection).
• To send you operational email, receipts, security alerts, your daily summary if you opted in.
• We do not sell your data, and we do not use your content to train third-party AI models.

3. Sub-processors

We share the minimum data required with these vendors, all of whom have a Data Processing Agreement with us:

• Stripe, billing and subscription management. Stores your name, email, and payment method.
• Razorpay, payments for customers in India. Stores your name, email, phone and payment details.
• Google (Analytics, Ads) and Meta (Pixel, Conversions API), website analytics and ad measurement, subject to your cookie choice. Receives page visits, ad click IDs and hashed email for sign-up and purchase events.
• Meta (WhatsApp Business Platform) and Interakt, delivery of WhatsApp messages and forms. Receives your WhatsApp number, profile name, messages and form answers.
• Unipile, LinkedIn API access for Outpilot. Stores LinkedIn session credentials and proxies requests.
• OpenAI / Anthropic, generative content for AI-assisted posts and reply suggestions. Prompts may include the post or message you're working on; outputs are not used for training (per their enterprise terms).
• Resend, transactional email (verification, password reset, daily summary).
• AWS / Hetzner, hosting and storage in the EU and US.

4. Data retention

• Active account data is retained for as long as your account is active.
• If you delete your account, we soft-delete your data within 24 hours and hard-delete within 30 days, except where retention is legally required (invoices, audit logs).
• Backups are encrypted and rotated on a 30-day cycle.

5. Your rights

Regardless of where you live, you can:

• Access a copy of your data, email ujjwal@codenicely.in.
• Correct data via the Profile page in the app.
• Delete your account at any time, see our Account Deletion page.
• Export your lead lists as CSV from inside the app.
• Object to certain processing or withdraw consent, email us.

6. Children

Banyan is not directed to children under 13 (or under 16 in the EU). We do not knowingly collect data from minors.

7. Security

• All traffic between you and Banyan is encrypted with TLS 1.2 or higher.
• Credentials and OAuth tokens are encrypted at rest with AES-256.
• Passwords are hashed with bcrypt (cost factor 12).
• Access to production data is limited to a small engineering team and audited.

8. WhatsApp messages

Banyan's WhatsApp number is operated by CodeNicely, the team behind Banyan, and appears in WhatsApp as CodeNicely (+91 89628 68073). We use Ivy, our own WhatsApp platform, with Meta's WhatsApp Business Platform and our WhatsApp partner Interakt as sub-processors.

• What we collect. When you message us, we receive your WhatsApp number, profile name and the messages you send. If you fill in one of our WhatsApp forms, we store your answers (for example your name, role, team size and the products you are interested in).
• Account messages. If you tick the WhatsApp box at sign-up, we send trial reminders and account updates on WhatsApp.
• Tips and offers. We send marketing messages (tips, product news and offers) only if you have explicitly agreed, for example by ticking the consent box in one of our WhatsApp forms. We send them occasionally, not daily.
• Opting out. Reply STOP at any time. On this number, STOP stops all WhatsApp messages from us, including trial reminders and account updates. You can also email us to withdraw consent.
• Talking to a person. Chats may be read and answered by our team in our inbox.
• Retention. We keep WhatsApp conversations and form answers while you have an account or an active conversation with us, and delete them on request.

9. Mobile-specific disclosures

• The Banyan mobile app uses the device's secure storage (Android Keystore / iOS Keychain) to store your authentication tokens locally.
• We request only the INTERNET permission. We do not access your contacts, location, camera, or files.
• The mobile app does not contain advertising or third-party trackers. (Our websites do use analytics and advertising tags; see "Cookies, analytics and advertising" above.)

10. International transfers

Your data may be processed in India, the EU, or the United States, depending on your region. We rely on Standard Contractual Clauses where applicable.

11. Changes to this policy

We'll notify you by email and in-app at least 14 days before any material change.

12. Contact

Questions or requests: ujjwal@codenicely.in
Banyan, c/o CodeNicely Software Services LLP, 2nd Floor, House 106/3, Avanti Vihar Rd, Geetanjali Nagar, Sector-3, Shankar Nagar, Raipur, Chhattisgarh 492004, India.