How we handle your information.

Banu, Inc. (“Banu”, “we”, “us”) is a Nevada-registered company headquartered in Reno. We operate the banu.ai marketing site, the property-search experience at banu.ai/search, and the Banu CRM and outreach platform at app.banu.ai.

For privacy questions or requests email info@banu.ai.

Information you give us. Account details (name, email, phone) when you sign up for a free account or subscribe to a paid plan. Payment information processed by HubSpot/Stripe — we do not store full card numbers. Anything you type into a contact, demo-booking, or support form.

Information from your use of the site. Pages viewed, buttons clicked, search queries on /search, properties opened, filters applied, and skip-trace actions you initiate. Approximate location derived from your IP address. Device, browser, and operating-system fingerprint.

Information from third parties. Property and business ownership records, contact details, and demographic data we license from real-estate and business-data providers to power the search experience. Visitor identification signals from REB2B and Leadsy when those trackers are enabled.

• To provide and improve Banu’s products.
• To answer support requests and process payments.
• To measure how the site performs and how our marketing converts.
• To send you outreach you’ve asked for and follow-ups about products you’ve shown interest in.
• To meet legal obligations (tax records, valid law-enforcement requests).

The banu.ai marketing site uses cookies and tracking pixels in four categories: strictly necessary, analytics, marketing, and visitor identification. We list every tracker we load — Google Analytics 4, Meta Pixel, LinkedIn Insight, Reddit Pixel, REB2B, Leadsy/Instantly, and StatCounter — on our cookies page. You can choose what fires via the cookie banner that appears on your first visit, or by clicking “Cookie preferences” in the footer at any time.

Limitation: when you change your preferences mid-session, scripts that already loaded continue to run until you reload the page. We don’t attempt to unload them in place — too brittle.

Service providers we’ve hired to operate the business: Vercel (hosting), Supabase (database), OpenAI and Anthropic (AI assistants), HubSpot (forms and payments), Calendly (demo booking), Resend / SendGrid (email), and the analytics/marketing trackers listed in section 4. Each is contractually bound to use the data only for the purpose we hired them for.

Legal disclosures. We may disclose information when compelled by valid legal process or when necessary to protect Banu, our customers, or the public.

Business transfers. If Banu is acquired or reorganised, your information may transfer to the new owner. We’ll give you advance notice and let you delete your account first if you prefer.

We do not sell personal information for monetary value.

Account data: as long as your account is active, plus 24 months after cancellation in case you come back. You can request faster deletion at any time. Marketing analytics: 14 months in GA4 then aggregated. Server logs: 30 days. Payment records: 7 years (tax law).

If you’re in the EU/UK/EEA the GDPR gives you the right to access, correct, delete, port, restrict, or object to our processing of your data, plus the right to withdraw consent at any time. Email info@banu.ai with your request and we’ll respond within 30 days. You also have the right to complain to your local data protection authority.

If you’re in California the CCPA/CPRA gives you the right to know what we collect, delete it, correct it, opt out of any “sale or share”, and limit use of sensitive personal information. Use our Do Not Sell or Share link or email info@banu.ai. We don’t discriminate against users who exercise these rights.

Other US states with comprehensive privacy laws (Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana) grant similar rights. Use the same email or our cookie-preferences controls.

We use TLS in transit, encryption at rest for our database, role-based access control on production, and require multi-factor authentication for staff. No system is 100% secure — if we discover a breach affecting your personal information we’ll notify you and the appropriate authorities promptly.

Banu is not directed to children under 16 and we don’t knowingly collect their information. If you believe a child has provided us personal data, contact us and we’ll delete it.

We’re based in the United States and our infrastructure is US-hosted. If you visit from outside the US your data is transferred to the US under appropriate safeguards (Standard Contractual Clauses for EU/UK transfers).

We’ll post any material change here and update the “Effective” date at the top. For significant changes we’ll also notify account holders by email.

Banu, Inc.
Reno, Nevada, USA
info@banu.ai