Legal documents and subprocessors

# Terms of Service

**Status:** Ratified by BridgeTrust Partners LLC on 2026-09-21.  
**Effective:** 2026-09-21  
**Last updated:** 2026-09-21

Baylani is owned and operated by BridgeTrust Partners LLC. These Terms govern the contract between BridgeTrust Partners LLC, a District of Columbia limited liability company with offices at 1011 18th Street NE, Unit 7, Washington, DC 20002 (“BridgeTrust,” “Baylani,” “we”), and customers using the Baylani service. By creating an account or using the service, you agree to these Terms.

## 1. Service

Baylani is a grants and contracts management platform (decision support) provided by BridgeTrust Partners LLC. Baylani does **not** submit proposals to sponsor portals on your behalf and does not replace your institutional compliance obligations. AI outputs are advisory; humans remain accountable.

## 2. Accounts & access

You must provide accurate account information, safeguard credentials, and enable MFA where available for privileged users. You are responsible for activity under your workspace. Roles (owner, admin, member, viewer) control access within a tenant.

## 3. Acceptable use

No unlawful content; no attempts to bypass security, scrape other tenants, or store third-party portal passwords in Baylani. No reverse engineering beyond applicable law.

## 4. Customer data

You retain ownership of customer content. You grant BridgeTrust Partners LLC a limited license to host and process content solely to provide the service. Subprocessors are listed on `/legal`.

## 5. Billing

Paid plans are billed via Stripe according to the selected catalog. Trials convert per product messaging. Taxes may apply.

## 6. Confidentiality & security

Each party protects the other’s confidential information. Baylani maintains administrative, technical, and organizational measures described in our security policy suite.

## 7. Disclaimers

Service is provided “as is” to the extent permitted by law. Baylani does not warrant uninterrupted operation or that AI outputs are error-free or complete for compliance decisions.

## 8. Limitation of liability

To the maximum extent permitted by law, neither party is liable to the other for indirect, incidental, special, consequential, or punitive damages, or for lost profits, revenue, or data, arising out of or relating to these Terms, however caused and under any theory of liability, even if advised of the possibility of such damages. Each party’s total aggregate liability arising out of or relating to these Terms is limited to the fees paid or payable by the customer to BridgeTrust Partners LLC for the service in the twelve (12) months preceding the event giving rise to the claim. These limitations do not apply to a party’s willful misconduct or fraud, a party’s breach of its confidentiality or data-protection obligations under Section 6, or any liability that cannot be limited under applicable law.

## 9. Term & termination

Either party may terminate per plan terms. Upon termination, retention and deletion follow the Data Retention & Disposal Policy.

## 10. Contact

BridgeTrust Partners LLC · 1011 18th Street NE, Unit 7, Washington, DC 20002 · `hello@baylani.com`

# Privacy Policy

**Status:** Ratified by BridgeTrust Partners LLC on 2026-09-21.  
**Effective:** 2026-09-21  
**Last updated:** 2026-09-21  
**Applies to:** https://baylani.com and the Baylani application

Baylani is owned and operated by BridgeTrust Partners LLC. This Privacy Policy describes how BridgeTrust Partners LLC (“BridgeTrust,” “Baylani,” “we,” “us”) collects, uses, stores, and shares information when you use Baylani.

## 1. Who we are

Baylani is a grants and contracts management platform owned and operated by BridgeTrust Partners LLC, a District of Columbia limited liability company, which is the entity responsible for the personal information described in this policy. Postal address: 1011 18th Street NE, Unit 7, Washington, DC 20002. Contact: `hello@baylani.com`. Security disclosures: `security@baylani.com`.

## 2. Data we collect

- **Account data:** name/email, authentication metadata, MFA enrollment status.
- **Workspace data:** organizations, personnel, opportunities, applications, budgets, documents, requirements, reviews, and related institutional records you upload or create.
- **Billing data:** plan, subscription status, and payment metadata processed by Stripe (we do not store full card numbers).
- **Usage & security logs:** approximate activity needed to operate, secure, and improve the service.
- **Support communications:** emails and messages you send us.

Baylani is designed for organizational / professional use. Baylani is **preparing to integrate Plaid** for consumer financial account linking where product flows require it; until Link is enabled in production, no Plaid API data is collected. When Plaid Link is surfaced, MFA will be required before Link is shown, and Plaid-derived data will be encrypted at rest per our security policy suite.

## 3. How we use data

Provide the service; authenticate users; bill subscriptions; send transactional email; improve product reliability; detect abuse; comply with law; and produce AI-assisted advisory outputs you request (human stewardship remains required — Baylani does not auto-submit to portals).

## 4. Legal bases / consent

Where required, we rely on contract performance, legitimate interests in securing and operating the service, and consent you provide at signup (checkbox acknowledging Terms and this Privacy Policy). You may withdraw consent by closing your account, subject to retention rules.

## 5. Sharing

We share data with subprocessors listed on `/legal` (e.g., Microsoft Azure, Stripe, Resend, Anthropic) under contractual obligations. We do not sell personal information.

## 6. Retention & deletion

See our Data Retention & Disposal Policy and Security & Data Policy: active data while the workspace is active; soft-deleted records retained ~30 days then eligible for purge; backups may retain data for the provider lifecycle. Owners may request export before deletion.

## 7. Security

TLS in transit in production; encryption at rest via hosting provider; tenant isolation via RLS; optional TOTP MFA; private document storage. No method is 100% secure.

## 8. International transfers

Data may be processed in the United States or other regions where our providers operate. Appropriate transfer mechanisms are described in the Data Processing Agreement, available on request.

## 9. Your rights

Depending on jurisdiction, you may have rights to access, correct, delete, export, or object to certain processing. Contact `hello@baylani.com`. Workspace owners manage member access inside the product.

## 10. Children

Baylani is not directed to children under 16.

## 11. Changes

We will update this page and revise the “Last updated” date. Material changes for enterprise customers may also be communicated by email or in-app notice.

## 12. Contact

BridgeTrust Partners LLC · 1011 18th Street NE, Unit 7, Washington, DC 20002

`hello@baylani.com` · `security@baylani.com`