Effective Date: June 15, 2026 · Banyon Data Systems, Inc.
This Privacy Policy describes how Banyon Data Systems, Inc. collects, uses, and shares information when you use BanyonPay. Please read it carefully. By using BanyonPay, you agree to the practices described in this policy.
Banyon Data Systems, Inc. (“Banyon,” “we,” “us,” or “our”) is a Minnesota corporation that operates BanyonPay, a secure online payment platform for municipal utility bills and vendor invoices. Our principal place of business is 350 W Burnsville Pkwy, Burnsville, MN 55337.
For privacy-related inquiries, contact us at support@banyon.com.
This policy applies to all users of BanyonPay, including:
When you make a payment, your payment card details are entered directly into a secure form hosted or tokenized by CardConnect (a Fiserv company). Banyon never receives, stores, or processes your full card number, CVV, or expiration date. What Banyon does retain is the payment record: transaction amount, date, confirmation reference number (retRef), account number, and the last four digits of the card as returned by CardConnect.
BanyonPay uses only functional cookies and localStorage — no advertising, tracking, or analytics cookies. We do not use Google Analytics, Facebook Pixel, or similar third-party tracking tools.
| Name | Purpose | Type | Expires |
|---|---|---|---|
| Auth session cookie | Maintains your login session | HttpOnly cookie | Session / sign-out |
| EntityId, EntityName, TimeZone | Stores your selected municipality context | HttpOnly cookie | Session |
| banyonpay-theme | Remembers light/dark mode preference | localStorage (client-only) | Until cleared |
We use the information we collect to:
We do not sell, rent, or trade your personal information. We share information only as described below:
Payment records (account number, amount paid, transaction date, and confirmation number) are transmitted to the participating city or entity whose bill you are paying. This is the core function of the service. The entity’s use of that data is governed by the entity’s own privacy practices and applicable public-records law.
Payment card data flows directly from your browser to CardConnect for processing. CardConnect is a PCI DSS–certified payment processor and handles card data under its own privacy and security policies. Banyon receives only the tokenized transaction result.
If you opt in to email notifications or if you initiate a password-reset request, your email address is passed to Mailgun solely to deliver that specific message. Mailgun does not use your email for marketing.
We may disclose your information if required by law, court order, or valid government request, or where we believe disclosure is necessary to: (a) protect Banyon’s legal rights; (b) prevent fraud or a security threat; or (c) protect the safety of any person.
In the event of a merger, acquisition, asset sale, or reorganization, your information may be transferred as a business asset. We will notify affected users via email or a notice on the Service prior to any transfer and a change in privacy practices.
We implement technical and organizational measures designed to protect your information:
No security system is impenetrable. While we work hard to protect your information, we cannot guarantee absolute security. In the event of a data breach that is likely to result in a risk to your rights, we will notify affected users as required by applicable law.
We retain your information for as long as necessary to provide the Service and comply with legal obligations:
You may view and update your account information (name, email, linked accounts) in the Settings page of BanyonPay. For information you cannot update yourself, contact support@banyon.com.
To request deletion of your account and personal information, contact support@banyon.com. Payment records may be retained as required by law (see Section 7).
You can unsubscribe from bill notifications at any time via the Settings page under “Email Notifications” or by clicking the unsubscribe link in any notification email. Transactional emails related to your account actions (e.g., password reset) cannot be opted out of while your account is active.
BanyonPay does not respond to browser-level “Do Not Track” signals because we do not engage in cross-site behavioral tracking.
If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with the following rights regarding personal information Banyon holds about you:
To exercise these rights, submit a verifiable request to support@banyon.com from the email address associated with your account. We will respond within 45 days of receipt, as required by law.
BanyonPay is not directed to children under the age of 13, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us at support@banyon.com and we will promptly delete such information. Users between 13 and 17 years of age should use the Service only with the consent and supervision of a parent or legal guardian.
We may update this Privacy Policy from time to time. If we make material changes, we will notify you at least 30 days before the effective date by email (if you have an account) or by posting a prominent notice on the Service. The effective date at the top of this page will reflect the date of the most recent revision.
Your continued use of BanyonPay after the effective date of any change constitutes your acceptance of the updated policy.
For questions, concerns, or requests relating to this Privacy Policy or the handling of your personal information, please contact us:
Banyon Data Systems, Inc.Last updated: June 15, 2026