Privacy Policy

Who we are and what this covers

Bayon IT, LLC ("Bayon," "we," "us") is a managed IT company based in Minneapolis, Minnesota, with an office in Fayetteville, Arkansas, serving businesses across the United States. This policy covers our websites at bayonit.com and audit.bayonit.com (together, the "Site"). Our client portal at portal.bayonit.com and the apps clients connect to it are covered in their own section below. This policy does not cover the rest of the data we handle for our managed IT clients, which is governed by our client agreements, or our internal staff systems.

Information you give us

• Contact form: your name, email address, company, the service you're interested in, and your message. The form also sends the page you started your visit on, the pages you viewed before writing to us, and the website that referred you (for example, a search engine), so we know which pages help people find us. If you've turned off analytics using the button below or your browser sends a Global Privacy Control signal, this part is left out. This includes attempts our spam filter blocks, which we review so real messages aren't lost.
• Scheduling: when you book a call, our scheduling provider (Calendly) collects your name, email address, and the meeting details.
• Free AI Automation Audit (audit.bayonit.com): your name, title, work email, company, website, company size, industry, your role, the software your team uses, and your answers about your business processes. We save what you enter on the first step as soon as you continue, even if you don't finish the audit.

Information collected automatically

When you visit, our systems and service providers automatically record technical information such as your IP address, browser and device type, pages viewed, the page that referred you, approximate location (city or region, based on IP address), and cookie or device identifiers. This comes from our hosting provider (Cloudflare) and the analytics tools described below.

Google Analytics, Microsoft Clarity, Leadfeeder and HubSpot

Google Analytics helps us measure how many people visit and which pages they use. Google sets cookies and processes this data as described in How Google uses information from sites or apps that use its services. You can also use Google's opt-out browser add-on.

Microsoft Clarity: we partner with Microsoft Clarity and Microsoft Advertising to capture how you use and interact with our Site through behavioral metrics, heatmaps, and session replay, so we can improve our services. Session replay records things like clicks, scrolling, and mouse movement; we mask the text you type. Site usage data is captured using first- and third-party cookies and other tracking technologies to determine the popularity of pages and online activity. Microsoft may also use this information for its own purposes, including advertising. For more, see the Microsoft Privacy Statement.

Leadfeeder (by Dealfront) uses your IP address and a cookie to tell us which company a visit likely came from, for example the business whose network you are browsing from, along with the pages viewed. We use this to understand which organizations are interested in our services and may follow up with that company. Leadfeeder processes this data as described in the Dealfront Privacy Policy.

HubSpot, our customer relationship management system, uses cookies and your IP address to record the pages you view and to identify the company a visit likely came from. If you have given us your contact details, for example by writing to us or clicking a link in an email from us, HubSpot can connect your visits to your contact record. HubSpot processes this data as described in the HubSpot Privacy Policy.

You can turn all of these off for this browser at any time. We also honor the Global Privacy Control signal: if your browser sends it, these tools never load.

Opt out of analytics

Our Free AI Automation Audit and AI processing

To generate your audit report, we send your answers to an AI model (Anthropic's Claude) through Anthropic's commercial service, which does not use this data to train its models. We may also look up the public website you enter to tailor the report. We email the report to you, and our team receives a copy along with AI-generated notes to prepare for any follow-up. The report is an automated estimate, not professional advice. Please don't enter confidential, patient, or financial-account information.

Client portal and connected apps

Bayon's managed IT clients can sign in to our client portal at portal.bayonit.com. Clients can also ask their administrator to connect business apps they already use, such as Dropbox or Zoom, to the portal. This section explains what we see and do when a client does that. It applies only to our clients and the people who work for them.

What we read from a connected app

• Account and plan details: the company's account name, how many seats are paid for, and how many are in use.
• People: the names and work email addresses of the account's members, whether each is active, invited, or suspended, and their role or license type.

We do not read the contents of your files, messages, meetings, or recordings. We do not ask the app for permission to open, copy, or download them, and we do not see file names or folder contents.

What we can change, and only when you ask

By default the connection is read-only. If a client asks us to onboard or offboard someone, their administrator can approve a second level of access that lets us add, deactivate, or remove people, and sign them out of devices. We make those changes only when the client's authorized contact asks us to, and we keep a record of each one.

