1. Who this policy covers
Bana is used by contractor organizations. This policy covers visitors to this site, the office users and technicians of a contractor organization, and the customer collaborators an organization invites. Most records in Bana are put there by an organization about its own projects, and that organization controls them; Bana processes those records to provide the service.
2. What Bana collects
- Account information: name, work email, role, and an optional profile photo. Technicians are typically identified by name and phone number so report links can reach them by text.
- Field records: daily report summaries, photos and video, test notes, device and drop records, plans, and comments that people in your organization submit.
- Location: one GPS reading, taken on the phone while a field report is open and sent with that report when it is submitted, with its accuracy and the result of the geofence check. Nothing more; see section 3.
- Usage and log data: sign-ins, actions taken on records, and technical logs kept for security and troubleshooting.
- Billing: your plan and payment history. Card numbers go directly to a PCI-compliant payment processor and never touch Bana’s servers.
- Cookies: only the ones that keep you signed in, protect forms, and remember your language and display settings. Bana uses no advertising or cross-site tracking cookies. Because it does not track visitors across other sites, it treats every visit the same way whether or not a browser sends a Do Not Track signal.
3. Location, specifically
Bana does not track anyone. Location is read once, on the phone, when a technician opens the report form, and only with the phone’s permission. The technician sees the result on the form, and the reading is sent with the report when it is submitted, compared to the project’s geofence, and stored on that report as its verification stamp. There is no background location, no movement history, and no reading outside the report form. If location is denied or unavailable, the report still goes through and is marked accordingly.
Photos and videos keep none of the location or device details a phone camera embeds in them: Bana removes those when it processes each file.
Off-site and late flags are visible to the organization’s office staff only. They never appear to customers.
4. How information is used
To run the service: assembling daily reports and turnover packages, sending report links by text and notices by email, showing customers the read-only view their organization shares, metering usage against plans, billing, support, and keeping the service secure. Bana does not sell personal information and does not use your records for advertising. We do not sell or share your SMS opt-in data or personal information with third parties for marketing purposes. Mobile phone numbers are never shared with third parties or affiliates for marketing or promotional purposes, and text message opt-in and consent records are not shared with any third party.
5. Who sees what
- People in your organization see records according to the roles your administrators assign.
- Customer collaborators see a deliberately reduced view: progress, photos, schedules, and reports meant for them. GPS readings, distances, and internal flags are excluded from customer surfaces by design.
- Service providers process data on Bana’s behalf: a cloud provider for hosting, storage, and translating comments, a text message carrier, an email carrier, an address lookup service for project sites, and a payment processor. Each receives only what its job requires.
- Legal: Bana discloses information if required by law, and will notify the affected organization unless prohibited.
6. Retention
Records are kept while an organization’s account is active. After a cancellation, the organization becomes read only and its records are retained for at least 12 months so nothing is lost if it returns. An organization’s administrators can request deletion in writing, and Bana honors it subject to legal obligations and backup cycles.
7. Security
Data is encrypted in transit, access is controlled by role, and every organization’s records are isolated from every other’s. No method of storage or transmission is perfectly secure, but protecting field records is the point of the product, and it is treated that way.
8. Your choices
- Text messages: reply STOP to any Bana text to stop receiving them. Report links then pause until you opt back in.
- Email: notification preferences can be adjusted in account settings.
- Access and correction: ask your organization’s administrator, who controls the records, or contact Bana directly.
9. Children
Bana is workplace software and is not directed to children. Do not use it to collect information about anyone under 16.
10. Changes and contact
If this policy changes materially, organization administrators will be notified before the change takes effect, and the effective date above will move. Questions about privacy can be sent to support@banabuild.com.