Política de privacidad

Byte Operations Technologies provides business software and services, including customer relationship management, operations, website development, marketing and optional AI features. Our business contact location is Milan, Italy. For privacy questions and requests, contact info@byteoperationstechnologies.com. This policy applies to our public website, account registration, quotation requests and customer workspaces.

Determinamos cómo se utiliza la cuenta, la consulta, la referencia de facturación y la información de seguridad para operar nuestro negocio. Cuando un cliente carga datos personales sobre sus propios clientes, empleados o contactos, ese cliente determina los propósitos de ese procesamiento; lo procesamos para proporcionar el servicio acordado y seguir las instrucciones de los clientes aplicables. Contacte con la organización del espacio de trabajo pertinente primero para solicitudes relativas a registros que controla.

La información de la cuenta incluye su nombre, dirección de correo electrónico, identificador de cuenta, método de registro y estado de verificación. La autenticación de correo electrónico/password es manejada por nuestro servicio de autenticación; nuestro personal no necesita su contraseña y no le pedirá que la envíe por correo electrónico.

Las solicitudes de cotización y consulta incluyen nombre de empresa, industria, país, tamaño de equipo, sitio web, servicios solicitados, preferencias presupuestarias y monetarias, detalles de contacto y cualquier requisito que presente. La información del espacio de trabajo puede incluir miembros de equipo, permisos, registros de CRM, actualizaciones de proyectos, archivos cargados, mensajes de soporte y contenido que elija procesar. La administración de pagos incluye cantidades de cotización, moneda, estado, referencias de transacción y evidencia suministrada para confirmar el pago.

El registro de Google es opcional. En cambio, puede registrarse con una dirección de correo electrónico y contraseña. Cuando usted elige Google, Google le autentica y suministra información básica de identidad: un identificador de cuenta de Google, dirección de correo electrónico e información de verificación, y detalles de perfil básicos como su nombre y imagen de perfil donde esté disponible. El flujo de registro utiliza la identidad OpenID Connect, el correo electrónico y los permisos de perfil (openid, email y perfil).

Utilizamos esta información para crear o localizar su cuenta, establecer una sesión firmada, identificar la cuenta asociada con su presupuesto y espacio de trabajo, mostrar información relevante del perfil y proteger el acceso a la cuenta. Google sign-in por sí solo no otorga acceso al espacio de trabajo pagado. El acceso depende de la cita aceptada, pago confirmado, activación y su papel asignado.

Esta función de inicio de sesión de Google no solicita acceso a mensajes de Gmail, archivos de Google Drive, entradas de Calendario, contactos o datos de YouTube, y no solicita permiso para enviar correo de su cuenta de Google. No recibimos su contraseña de Google. Cualquier integración independiente que requiera datos adicionales debe utilizar un flujo de autorización separado que explica ese acceso.

Basic Google identity and profile information is associated with your account in our authentication and application database. Session credentials allow the application to recognise a signed-in user. Google and our authentication provider process the credentials needed to complete the sign-in exchange. These are not customer payment credentials.

Account information is available only as needed to operate the service, administer authorised workspace access, provide support, investigate abuse or meet legal obligations. We do not sell Google account information or use it for advertising profiles. Google sign-in profile information is not used to train general-purpose AI models. Workspace content submitted to a requested AI feature is a separate processing activity described below.

We process information to register and verify accounts, respond to enquiries, prepare quotations, administer agreed services and payments, deliver project and support updates, manage team permissions, maintain security, investigate faults and meet applicable legal requirements.

Where the GDPR applies, the relevant legal basis is steps requested before entering a contract or performance of a contract; legitimate interests in maintaining secure, reliable services and managing business communications, balanced against your rights; compliance with legal obligations; or consent where required, including optional analytics or advertising technologies. Where consent is the basis, you can withdraw it without affecting processing that was lawful before withdrawal. Essential service notices are separate from promotional messages.

We use service providers for hosting, authentication, database/storage, email delivery and requested features. Our current authentication and database technology includes Supabase, Google supplies Google sign-in, and our company mailbox is hosted by Hostinger. When enabled and requested, AI generation may send your prompt and relevant selected workspace context to OpenAI. An external integration or payment provider receives the data necessary for the action you authorise or the transaction you choose.

Authorised members of your workspace can access information permitted by their roles. Providers process information needed for their function; their own policies also apply to their independent services. We may disclose information where required by law, to respond to valid legal requests, or to protect rights and prevent fraud or abuse. We do not sell personal information.

