Informativa sulla privacy

Byte Operations Technologies provides business software and services, including customer relationship management, operations, website development, marketing and optional AI features. Our business contact location is Milan, Italy. For privacy questions and requests, contact info@byteoperationstechnologies.com. This policy applies to our public website, account registration, quotation requests and customer workspaces.

Quando un cliente carica dati personali su propri clienti, dipendenti o contatti, il cliente determina le finalità di tale trattamento; lo trattiamo per fornire il servizio concordato e seguire le istruzioni del cliente applicabili. Contattare l'organizzazione del lavoro in primo luogo per le richieste relative ai controlli dei record.

Le informazioni relative all'account includono il nome, l'indirizzo e-mail, l'identificativo dell'account, il metodo di accesso e lo stato di verifica. L'autenticazione via e-mail/password viene gestita dal nostro servizio di autenticazione; il nostro personale non ha bisogno della password e non vi chiederà di inviarla via e-mail.

Le richieste di preventivo e di consultazione includono il nome dell'azienda, l'industria, il paese, la dimensione del team, il sito web, i servizi richiesti, le preferenze di bilancio e di valuta, i recapiti di contatto e qualsiasi esigenza che Lei presenti. Le informazioni dello spazio di lavoro possono includere i membri del team, le autorizzazioni, i registri di CRM, gli aggiornamenti di progetto, i file caricati, i messaggi di supporto e i contenuti che Lei sceglie di elaborazione.

Se scegli Google, Google ti autentica e fornisce informazioni di identità di base: un identificatore di account Google, un indirizzo e-mail e informazioni di verifica, e dettagli di profilo di base come il tuo nome e l'immagine del profilo dove disponibile. Il flusso di accesso utilizza l'identità, le autorizzazioni di posta elettronica e di profilo OpenID Connect (openid, email e profilo).

Utilizziamo queste informazioni per creare o localizzare il tuo account, stabilire una sessione firmata, identificare l'account associato alla quotazione e allo spazio di lavoro, visualizzare le informazioni relative al profilo e proteggere l'accesso all'account. Google sign-in da solo non concede l'accesso a spazio di lavoro pagato. L'accesso dipende dalla quotazione accettata, dal pagamento confermato, dall'attivazione e dal ruolo assegnato.

Questa funzione di accesso a Google non richiede l'accesso ai messaggi Gmail, ai file di Google Drive, alle voci del calendario, ai contatti o ai dati di YouTube, e non richiede il permesso di inviare la posta dal tuo account Google.

Basic Google identity and profile information is associated with your account in our authentication and application database. Session credentials allow the application to recognise a signed-in user. Google and our authentication provider process the credentials needed to complete the sign-in exchange. These are not customer payment credentials.

Account information is available only as needed to operate the service, administer authorised workspace access, provide support, investigate abuse or meet legal obligations. We do not sell Google account information or use it for advertising profiles. Google sign-in profile information is not used to train general-purpose AI models. Workspace content submitted to a requested AI feature is a separate processing activity described below.

We process information to register and verify accounts, respond to enquiries, prepare quotations, administer agreed services and payments, deliver project and support updates, manage team permissions, maintain security, investigate faults and meet applicable legal requirements.

Where the GDPR applies, the relevant legal basis is steps requested before entering a contract or performance of a contract; legitimate interests in maintaining secure, reliable services and managing business communications, balanced against your rights; compliance with legal obligations; or consent where required, including optional analytics or advertising technologies. Where consent is the basis, you can withdraw it without affecting processing that was lawful before withdrawal. Essential service notices are separate from promotional messages.

We use service providers for hosting, authentication, database/storage, email delivery and requested features. Our current authentication and database technology includes Supabase, Google supplies Google sign-in, and our company mailbox is hosted by Hostinger. When enabled and requested, AI generation may send your prompt and relevant selected workspace context to OpenAI. An external integration or payment provider receives the data necessary for the action you authorise or the transaction you choose.

Authorised members of your workspace can access information permitted by their roles. Providers process information needed for their function; their own policies also apply to their independent services. We may disclose information where required by law, to respond to valid legal requests, or to protect rights and prevent fraud or abuse. We do not sell personal information.

