Privacy Policy

Overview

Banana Analytics PBC (“Banana,” “we,” “us”) operates banana-analytics.com and the Community & Environmental Health Intelligence platform. This policy describes how we collect, use, and protect your information when you use our services.

Information we collect

Account information: When you create an account, we collect your name, email address, and authentication credentials (managed by our authentication provider, Clerk). If you sign in via Google, we receive your name, email, and profile photo from Google. We do not receive your Google password.

Billing information: If you subscribe to a paid plan, payment processing is handled by Stripe. We do not store your credit card number. Stripe provides us with your email, subscription status, and billing history.

Usage data: We collect anonymized usage analytics (pages visited, features used, report generation events) through PostHog to improve the product. We do not sell this data or share it with advertisers.

Public health data: The platform displays publicly available county-level health, environmental, and demographic data from federal agencies (EPA, CDC, CMS, Census Bureau, etc.). This is public data. We do not collect personal health information from users.

How we use your information

• To provide and maintain the platform and your account
• To process subscriptions and billing
• To send transactional emails (account confirmation, billing receipts)
• To improve the product based on aggregated usage patterns
• To respond to support requests and inquiries

We do not sell your personal information. We do not use your data for advertising. We do not share your information with third parties except as described below.

Third-party services

We use the following third-party services to operate the platform:

• Clerk: authentication and user management
• Stripe: payment processing
• Vercel: hosting and deployment
• PostHog: product analytics (anonymized)
• Google Analytics: website traffic analytics
• DigitalOcean: database hosting
• Resend: transactional email

Each service has its own privacy policy. We only share the minimum information necessary for each service to function.

Data retention

We retain your account information for as long as your account is active. If you delete your account, we remove your personal data within 30 days. Anonymized usage data may be retained indefinitely for product improvement purposes.

Cookies

We use essential cookies for authentication (session management) and analytics cookies for product improvement. We do not use advertising or tracking cookies. You can disable non-essential cookies in your browser settings.

Your rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your account and personal data
• Export your data in a portable format
• Opt out of non-essential analytics

To exercise any of these rights, contact us at privacy@banana-analytics.com.

Security

We use industry-standard security measures including encrypted connections (TLS), secure authentication, and access controls. Database connections use SSL. We do not store passwords; authentication is handled by Clerk. Payment data is handled by Stripe, which is PCI DSS Level 1 certified.

Children's privacy

Our services are not directed at children under 13. We do not knowingly collect personal information from children.

Changes to this policy

We may update this policy from time to time. We will notify registered users of material changes via email. The “last updated” date at the top of this page reflects the most recent revision.

Contact

Banana Analytics PBC
privacy@banana-analytics.com
banana-analytics.com/contact