Connecting an external service is separate from signing in with Google. Review the permissions shown when authorising an integration. Only connect accounts you are entitled to administer, and avoid supplying unnecessary sensitive information in uploads, prompts or messages.

AI features process the information submitted for the requested task and any relevant context included by the feature. Review outputs before using or publishing them. Marketing tools require you to have a lawful basis for your recipients and to honour unsubscribe requests. We do not treat account registration or Google sign-in as consent to unrelated marketing.

Essential cookies or similar storage support authentication, sessions and security. We also store interface preferences such as cookie choices and preferred currency. Where configured, optional analytics or advertising scripts are controlled by the cookie preferences you select. You can use Cookie settings in the footer to review or change these choices, and clear browser storage through your browser settings. Blocking essential storage may prevent sign-in from working.

We use technical and organisational measures appropriate to the service, including encrypted transport, authenticated access, organisation-scoped authorisation and restricted administrative access. No service can promise absolute security. Protect your sign-in methods, review your workspace memberships and contact us if you suspect unauthorised access.

Our service providers may process information outside your country, including outside the European Economic Area. Where applicable data protection law requires it, international transfers must be supported by an adequacy decision or appropriate safeguards, such as standard contractual clauses. Contact us for information about the providers, processing locations and safeguards applicable to your service. We do not claim that all data is stored exclusively in Italy or the EU.

We keep account and workspace information for as long as needed to provide the requested service and administer your account. Enquiry and quotation records are kept while the enquiry or business relationship is active and as needed to deal with related questions or disputes. Payment, tax and accounting records may need to be retained to meet applicable legal obligations.

Security logs are kept for security, incident investigation and abuse prevention as necessary for those purposes. Deletion from active systems may precede removal from backups; retained backup copies follow the relevant backup retention cycle. Records subject to legal obligations or a valid legal hold may be retained for that purpose. Exact retention depends on the record type and service rather than a single period for every record.

Depending on applicable law, you may request access to your personal information, correction, deletion, restriction, portability, or object to processing based on legitimate interests. You may withdraw consent where processing relies on it. These rights are subject to applicable conditions and exceptions.

Send requests to info@byteoperationstechnologies.com from your account email, describing the request and any relevant workspace. We may need proportionate identity or authority verification; do not send a password. Where GDPR applies, we respond without undue delay and normally within one month. If a lawful extension is needed, we explain it within that period. You may complain to your local supervisory authority; in Italy this is the Garante per la protezione dei dati personali.

You can remove the connection to Byte Operations Technologies in your Google Account third-party connections settings at myaccount.google.com/connections. Removing Google access is separate from deleting information already stored in our application. If Google is your only sign-in method, arrange an alternative account recovery method before removing it.

To request deletion of your account, Google profile information held by us, or eligible workspace data, email info@byteoperationstechnologies.com with the subject Data deletion request. Specify whether you mean your user account or an entire workspace; deleting a shared workspace requires the appropriate authority. See our Data Deletion page for the process, retention exceptions and the distinction between disconnecting a provider and deleting data.

The service is intended for business use and is not directed at children. If you believe a child has provided personal information without appropriate authority, contact us so that we can investigate.

We update this policy when our services or data practices change and explain material changes where required. Where required, material changes will also be communicated through the service or an account notice. Contact info@byteoperationstechnologies.com with questions.

You can also send privacy, access or deletion requests to info@byteopestech.it. Both published addresses reach our business contact channels. Do not send passwords, card details or identity documents with an initial enquiry.

Where EU or UK data protection law applies, rights and transfer requirements depend on the processing and your circumstances. Where California privacy law applies to our business and your request, you may exercise the applicable rights to know, access, correct or delete information, opt out of sale or sharing, and receive non-discriminatory treatment. Contact us to identify the relevant records and applicable request process.

The website currently disables advertising tags. Global Privacy Control is treated as a request to keep optional analytics disabled on this browser. This browser control does not by itself delete information already held by a provider; contact us for a request concerning previously collected information.

For customer-controlled workspace information, contact your organisation first. The applicable processing agreement should identify data categories, purposes, retention and transfer arrangements. See our Data Processing Policy and Trust & Privacy page for the information to review before providing production data.

Data deletion · Cookie Policy · Terms of Service · Contact