Connecting an external service is separate from signing in with Google. Review the permissions shown when authorising an integration. Only connect accounts you are entitled to administer, and avoid supplying unnecessary sensitive information in uploads, prompts or messages.

AI features process the information submitted for the requested task and any relevant context included by the feature. Review outputs before using or publishing them. Marketing tools require you to have a lawful basis for your recipients and to honour unsubscribe requests. We do not treat account registration or Google sign-in as consent to unrelated marketing.

Essential cookies or similar storage support authentication, sessions and security. We also store interface preferences such as cookie choices and preferred currency. Where configured, optional analytics or advertising scripts are controlled by the cookie preferences you select. You can use Cookie settings in the footer to review or change these choices, and clear browser storage through your browser settings. Blocking essential storage may prevent sign-in from working.

We use technical and organisational measures appropriate to the service, including encrypted transport, authenticated access, organisation-scoped authorisation and restricted administrative access. No service can promise absolute security. Protect your sign-in methods, review your workspace memberships and contact us if you suspect unauthorised access.

Our service providers may process information outside your country, including outside the European Economic Area. Where applicable data protection law requires it, international transfers must be supported by an adequacy decision or appropriate safeguards, such as standard contractual clauses. Contact us for information about the providers, processing locations and safeguards applicable to your service. We do not claim that all data is stored exclusively in Italy or the EU.

We keep account and workspace information for as long as needed to provide the requested service and administer your account. Enquiry and quotation records are kept while the enquiry or business relationship is active and as needed to deal with related questions or disputes. Payment, tax and accounting records may need to be retained to meet applicable legal obligations.

Security logs are kept for security, incident investigation and abuse prevention as necessary for those purposes. Deletion from active systems may precede removal from backups; retained backup copies follow the relevant backup retention cycle. Records subject to legal obligations or a valid legal hold may be retained for that purpose. Exact retention depends on the record type and service rather than a single period for every record.

Depending on applicable law, you may request access to your personal information, correction, deletion, restriction, portability, or object to processing based on legitimate interests. You may withdraw consent where processing relies on it. These rights are subject to applicable conditions and exceptions.

Send requests to info@byteoperationstechnologies.com from your account email, describing the request and any relevant workspace. We may need proportionate identity or authority verification; do not send a password. Where GDPR applies, we respond without undue delay and normally within one month. If a lawful extension is needed, we explain it within that period. You may complain to your local supervisory authority; in Italy this is the Garante per la protezione dei dati personali.

You can remove the connection to Byte Operations Technologies in your Google Account third-party connections settings at myaccount.google.com/connections. Removing Google access is separate from deleting information already stored in our application. If Google is your only sign-in method, arrange an alternative account recovery method before removing it.

To request deletion of your account, Google profile information held by us, or eligible workspace data, email info@byteoperationstechnologies.com with the subject Data deletion request. Specify whether you mean your user account or an entire workspace; deleting a shared workspace requires the appropriate authority. See our Data Deletion page for the process, retention exceptions and the distinction between disconnecting a provider and deleting data.

The service is intended for business use and is not directed at children. If you believe a child has provided personal information without appropriate authority, contact us so that we can investigate.

We update this policy when our services or data practices change and explain material changes where required. Where required, material changes will also be communicated through the service or an account notice. Contact info@byteoperationstechnologies.com with questions.

You can also send privacy, access or deletion requests to info@byteopestech.it. Both published addresses reach our business contact channels. Do not send passwords, card details or identity documents with an initial enquiry.

Where EU or UK data protection law applies, rights and transfer requirements depend on the processing and your circumstances. Where California privacy law applies to our business and your request, you may exercise the applicable rights to know, access, correct or delete information, opt out of sale or sharing, and receive non-discriminatory treatment. Contact us to identify the relevant records and applicable request process.

The website currently disables advertising tags. Global Privacy Control is treated as a request to keep optional analytics disabled on this browser. This browser control does not by itself delete information already held by a provider; contact us for a request concerning previously collected information.

For customer-controlled workspace information, contact your organisation first. The applicable processing agreement should identify data categories, purposes, retention and transfer arrangements. See our Data Processing Policy and Trust & Privacy page for the information to review before providing production data.

Data deletion · Cookie Policy · Terms of Service · Contact