Privacy Policy

Byte Operations Technologies provides business software and services, including customer relationship management, operations, website development, marketing and optional AI features. Our business contact location is Milan, Italy. For privacy questions and requests, contact info@byteoperationstechnologies.com. This policy applies to our public website, account registration, quotation requests and customer workspaces.

We determine how account, enquiry, billing-reference and security information is used to operate our business. When a customer uploads personal data about its own customers, employees or contacts, that customer determines the purposes of that processing; we process it to provide the agreed service and follow the applicable customer instructions. Contact the relevant workspace organisation first for requests concerning records it controls.

Account information includes your name, email address, account identifier, sign-in method and verification status. Email/password authentication is handled by our authentication service; our staff do not need your password and will not ask you to send it by email.

Quotation and consultation requests include company name, industry, country, team size, website, requested services, budget and currency preferences, contact details and any requirements you submit. Workspace information can include team memberships, permissions, CRM records, project updates, uploaded files, support messages and content you choose to process. Payment administration includes quotation amounts, currency, status, transaction references and evidence supplied to confirm payment. Do not submit passwords or full payment-card details in a quotation or support message.

Google sign-in is optional. You can instead register with an email address and password. When you choose Google, Google authenticates you and supplies basic identity information: a Google account identifier, email address and verification information, and basic profile details such as your name and profile picture where available. The sign-in flow uses the OpenID Connect identity, email and profile permissions (openid, email and profile).

We use this information to create or locate your account, establish a signed-in session, identify the account associated with your quotation and workspace, display relevant profile information and protect account access. Google sign-in alone does not grant paid workspace access. Access depends on the accepted quotation, confirmed payment, activation and your assigned role.

This Google sign-in feature does not request access to Gmail messages, Google Drive files, Calendar entries, contacts or YouTube data, and does not request permission to send mail from your Google account. We do not receive your Google password. Any separate integration that requires additional data must use a separate authorisation flow explaining that access.

Basic Google identity and profile information is associated with your account in our authentication and application database. Session credentials allow the application to recognise a signed-in user. Google and our authentication provider process the credentials needed to complete the sign-in exchange. These are not customer payment credentials.

Account information is available only as needed to operate the service, administer authorised workspace access, provide support, investigate abuse or meet legal obligations. We do not sell Google account information or use it for advertising profiles. Google sign-in profile information is not used to train general-purpose AI models. Workspace content submitted to a requested AI feature is a separate processing activity described below.

We process information to register and verify accounts, respond to enquiries, prepare quotations, administer agreed services and payments, deliver project and support updates, manage team permissions, maintain security, investigate faults and meet applicable legal requirements.

Where the GDPR applies, the relevant legal basis is steps requested before entering a contract or performance of a contract; legitimate interests in maintaining secure, reliable services and managing business communications, balanced against your rights; compliance with legal obligations; or consent where required, including optional analytics or advertising technologies. Where consent is the basis, you can withdraw it without affecting processing that was lawful before withdrawal. Essential service notices are separate from promotional messages.

We use service providers for hosting, authentication, database/storage, email delivery and requested features. Our current authentication and database technology includes Supabase, Google supplies Google sign-in, and our company mailbox is hosted by Hostinger. When enabled and requested, AI generation may send your prompt and relevant selected workspace context to OpenAI. An external integration or payment provider receives the data necessary for the action you authorise or the transaction you choose.

Authorised members of your workspace can access information permitted by their roles. Providers process information needed for their function; their own policies also apply to their independent services. We may disclose information where required by law, to respond to valid legal requests, or to protect rights and prevent fraud or abuse. We do not sell personal information.

Connecting an external service is separate from signing in with Google. Review the permissions shown when authorising an integration. Only connect accounts you are entitled to administer, and avoid supplying unnecessary sensitive information in uploads, prompts or messages.