How a connection is approved and stored

• An administrator at the client approves the connection on the app's own approval screen. The screen lists the exact permissions we are asking for.
• We store the connection key we receive encrypted, and separately from the portal's data. It is used only to refresh the information described above.
• Each client's data is kept apart from every other client's. A signed-in client sees only their own company.

Ending a connection

A client administrator can remove Bayon's access at any time from the app's own admin settings (for Dropbox, under Team apps; for Zoom, under the account's installed apps). Clients can also ask us to disconnect. When a connection ends we delete our stored connection key and the saved copy of that app's information we showed in the portal.

Who sees it

Information from a connected app is visible to Bayon staff who support that client and to people at the client who have been given portal access. We do not sell it, use it for advertising, or share it with anyone else, except the service providers listed below that host the portal.

How we use information

• To respond to your messages, schedule calls, and deliver the reports you request
• To follow up with you about our services
• To keep records of prospective and current clients in our CRM
• To understand how the Site is used and improve it
• To protect the Site and our forms against spam, fraud, and abuse

Who we share information with

We share information only with service providers that help us run the Site and our business, and only for those purposes:

• Cloudflare (website hosting, security, contact form storage, and the Turnstile spam check)
• Vercel (hosting for our audit tool, our client portal, and the internal system that routes form messages)
• HubSpot (customer relationship management and website analytics)
• Microsoft 365 (email)
• Neon (database for audit submissions and client portal data)
• Clerk (sign-in for the client portal)
• SMTP2GO (email delivery for audit reports)
• Anthropic (AI processing for audit reports)
• Calendly (scheduling)
• Google, Microsoft and Dealfront (Leadfeeder) (analytics and company identification, as described above)
• The apps clients connect (for example Dropbox or Zoom), only as the client's administrator approves

We may also disclose information if the law requires it, to protect the rights and safety of Bayon or others, or as part of a merger, acquisition, or sale of our business.

Selling, sharing, and advertising

We do not sell personal information for money, and we do not run targeted advertising campaigns with it. Because Microsoft may use Clarity data for its own advertising, some state laws could consider that "sharing." You can opt out using the button above or a Global Privacy Control signal.

Cookies

We use a small number of cookies and similar technologies: analytics cookies from Google Analytics, Microsoft Clarity, Leadfeeder and HubSpot, a security cookie from Cloudflare Turnstile that helps block spam on our contact form, and cookies set by Calendly when you use its scheduling tool. We also store your analytics choice in your browser. You can block or delete cookies in your browser settings; the Site will still work, although scheduling may not.

Email from us

If we send you marketing email, every message will include a way to unsubscribe, and we'll honor your request promptly.

How long we keep information

• Contact and CRM records: for as long as we have a business relationship, and up to three years after our last contact for prospects who don't become clients
• Audit submissions and reports: up to 24 months
• Blocked contact-form attempts: up to 90 days
• Client portal data from connected apps: refreshed regularly while the connection is active, and deleted when the connection ends
• Analytics data: up to 14 months in Google Analytics; Microsoft Clarity, Leadfeeder and HubSpot data according to each provider's standard retention

Your rights and choices

Wherever you live, you can ask us to tell you what personal information we have about you, correct it, delete it, or give you a copy, and you can opt out of marketing or analytics at any time. To make a request, send us a message, call 612-424-4195, or write to the address below. We'll verify your request and respond within 45 days. If we deny a request, you can appeal by replying to our response.

Sensitive information

Please don't send health, financial-account, government ID, or other sensitive information through our website forms. We don't sell sensitive information.

Children

The Site is for businesses and is not directed to children under 16. We don't knowingly collect their information, and we'll delete it if we learn we have.

Security

We use reasonable administrative, technical, and physical safeguards to protect the information we collect. No method of transmission or storage is completely secure, but as an IT security company we take this seriously, and we'll notify affected people of a breach as the law requires.

Visitors outside the United States

The Site is operated in the United States for U.S. businesses, and information is processed in the United States.

Changes to this policy

We'll post any changes here with a new "Last updated" date. If we make a material change, such as using information in a new way, we'll give prominent notice on the Site first.

Contact us

Bayon IT, LLC
1405 Lilac Drive North, Suite 152
Minneapolis, MN 55422
612-424-4195 · Send us a message