Privacy Policy
Last Updated: December 09, 2025
This Privacy Policy explains how DS Ai Labs LLC (“Banyan AI,” “Company,” “we,” “our,” or “us”) collects, uses, stores, and protects personal information when you access or use the Banyan AI platform and related services (“Services”).
We are committed to safeguarding your privacy and processing personal data responsibly and transparently.
1. Company Information (Data Controller)
DS Ai Labs LLC
Gulriphshistr. 36
GE-0101 Tbilisi, Georgia
Identification Number: 400327632
Email: davit@gobanyan.io
DS Ai Labs LLC acts as the Data Controller for all personal information collected directly through the Banyan AI platform unless otherwise specified in a separate data processing agreement.
2. Information We Collect
We collect personal information in the following categories:
2.1 Information You Provide Directly
- Name, surname
- Company name, role, and professional title
- Email address, phone number, account preferences
- Authentication credentials (hashed; we do not store raw passwords)
- Content, metadata, and files you submit while using the Services
- Communications with our support, sales, or onboarding teams
2.2 Automatically Collected Data
- Usage data: interactions, workflow actions, logs, and performance metrics
- Device information: IP address, browser type, time zone, operating system
- Platform diagnostics: error reports, workflow execution results, latency metrics
- Cookies and tracking technologies (see Section 10)
2.3 Integration and Third-Party System Data
When you connect external tools (e.g., CRM, marketing tools, billing systems, ERPs, internal databases), we may process:
- API tokens or OAuth credentials
- Data fields, objects, and records required for workflow execution
- Logs and analytics related to connector performance
- System metadata (schemas, structures, sync status)
We only access the minimum amount of information necessary to provide the requested functionality.
2.4 Payment Information
Billing information is processed by certified third-party payment providers. We do not store full credit card details on our servers.
3. How We Use Your Information
We process personal information for the following purposes:
3.1 Service Delivery
- Provision, configuration, and maintenance of the Banyan AI platform
- Execution of automations, workflows, and AI-generated actions
- Authentication and account management
3.2 Platform Improvement
- Monitoring system performance and operational stability
- Developing new features and improving existing functionality
- Identifying usage patterns to optimize workflow quality
3.3 Communication
- Service-related notifications, updates, and technical alerts
- Customer support and troubleshooting
- Onboarding guidance and service documentation
- Marketing communication (only where legally permitted and opt-out available)
3.4 Compliance & Protection
- Preventing misuse, fraud, or unauthorized access
- Fulfilling legal obligations and responding to lawful requests
- Enforcing our Terms of Service
We process data under legitimate interests, contractual necessity, consent, or legal requirement, depending on the context.
4. Legal Bases for Processing
Where required under applicable data protection laws (e.g., GDPR for EU-based users), we rely on:
- Contractual necessity – to provide and operate the Services
- Legitimate interests – product improvement, security, fraud prevention
- Consent – marketing communications, optional telemetry
- Legal obligations – regulatory, tax, or court requests
5. Information Sharing and Disclosure
We do not sell or rent personal information.
We may share data only in the following circumstances:
5.1 Service Providers (Processors)
Trusted vendors supporting hosting, storage, analytics, authentication, customer support, or payment processing. All parties adhere to confidentiality and data protection obligations.
5.2 User-Authorized Integrations
When you connect external tools (e.g., HubSpot, Salesforce, Slack, Google Sheets), Banyan AI interacts with those services strictly according to your configuration.
5.3 Legal and Compliance Requirements
We may disclose information when required to:
- Comply with applicable law
- Respond to court orders or government authorities
- Protect the rights, property, or safety of the Company or its users
5.4 Business Transfers
In the event of a merger, acquisition, restructuring, or sale of assets, personal data may be transferred as part of the transaction, subject to confidentiality protections.
6. International Data Transfers
Your information may be processed or stored in countries outside your jurisdiction.
Where applicable, we implement safeguards such as:
- Standard Contractual Clauses (SCCs)
- Contractual data protection guarantees
- Secure transfer mechanisms aligned with GDPR and international standards
7. Data Security
We implement administrative, technical, and organizational safeguards, including:
- Encrypted data storage (in transit and at rest)
- Role-based access controls and permission segmentation
- Secure credential handling and token management
- Continuous monitoring, intrusion detection, and audit logging
- Strict personnel access policies
- Regular security reviews and vulnerability assessments
While no system is 100% secure, we continuously work to protect your information against unauthorized access, disclosure, modification, or deletion.
8. Data Retention
We retain personal data only for as long as necessary to:
- Provide the Services
- Fulfill contractual and legal obligations
- Resolve disputes
- Enforce agreements
- Maintain platform integrity and diagnostics
Upon account termination, we delete or anonymize data unless retention is required for legal or operational reasons.
You may request deletion at any time (see Section 9).
9. Your Rights
Depending on your jurisdiction, you may have the right to:
- Access personal information we hold
- Rectify inaccurate or incomplete data
- Delete your personal information (“right to be forgotten”)
- Object to certain types of processing
- Restrict processing in certain circumstances
- Request export or portability of your data
- Withdraw consent at any time (where processing is based on consent)
To exercise these rights, contact us at davit@gobanyan.io.
We may require identity verification to protect your account.
10. Cookies and Tracking Technologies
We use cookies and similar technologies to:
- Authenticate users
- Maintain session state
- Analyze usage and performance
- Personalize the interface
- Enable essential platform functionality
You may disable non-essential cookies through browser settings.
Blocking certain cookies may affect platform performance.
11. Children’s Privacy
The Services are not intended for individuals under 13 years of age, and we do not knowingly collect personal information from minors. If we become aware of such data, we will delete it promptly.
12. Third-Party Links
Our Services may include links to third-party websites or integrations.
We are not responsible for the privacy practices of external providers, and we encourage users to review their respective policies.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time.
Updates take effect upon posting, and the “Last Updated” date will reflect the change.
Material changes may be communicated directly to registered users.
14. Contact Us
If you have any questions regarding this Privacy Policy or our data practices, please contact:
DS Ai Labs LLC
Email: davit@gobanyan.io
