Banjo Tech Logo

Privacy Policy

Effective Date: 8 May 2025

Last Updated: 8 May 2025

1. Introduction

Banjo Tech, LLC ("Banjo Tech," "we," "our," or "us") is a Tennessee-domiciled company that owns and operates the digital products NativePlants.ai and Lingivo.ai (collectively, the "Services").

Protecting your privacy is important to us. This Privacy Policy explains how we collect, use, disclose, and safeguard information about visitors and users ("you") of our websites, mobile applications, and any related services.

If you have any questions, please contact our Data Protection Officer at privacy@banjotech.co.

2. Scope

This Policy applies to all personal data we process when you:

  • visit banjotech.co, nativeplants.ai, lingivo.ai, or associated sub-domains;
  • create or use an account within our mobile or web applications;
  • communicate with us via email, support channels, or social media; or
  • otherwise interact with any Service that links to this Policy.

3. Information We Collect

CategoryExamplesSourcePurposeGDPR Legal Basis*
Account & Identity DataName, email, phone, postal address, usernameYouCreate & maintain account; customer supportContract
CredentialsPasswords (stored/encrypted by Supabase & AWS Cognito; we can't read them)You / Auth providerSecure authenticationContract
Payment & Subscription DataPurchase tokens, subscription status, receipt IDs (from Apple, Google Play, RevenueCat; Stripe in future)App stores / payment processorsProcess payments; tax & accountingContract; Legal obligation
Usage & Device DataIP address, device ID, OS version, browser, interaction events, crash logsAutomated (Google Analytics, Firebase)Service delivery; analytics; fraud detectionLegitimate interests
Content You ProvideLandscape photos, garden images, house images (NativePlants); real-time text/voice content (Lingivo)YouCore functionality (AI design / translation)Contract
Marketing PreferencesOpt-in status for emails & notificationsYouSend promos & newsConsent

*See §8 for full GDPR legal-basis mapping.

4. How We Use Your Information

We process personal data to:

  1. Provide and operate the Services (create accounts, personalize content, translate text/voice, generate plant designs).
  2. Process purchases and manage subscriptions via Apple, Google Play, RevenueCat, and Stripe.
  3. Maintain safety and security (prevent fraud, ensure availability, debug, and protect against threats).
  4. Improve and develop new features through analytics, aggregated statistics, and user feedback.
  5. Send transactional & marketing communications (service updates, newsletters, promotions) when you opt in.
  6. Comply with legal obligations (tax, accounting, court orders) and enforce our Terms of Service.

5. Cookies & Similar Technologies

We use first-party and third-party cookies, SDKs, and local-storage technologies for:

  • authentication and session management;
  • analytics (Google Analytics, Firebase Analytics);
  • remembering user preferences.

You can manage cookies in your browser or device settings. Where required, we obtain your consent for non-essential cookies.

6. Sharing & Disclosure

We share data only with trusted providers that enable our business. They may process data solely on our instructions and under confidentiality agreements:

CategoryVendors (illustrative)Purpose
Cloud infrastructureAmazon Web Services (AWS) (us-east-2, us-west-2)Hosting, storage, databases
AuthenticationSupabase, AWS CognitoAccount sign-in and security
Payments & subscriptionsApple App Store, Google Play, RevenueCat, StripePayment processing
Analytics & crash reportingGoogle Analytics, FirebaseUsage statistics, diagnostics
AI & communicationsOpenAI / Amazon Bedrock, LiveKit, TwilioAI inference, real-time voice/video
Email messagingSendGrid (Twilio SendGrid)Transactional & marketing emails
Security & testingPen-test & audit partners (as needed)Security assurance

We do not sell or share personal data for cross-context behavioral advertising as defined by California law.

We may disclose information if required by law, to protect our rights or users, or in connection with a merger, acquisition, or asset sale.

7. International Data Transfers

We and many of our providers are located in the United States. For users in the EEA, UK, or Switzerland, transfers outside those regions are made under:

  • the Standard Contractual Clauses (SCCs) approved by the European Commission (and UK Addendum), as incorporated in AWS, Google, and other vendor agreements; and/or
  • vendors' participation in the EU–US Data Privacy Framework where applicable.

8. GDPR Legal Bases

PurposeLegal Basis
Account registration, authentication, core functionalityContract (Art. 6 (1)(b))
Payment processingContract
Security & fraud-prevention logsLegitimate interests (Art. 6 (1)(f))
Service analytics & crash logsLegitimate interests (service improvement)
Marketing emails & push notificationsConsent (Art. 6 (1)(a)); you may withdraw at any time
Compliance with legal obligations (tax, bookkeeping)Legal obligation (Art. 6 (1)(c))

9. Your Rights

Depending on where you live, you may have the right to:

  • Access, correct, or delete personal data
  • Object to or restrict processing
  • Port data to another service
  • Withdraw consent (for marketing, cookies, etc.)
  • Lodge a complaint with your supervisory authority

How to exercise:Email privacy@banjotech.co from the address associated with your account. We will respond within 30 days (or the timeframe required by law).

10. Data Retention

We retain personal data for the life of your account plus 12 months, unless a longer period is required by law or necessary to resolve disputes, enforce agreements, or protect our legal rights. After the retention period, data is securely deleted or anonymized.

11. Security

We employ industry-standard safeguards:

  • TLS encryption in transit; AES-256 at rest
  • Network segmentation and principle-of-least-privilege access
  • Multi-factor authentication for administrative systems
  • Regular vulnerability scans, penetration tests, and third-party security audits

No method of transmission or storage is 100% secure, but we continuously strive to protect your data.

12. Children's Privacy

Our Services are not directed to children under 13, and we do not knowingly collect personal data from them. If you believe a child has provided us personal data, please contact privacy@banjotech.co and we will delete it.

13. Links & Third-Party Content

Our sites may link to external websites or services we do not operate. This Policy does not apply to those third parties. Please review their privacy notices.

14. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we will notify you via email and/or an in-app banner at least 14 days before the new terms take effect. The "Last updated" date at the top will always reflect the latest version.

15. Contact Us

Banjo Tech, LLC
Attn: Data Protection Officer
Email: privacy@banjotech.co
Tennessee, USA

If you are in the EEA or UK and feel we have not resolved your concern, you may lodge a complaint with your local supervisory authority (e.g., the Irish Data Protection Commission or the UK ICO).

Thank you for trusting Banjo Tech with your data. We're committed to safeguarding your privacy while delivering innovative digital experiences.