Privacy policy
Last updated: September 28, 2026
Banyan Tree Labs LLC, a Georgia company, runs Banyan and the website at banyantreelabs.xyz. In this policy, "we" means Banyan Tree Labs LLC, and "you" means anyone who visits the site or uses Banyan. Questions go to info@banyantreelabs.xyz.
The website
The site has no forms, no analytics, no advertising, and no cookies of its own. Our host, Vercel, keeps standard server logs, including IP address, browser type, and the pages requested. We use those logs to run and protect the site.
When you book a call, you leave our site for Calendly. Calendly's privacy policy covers what you enter there, and we receive the details you submit so we can hold the call.
What Banyan collects
Banyan works with the accounts and folders you connect. You pick each one, and you can switch any of them off.
- Account details. Your name, email address, and profile photo from Google sign-in.
- Email. Gmail messages in the accounts you connect. Banyan reads messages and writes drafts into your Gmail drafts folder. Banyan does not send or delete email.
- Calendar. Events in the calendars you connect. Banyan reads them and does not change them.
- Files. Documents in the Google Drive folders you choose. Banyan reads them and does not change or delete them.
- Meeting notes. Notes from tools you connect, such as Granola.
- The brain. From the data above, Banyan builds a private map of the people, clients, projects, and facts in your work, with a link to the source of each fact.
- Service records. Logs of sign-ins, errors, and actions inside Banyan, which we use to fix problems and keep the service secure.
How we use it
We use your data to run Banyan for you: to answer your questions, prepare your day, draft replies and documents, and keep your brain current. We also use it to support your account and to secure the service.
We do not sell your data. We do not show you ads or use your data for advertising. We do not use your data to train AI models, ours or anyone else's.
Google user data
Banyan's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
In practice:
- We use Google data to provide and improve the Banyan features you see and use. We use it for nothing else.
- We transfer Google data to others in four cases: to provide those features, to comply with the law, to protect against security threats, or as part of a merger or sale of our business, with your data kept under the same rules.
- We never use Google data for advertising, and we never sell it.
- Our staff do not read your Google data unless you ask us to, for example to fix a problem, or the law or a security investigation requires it.
- We do not use Google Workspace data to train generalized AI or machine learning models.
Who processes your data
We use a small set of service providers, each bound by contract to protect your data and use it for our service alone:
- Anthropic runs the Claude models that read your data and write answers and drafts. Anthropic processes this data under its commercial API terms, which bar training on it.
- Google Cloud handles Google sign-in and the connections to your Google accounts.
- Vercel hosts the website and parts of the Banyan service.
We may disclose data when the law requires it, for example to answer a valid court order. If we do, we will tell you unless the law forbids it.
Security
- We encrypt stored data with AES-256-GCM and encrypt data in transit with TLS 1.2 or higher.
- Access tokens for your accounts stay on our servers, encrypted, and never reach a browser.
- Each organization's data sits in its own workspace, separate from every other customer.
- We ask Google for the narrowest permissions Banyan needs: read, plus drafts for Gmail.
If we learn of a breach that affects your data, we will tell you without delay and explain what happened and what we are doing about it.
Your choices
- Switch sources on and off. Choose which accounts and folders Banyan sees, and change that anytime.
- Revoke access. Disconnect an account in Banyan's settings, or remove Banyan from your Google account's third-party access page. Banyan loses access right away.
- Export. Download a full copy of your brain and account data.
- Delete. Delete your account and data from Banyan's settings, or email us. We delete it from our systems within 30 days, and backups age out within 30 days after that.
- Access and correction. Ask us what we hold about you, or ask us to correct it.
Email info@banyantreelabs.xyz for any of these. We answer within 30 days. We honor these rights wherever you live, and we will not penalize you for using them.
Retention
We keep your data while your account is active. When you disconnect a source, we delete the data from that source within 30 days. When you close your account, we delete everything within 30 days. We keep a record longer where the law requires it, such as invoices.
Where we process data
We process and store data in the United States. If you use Banyan from another country, you agree to that transfer.
Children
Banyan is for businesses and adults. We do not collect data from anyone we know to be under 18. If you believe a child has given us data, email us and we will delete it.
Changes
We will post changes to this page and update the date at the top. For changes that affect how we use your data, we will email account holders before the change takes effect.
Contact
Banyan Tree Labs LLC
info@banyantreelabs.xyz