Privacy Policy

We collect information you provide when creating an account or workspace, including names, business contact details, team membership, CRM records, uploaded files, campaign content, configuration choices, support requests, and billing references. We also process security and operational logs such as IP address, browser metadata, request identifiers, authentication events, and audit history.

When you connect a social, email, Google, or other third-party account, authorization occurs through that provider's official consent flow. Byte Operations Technologies does not ask for or store the password for the connected provider account. We store only the access information and metadata needed to provide the connection, encrypted server-side where applicable.

Customer-facing AI generation is routed through OpenAI from our server. Prompts and relevant workspace context may be sent to OpenAI only as needed to perform the requested generation. We do not expose our OpenAI API key to the browser. Customers should avoid submitting unnecessary special-category or highly sensitive personal data in prompts.

We use information to operate the service, authenticate users, isolate workspaces, provide CRM and automation features, generate requested AI content, connect authorized providers, schedule approved actions, prevent abuse, troubleshoot errors, provide support, meet contractual obligations, and improve reliability and security.

We may use hosting, database, authentication, AI, email, social-network, monitoring, and payment providers to deliver the service. Each provider receives only the information reasonably required for its function and remains subject to its own terms and privacy practices.

Customer records are scoped to their organization. We use access controls, row-level database policies, server-side authorization, encrypted integration tokens, secure cookies, audit logs, and transport encryption. No internet service can guarantee absolute security, so customers should use strong passwords, multi-factor authentication where available, and least-privilege team access.

We retain account and business data while needed to provide the service, comply with law, resolve disputes, and maintain security records. Connected-provider tokens are deleted or disabled when the integration is disconnected. You can request deletion of eligible account data through our data-deletion process.

Depending on applicable law, you may have rights to access, correct, export, object to processing of, restrict, or delete personal information. Workspace owners are responsible for handling requests relating to personal data they upload about their own customers, employees, or contacts.

Essential storage is used for authentication, security, preferences, and service operation. Optional analytics or advertising technologies are used only when enabled and, where required, after consent.

The business service is not directed to children and should not be used to create accounts for children unless a lawful business use and appropriate authorization exists.

Our providers may process data in countries other than your own. Where required, we use contractual and technical safeguards appropriate to the service and applicable law.

We may update this policy as the service or legal requirements change. Material changes will be reflected by an updated effective date. Contact info@byteoperationstechnologies.com for privacy or data-rights requests.