Privacy Policy

Bantr ("we", "us") runs this service. This policy covers the Bantr website, the Cast members you talk to on it and by text, and the account behind them. Questions go to privacy@bantr.app.

Only what the service needs to work:

• Your mobile number. It is how you sign in and how the Cast members text you. We keep the number, when it was verified, and whether you have asked us to stop texting.
• The name you give us and your time zone, if your browser tells us, so a Cast member knows what to call you and what time it is where you are.
• What you say. Calls are recorded, both voices, and transcribed as they happen; texts are kept as sent. From these the Cast members keep short notes about you (what you told them, what you are working on, what you asked them to remember), which is how they know you next time.
• A photo, if you text one to a Cast member. It is described in words by our AI provider and the description is what the Cast member sees; we keep the description with your texts, not the photo. Our texting provider holds the file for a short time to deliver it.
• Payment details, when paying goes live: Stripe holds your card; we keep only the card's brand, last four digits and expiry, your balance, and a record of each top-up.
• Technical records: your device's requests to our servers, including IP address, browser type and the pages and functions used, kept in server logs for security and to keep the service running.

We do not collect your contacts or request your device’s precise location. For US visitors, limited Meta advertising measurement may run unless you opt out or your browser sends Global Privacy Control or Do Not Track. It stays off outside the US or when the region is unknown. Optional Google Analytics remains off unless enabled separately and you explicitly allow it in Your Privacy Choices. We also remember how you arrived (public campaign tags, a referring site and visited paths without query strings) in your browser and attach that record to your account when you sign up, to understand which campaigns bring people to Bantr. Browser settings and drafts stay on your device.

• To run the service: sign you in, connect you to a Cast member, transcribe and answer, and text you back.
• To let a Cast member remember you between conversations, on every channel you use with them.
• To text you when you have asked for it: a sign-in code, a reply, a first message from a Cast member you started with, and, for some Cast members, an occasional message they send on their own until you say stop.
• To bill you by the minute and keep your balance right.
• To keep the service safe: to detect abuse and to enforce our terms.
• To improve the service, by looking at how it is used in aggregate and, occasionally, by reading transcripts to fix what a Cast member got wrong.

We do not send your conversations, phone number, name, birth details or account profile to analytics or advertising providers. Limited advertising event sharing is described below and may count as sharing under state privacy laws. We do not use your conversations to train AI models, and our AI providers may not either.

Companies that do part of the work for us, under contracts that limit them to doing exactly that:

• OpenAI, whose models power the Cast members: your voice, your texts and the Cast members' notes about you are processed there to generate what a Cast member says. Under OpenAI's API terms this data is not used to train their models; they may hold it briefly for abuse monitoring.
• Google Firebase, which runs our sign-in, our database and our servers, and sends the sign-in code by text.
• Sendblue, which carries texts between you and the Cast members over iMessage and SMS.
• Telnyx, which carries voice calls when a Cast member calls your phone.
• Stripe, which processes payments when paying goes live.
• Netlify, which hosts the website.

We will also disclose information if the law requires it, to protect someone from serious harm, or as part of a sale or merger of the business, in which case this policy continues to apply to it.

If you allow it, Google Analytics measures visits to our public home and cast landing pages, using cookie identifiers, basic browser information and approved campaign labels. Google also receives your IP address when your browser connects. We do not send private page addresses, account details or conversations, and Google advertising signals and personalization are disabled.

Meta click/browser identifiers and an allowed measurement preference expire after 180 days, or are removed when you opt out or delete your account. An explicit opt-out remains in place until you change it; expiry does not automatically turn it back on. Withdrawal stops future sending when it reaches our server; it cannot undo events already sent. Limited first-party conversion receipts remain with the account for deduplication and are erased with it.

No Google Analytics script loads before your explicit choice. It stays off unless separately enabled and you turn on its control in Your Privacy Choices. Your choice and analytics cookies last up to 180 days; you can withdraw it at any time using Your Privacy Choices in the footer. We honor Global Privacy Control and Do Not Track. Signing up or accepting our Terms does not grant analytics permission.

For adult US visitors, Meta advertising measurement is enabled by default when available, with an opt-out in Do Not Sell or Share in the footer. Netlify supplies country-level eligibility; we do not collect precise location for this purpose. If your region is outside the US or unknown, or your browser sends Global Privacy Control or Do Not Track, the automatic policy stays off. We retain a Meta click identifier from a reviewed Dawn landing page and browser user-agent, and send events for completed sign-up and your first Dawn call lasting at least 30 seconds. Events contain their time, event name, a deduplication code, website action source and a fixed public Dawn address. We do not send your phone number, name, birth details, profile, conversations, recordings or private page addresses. Meta may use these events to measure, improve and personalize advertising. This may constitute sharing for cross-context behavioral advertising under state privacy laws. Opting out does not prevent using Bantr or our first-party campaign attribution. Google Analytics remains a separate explicit opt-in.

• Recordings and transcripts of your calls, and your texts: for as long as you have an account.
• A Cast member's notes about you, your name and number: for as long as you have an account.
• Payment records: as long as the law requires for tax and accounting.
• Server logs: a short period, typically 30 days.
• If you redeemed a friend's invite: a scrambled code made from your number, so one number can only use one invite. It cannot be turned back into your number, is not linked to anything else about you, and is kept after you delete your account.

Deleting your account erases all of the above except the payment records the law requires and that invite code, and revokes your sign-in. It is immediate and cannot be undone. Account deletion does not recall advertising events already received by Meta.

• Delete everything: your account page has a Delete account button. It removes every conversation, note, message and record about you, and your sign-in.
• Stop the texts: reply STOP to a Cast member's number and that Cast member stops texting you. Sign-in codes are only ever sent when you ask.
• Change your name: on your account page. Your number cannot be changed; a new number is a new account.
• See what we hold: write to privacy@bantr.app from the number on your account and we will send you what we have.

You can opt out of sharing advertising events using the Do Not Sell or Share My Personal Information controls in this section, without creating an account. The choice applies to this browser and, when signed in, is synchronized to your account to stop future Meta delivery. We honor Global Privacy Control and Do Not Track. It cannot recall events already sent. You may also contact us at the privacy address below. If you are in California, the European Economic Area, the United Kingdom or another place with privacy rights, you can exercise them by writing to us; we will not treat you differently for doing so. If we deny a request, you can appeal by replying to our answer.

Bantr is for adults. You must be 18 or older to use it, and we do not knowingly collect information from anyone under 13. If you believe a child has an account, write to privacy@bantr.app and we will delete it.

Everything travels encrypted. There is no password to steal: your account is your phone number, verified by a code sent to your phone, and every request to our servers must carry a signed token for your session. A deleted account's tokens stop working at once. No system is perfect, and the security of your account also depends on the security of your phone.

We are in the United States and our providers process information there. If you use Bantr from somewhere else, your information is transferred to and handled in the United States under this policy.

When this policy changes we update the date at the top, and for changes that matter we tell you on the site or by text before they take effect.

Privacy questions and requests: privacy@bantr.app. Anything else: team@bantr.app.