Legal

Privacy Policy

Last updated June 12, 2026

This policy explains what baanjai collects, how we use it, and the choices you have. We keep it short and plain.

Who we are

We operate baanjai (“we”, “us”). You can reach us any time at [email protected].

What we collect

  • Waitlist details. When you apply for the beta, we collect your first name (optional) and email address, and we generate a referral code tied to your place in line.
  • Account information. If you’re given access to the console, we store your account email, authentication credentials, and security settings (such as passkeys and two-factor enrollment).
  • Console usage. To run the product we process records of the devices you manage and the elevation requests, approvals, commands, and audit events you create.
  • Phone numbers (SMS). If you opt in to text-message alerts, we collect the mobile number you provide and your messaging preferences. See our SMS Terms.
  • Push tokens. If you use the iOS app, we store a device token to deliver elevation, chat, and sign-in alerts.
  • Cookies & local storage. We use a session cookie to keep you signed in, a short-lived referral cookie when you arrive via a share link, and browser local storage to remember your place in line. We don’t use third-party advertising trackers.
  • Basic technical data. Standard server logs (such as IP address and request time) used to operate the service, prevent abuse, and enforce rate limits.

How we use it

  • To run the waitlist, place you in line, and process referrals.
  • To provide, secure, and improve the baanjai console.
  • To send you transactional messages — a waitlist confirmation, account and security notices, and any alerts you’ve configured.
  • To prevent fraud and abuse and to comply with the law.

SMS & your phone number

We do not share your data with third parties for marketing purposes. Mobile information — including your phone number and SMS opt-in — is never sold, and is never shared with third parties or affiliates for their own marketing. We share it only with the messaging providers that deliver texts on our behalf, solely to send the messages you asked for. Text STOP at any time to opt out.

When we share information

We don’t sell your personal information. We share it only with service providers who process it for us under contract — for example our hosting, email, and SMS providers, and the file-reputation lookup used to flag known-bad software — and only as needed to run the service. We may also disclose information if required by law or to protect our rights and users.

How long we keep it

We keep information for as long as your waitlist entry or account is active, and as needed to provide the service, meet legal obligations, resolve disputes, and enforce our agreements. You can ask us to delete your waitlist entry or account at any time.

Security

We protect access with passwordless passkeys and two-factor authentication, encrypt sensitive stored secrets, and keep a complete audit trail. No method of transmission or storage is perfectly secure, but we work to protect your information.

Your choices & rights

  • Unsubscribe from any email using the link or reply instructions in it.
  • Stop SMS by replying STOP; get help by replying HELP.
  • Request access to, correction of, or deletion of your information by emailing [email protected].
  • Depending on where you live (for example under the GDPR or CCPA/CPRA), you may have additional rights; we honor them on request.

Children

baanjai is a workplace product and isn’t directed to children. We don’t knowingly collect information from anyone under 16.

Changes

We may update this policy as the product evolves. We’ll revise the “last updated” date above and, for material changes, give notice where appropriate.

Contact

baanjai[email protected]
United States