Last updated: October 18, 2026
Banche Labs, Inc. operates the Banche Labs account (the "Account"). References in this Privacy Policy to "Banche Labs," "we," "us," or "our" refer to Banche Labs in its capacity as operator of the Account. Banche Labs is the controller of the personal data this Privacy Policy describes: the data we process for the Account and signing in with it, the consent records we keep, the Account's billing center, messages sent to us from any Banche Labs site, our own sites, and the use of information across Banche Labs products. Each Banche Labs product's own processing is described in that product's privacy policy.
1. Information We Process
- Your Account. The email address you create your Account with, which you sign in with and which we use to contact you; the identifier that links your consent records to your Account; and, if you set one, your account picture, which every Banche Labs product you sign into displays.
- Signing in and security. One-time sign-in codes we send to your email address; details of your sessions and devices — device type, browser, approximate location derived from your network address, and last activity — which your Account shows you so you can end a session; and a check at sign-up that you are not an automated program. If you authorize a command-line tool to act for you, the credentials issued to it are tied to your Account.
- Consent records. When you accept our Terms of Service or the terms of any Banche Labs product, we record which documents and which versions you accepted, when and how you accepted them, and the IP address and browser details of the acceptance.
- Waitlists, invitations, and admission. You may ask to join a Banche Labs product's waitlist with your email address, before you hold an Account. We confirm the request by email, and every confirmation and admission email includes a link that withdraws your request and erases it. We keep waitlist places, invitation codes, and the record of who has been admitted to which product and how. A place taken with an email address becomes your Account's when that address is your Account's verified email address.
- Product sign-ups. Which Banche Labs products your Account has signed up for, and when. Signing up for a product is your Account's first acceptance of that product's terms.
- Billing. Purchases are made through your Account's billing center, with Polar as merchant of record. We keep the link between your Account and Polar, what you are entitled to in each Banche Labs product, changes to your subscription status, and the usage quantities a product reports for billing. You enter your payment details with Polar; we never hold them.
- Messages you send us. On any Banche Labs site, you may send us a message, whether or not you are signed in. A message includes what you write, your name and email address, the page you were on and its technical details, and, if you are signed in, your Account identifier. Nothing is sent until you choose to send it.
- Technical data. Server and browser telemetry we use to operate and fix our services — IP address, browser details, pages requested, timings, and errors — held by our monitoring service provider.
- Cookies. Session cookies set by our sign-in provider; a cookie that tells our sites you have a signed-in session; and a cookie that remembers your theme preference. All are first-party, and all are essential or functional. We use no advertising or third-party tracking cookies.
2. Information Across Banche Labs Products
When you use a Banche Labs product, we provide it with:
- When you sign in to the product, your Account identifier and email address, and your account picture if you have set one
- Whether you have accepted that product's terms
- What you are entitled to in that product
- When you close your Account, a request to erase your data
We may use the information we collect across the Banche Labs products you use, to provide them, connect them, and improve them.
3. How We Use Your Information
| Purpose | Legal basis (GDPR) |
|---|---|
| Operate the Account and signing in, including security notices | Performance of contract |
| Billing center and entitlements | Performance of contract |
| Keep consent records | Legitimate interest — proving assent |
| Security, fraud, and abuse prevention | Legitimate interest |
| Operate, maintain, and improve our services (telemetry) | Legitimate interest |
| Reply to messages you send us | Legitimate interest |
| Recommend Banche Labs products on our own sites and products | Legitimate interest |
| Use information across the Banche Labs products you use, to provide, connect, and improve them | Legitimate interest |
| Marketing email | Consent, given at product enrollment |
| Respond to legal requests | Legal obligation |
We may recommend Banche Labs products to you on our own sites and products, including in your Account. We send you marketing email only if you opted in to it when you enrolled in a Banche Labs product.
4. Your Right to Object to Direct Marketing
You have the right to object at any time to our use of your personal data for direct marketing, including the product recommendations described above. If you object, we will stop using your personal data for that purpose. To object, contact us at privacy@banchelabs.com.
5. Who We Share Personal Data With
We use service providers to process personal data on our behalf, for hosting, databases, network and edge delivery, identity, monitoring, messaging, and workflow processing. They are named in our subprocessor list.
Polar is the merchant of record for purchases made through your Account and processes your payment information under its own privacy policy.
We may also share personal data:
- With legal authorities: when required by law, regulation, legal process, or governmental request, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.
- In a business transfer: in connection with a merger, acquisition, reorganization, or sale of assets, your personal data may be transferred as part of that transaction. We will notify you of any such change.
6. International Data Transfer
If you access the Account from outside the United States, your information will be transferred to and processed in the United States and other countries where our service providers operate. These countries may have different data protection standards than your country of residence.
7. Your Rights
Depending on your location, you may have the following rights:
- Access: request a copy of the personal information we hold about you
- Correction: request that we correct inaccurate information
- Deletion: request that we delete your personal information, which is done by closing your Account
- Portability: receive your data in a structured, machine-readable format
- Objection: object to our processing of your information where we rely on legitimate interest
- Restriction: request that we restrict processing in certain circumstances
- Withdraw consent: where processing is based on consent, such as marketing email, you may withdraw consent at any time
Closing your Account erases it and sends a request to erase your data to every Banche Labs product you used. One record is kept: the fact of each acceptance — which documents, which versions, and when — with your identifiers removed, to show that the terms were agreed to.
To exercise these rights, contact us at privacy@banchelabs.com. We will respond within a reasonable timeframe and in accordance with applicable law.
8. California Residents
If you are a California resident, you have the right to:
- Know what personal information we collect, use, and share
- Request deletion of your personal information
- Request correction of inaccurate personal information
- Not be discriminated against for exercising these rights
We do not sell or share (as defined under CCPA/CPRA) your personal information. We honor Global Privacy Control (GPC) signals. Because we do not sell or share personal information, no additional action is required upon receiving a GPC signal.
We do not respond to Do Not Track browser signals, as there is no industry standard for honoring them.
9. Children
You must be at least 18 years old, or the age of majority where you live if that is higher, to hold an Account. If we learn that an Account belongs to someone who does not meet this requirement, we will close the Account and delete its data.
10. Data Retention
We keep personal data for as long as necessary for the purposes described in this Privacy Policy. When your Account is closed, your Account data is removed, and your consent records are kept with your identifiers removed. Technical data is retained for a standard operational period. We may retain anonymized, aggregated data that cannot be used to identify you.
11. Data Security
We use technical, administrative, and organizational safeguards to protect your personal data against unauthorized access, alteration, disclosure, or destruction. No method of transmission or storage is completely secure. While we strive to protect your personal data, we cannot guarantee absolute security.
12. Changes to This Policy
We may change this Privacy Policy. We will give you notice of a material change at least one month before it takes effect, and will present the revised Privacy Policy together with our Terms of Service. A change that is not material takes effect when we publish it.
13. Contact Us
If you have questions about this Privacy Policy or our data practices, contact us at:
Banche Labs, Inc.
privacy@banchelabs.com