Your safety… our priority.

Banana Cards uses Supabase for database management and backend data handling. Supabase is built on PostgreSQL and supports security controls such as Row Level Security, which allows access rules to be applied directly at database level so users can only access data they are authorized to access.

Supabase encrypts customer data at rest using AES-256 and in transit using TLS. Where applicable, Banana Cards layers additional database-level access controls, authentication rules, role-based permissions, and secure backend processes to protect user data against unauthorized access.

Banana Cards uses Google Vertex AI to power selected AI features, including contact enrichment, message drafting, profile assistance, business summaries, smart suggestions, and workflow support.

Google's Vertex AI service terms state that Google will not use customer data to train or fine-tune AI/ML models without the customer's prior permission or instruction.

When Banana Cards uses Vertex AI for enterprise-grade AI processing, user data submitted for AI assistance is processed to provide the requested feature — and is not used by Google to train its foundation models unless explicitly permitted.

Banana Cards has a strict No Data Sale Policy. We do not sell user data, contact data, customer records, business profiles, uploaded documents, communication history, or AI-processed information to advertisers, data brokers, or third parties.

User data is used only to provide, secure, improve, and support the Banana Cards platform and related services, subject to our Terms of Service, Privacy Policy, and applicable laws.

Access to user data is limited to authorized systems, service providers, and personnel where necessary to operate, maintain, secure, or support the platform.

Banana Cards may apply different levels of access depending on the user account type, team permissions, admin settings, and operational requirements.

Users are responsible for maintaining the security of their own accounts, including login credentials, connected email accounts, uploaded contacts, team member access, and shared profile links.

Users are responsible for ensuring that any contact details, documents, business cards, files, or third-party information uploaded to Banana Cards are collected and processed lawfully.

Users should only upload or process personal data where they have consent, a legitimate business relationship, contractual basis, or another lawful basis under applicable privacy laws.

Banana Cards must not be used to store, process, or share illegally obtained data, scraped personal data, spam lists, purchased contact databases, or unauthorized private information.

While Banana Cards applies reasonable technical, organizational, and operational safeguards, no online platform can guarantee absolute security.

Users should avoid uploading unnecessary sensitive information and should keep account access limited to trusted team members.

Banana Cards may suspend, restrict, or remove access where activity appears suspicious, abusive, unlawful, or in breach of our policies.