AI features process the information submitted for the requested task and any relevant context included by the feature. Review outputs before using or publishing them. Marketing tools require you to have a lawful basis for your recipients and to honour unsubscribe requests. We do not treat account registration or Google sign-in as consent to unrelated marketing.

Essential cookies or similar storage support authentication, sessions and security. We also store interface preferences such as cookie choices and preferred currency. Where configured, optional analytics or advertising scripts are controlled by the cookie preferences you select. You can use Cookie settings in the footer to review or change these choices, and clear browser storage through your browser settings. Blocking essential storage may prevent sign-in from working.

We use technical and organisational measures appropriate to the service, including encrypted transport, authenticated access, organisation-scoped authorisation and restricted administrative access. No service can promise absolute security. Protect your sign-in methods, review your workspace memberships and contact us if you suspect unauthorised access.

Our service providers may process information outside your country, including outside the European Economic Area. Where applicable data protection law requires it, international transfers must be supported by an adequacy decision or appropriate safeguards, such as standard contractual clauses. Contact us for information about the providers, processing locations and safeguards applicable to your service. We do not claim that all data is stored exclusively in Italy or the EU.

We keep account and workspace information for as long as needed to provide the requested service and administer your account. Enquiry and quotation records are kept while the enquiry or business relationship is active and as needed to deal with related questions or disputes. Payment, tax and accounting records may need to be retained to meet applicable legal obligations.

Security logs are kept for security, incident investigation and abuse prevention as necessary for those purposes. Deletion from active systems may precede removal from backups; retained backup copies follow the relevant backup retention cycle. Records subject to legal obligations or a valid legal hold may be retained for that purpose. Exact retention depends on the record type and service rather than a single period for every record.

Depending on applicable law, you may request access to your personal information, correction, deletion, restriction, portability, or object to processing based on legitimate interests. You may withdraw consent where processing relies on it. These rights are subject to applicable conditions and exceptions.

Send requests to info@byteoperationstechnologies.com from your account email, describing the request and any relevant workspace. We may need proportionate identity or authority verification; do not send a password. Where GDPR applies, we respond without undue delay and normally within one month. If a lawful extension is needed, we explain it within that period. You may complain to your local supervisory authority; in Italy this is the Garante per la protezione dei dati personali.

You can remove the connection to Byte Operations Technologies in your Google Account third-party connections settings at myaccount.google.com/connections. Removing Google access is separate from deleting information already stored in our application. If Google is your only sign-in method, arrange an alternative account recovery method before removing it.

To request deletion of your account, Google profile information held by us, or eligible workspace data, email info@byteoperationstechnologies.com with the subject Data deletion request. Specify whether you mean your user account or an entire workspace; deleting a shared workspace requires the appropriate authority. See our Data Deletion page for the process, retention exceptions and the distinction between disconnecting a provider and deleting data.

The service is intended for business use and is not directed at children. If you believe a child has provided personal information without appropriate authority, contact us so that we can investigate.

We update this policy when our services or data practices change and explain material changes where required. Where required, material changes will also be communicated through the service or an account notice. Contact info@byteoperationstechnologies.com with questions.

You can also send privacy, access or deletion requests to info@byteopestech.it. Both published addresses reach our business contact channels. Do not send passwords, card details or identity documents with an initial enquiry.

Where EU or UK data protection law applies, rights and transfer requirements depend on the processing and your circumstances. Where California privacy law applies to our business and your request, you may exercise the applicable rights to know, access, correct or delete information, opt out of sale or sharing, and receive non-discriminatory treatment. Contact us to identify the relevant records and applicable request process.

The website currently disables advertising tags. Global Privacy Control is treated as a request to keep optional analytics disabled on this browser. This browser control does not by itself delete information already held by a provider; contact us for a request concerning previously collected information.

For customer-controlled workspace information, contact your organisation first. The applicable processing agreement should identify data categories, purposes, retention and transfer arrangements. See our Data Processing Policy and Trust & Privacy page for the information to review before providing production data.

Data deletion · Cookie Policy · Terms of Service · Contact