Privacy policy

ByteBoard is a product of BitByte Labs LLC.

BitByte Labs LLC 2465 Arnold Mill Rd NW Lawrenceville, GA 30044, USA

You can also use the contact form.

This policy applies to:

• Our marketing website, including the contact form
• The ByteBoard application
• Emails we send about accounts, security, and billing

This policy does not cover the websites, apps, or privacy practices of the teams that use ByteBoard, or third-party services such as Stripe that have their own privacy policies.

We deal with two groups of people:

• Website visitors: people who visit the marketing site or contact us through it.
• Account users: the people who sign up for ByteBoard, and the owners, admins, members, and viewers who use a workspace.

A workspace may also contain information about other people, such as a name in an issue or a comment. The team that entered that information is responsible for it, and we process it to provide ByteBoard. See "Workspaces and the information in them" below.

Account and workspace information

When someone signs up for ByteBoard or is added to a workspace, we collect:

• Name and email address
• Workspace or organization name
• Login credentials
• Role in the workspace, such as owner, admin, member, or viewer

Billing information

Payments for paid plans are handled by Stripe. Stripe collects payment card details directly, and we do not store them in ByteBoard. Stripe makes limited billing details available to us, such as name, email address, plan, payment status, and the brand and last four digits of a card, so we can manage the subscription.

Information created in ByteBoard

We store the records a workspace creates while using ByteBoard, such as projects, issues, comments, sprints, roadmap items, and releases, as needed to operate the service.

Contact form

When you use the contact form, we collect your name, work email, company, team size, and any message you choose to include. We use this information to respond to your request.

Emails you send us

If you email us, we receive your email address and whatever you include in your message.

Technical information

When you use the website or the app, our servers and service providers record limited technical information needed to deliver and protect the service. This includes IP address, browser and device type, the pages or features requested, the date and time of the request, and error details. We do not use this information for advertising.

We use personal information to:

• Provide and operate ByteBoard, including accounts, boards, backlogs, sprints, roadmaps, releases, and data import
• Send service emails, including account, security, and billing notices
• Process payments and manage subscriptions through Stripe
• Respond to inquiries and provide support
• Protect ByteBoard and its users, including detecting fraud, abuse, and security incidents, and enforcing our Terms
• Maintain and improve ByteBoard, including troubleshooting and fixing bugs
• Comply with legal obligations

We use information a workspace enters about other people only to provide ByteBoard to that workspace, including support, security, and legal compliance. We do not use it to market our own products to those people.

We do not sell, rent, or trade personal information. We do not share personal information with advertising networks or for targeted advertising.

We share personal information only in these situations:

With service providers who help us run ByteBoard. These providers may use personal information only as needed to provide their services to us, except where a provider processes information under its own privacy policy, as noted below.

Stripe processes payment information under its own privacy policy.

Within a workspace. Account users in the same workspace can see information according to their role.

At your direction. For example, when a workspace exports or imports its data.

For legal reasons. When we believe in good faith that disclosure is required by law, subpoena, or other legal process, or is necessary to protect the rights, property, or safety of BitByte Labs, our customers, or others.

In a business transfer. If BitByte Labs is involved in a merger, acquisition, financing, or sale of assets, personal information may be transferred as part of that transaction. It will remain subject to the commitments in this policy.

For information a team enters into ByteBoard, that team decides what to collect and how to use it. The team is responsible for that information. BitByte Labs processes it on the team's behalf to provide the service.

Teams that use ByteBoard are responsible for:

• Having a lawful basis to put other people's information into ByteBoard
• Keeping the information they enter accurate
• Responding to privacy requests about that information

If a request is about information inside a workspace, contact that workspace first. If you contact us instead, we will refer the request to the workspace and help where we can. We may need the workspace's authorization before acting on a request about its data.

Sensitive information. ByteBoard is an issue tracker. It is not designed to store sensitive information such as health or medical details, government identification numbers, or financial account numbers. Do not enter this kind of information into issues, comments, or other fields.

Healthcare providers. ByteBoard is not an electronic medical records system and is not designed to meet the requirements of HIPAA. See our Terms for more detail.

On the marketing website, we do not use analytics, advertising, or tracking cookies. Our security provider, Cloudflare, may set a strictly necessary cookie to help block malicious traffic.

In the ByteBoard app, we use essential cookies and similar browser storage needed to sign you in, keep you signed in, and keep the app working.

Stripe checkout pages may set their own cookies, which are governed by Stripe's privacy policy.

If we start using analytics or marketing cookies, we will update this policy before we do.

Because we do not track visitors across third-party websites or sell or share personal information for advertising, there is nothing for us to change in response to "Do Not Track" or Global Privacy Control signals.

We use reasonable technical and organizational measures to protect personal information, including:

• Encryption in transit using HTTPS
• Passwords stored as one-way hashes, never in plain text
• Role-based access, so each account user sees only what their role allows

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Workspaces can help by protecting login credentials, giving people only the roles they need, and removing access for people who leave.

If we learn of a security incident that affects personal information, we will notify affected customers as required by applicable law.

We keep personal information for as long as needed to provide ByteBoard and for legitimate business and legal needs.

• Account and workspace information is kept while the account is open.
• Workspace content is kept while the workspace is open.
• Billing records are kept as needed for tax, accounting, and legal purposes.
• Contact form submissions and emails are kept as long as reasonably needed to respond and keep a record of the correspondence.

Closing a workspace. Canceling a paid subscription does not by itself delete the workspace. An owner can schedule the workspace for deletion. We then delete the workspace and its related records after a grace period of 30 days, unless a different period applies. That includes account users who belong only to that workspace.

Backups and logs. Deleted information may remain in backups and logs for a limited time before it is removed.

Account users can view and update much of their information in account settings. You can also use the contact form to request access to, correction of, or deletion of your personal information.

Service emails. We send account, security, and billing notices that are part of the service.

US state privacy rights. Depending on where you live, you may have rights under state privacy laws, such as the right to know what personal information we hold about you, to access it, to correct it, to delete it, to receive a copy of it, and not to be treated differently for exercising these rights. We will honor requests as required by applicable law.

To make a request, use the contact form. We may need to verify your identity before responding. We will respond within the time required by applicable law. If we decline your request, you can reply to ask us to reconsider.

If you are in the European Economic Area or the United Kingdom and EU or UK data protection law applies to our processing of your information, you also have the right to object to or restrict certain processing and to lodge a complaint with your local data protection authority. We process account information to perform our contract with you and for our legitimate interests in operating and securing ByteBoard.

ByteBoard is a business tool and is not directed to children. We do not knowingly collect personal information directly from children under 13, or under 16 where local law sets a higher age.

If you believe a child has given us personal information directly, use the contact form and we will delete it.

ByteBoard is operated from the United States. Some of our service providers, including those that process payments, deliver email, and provide network security, may process information in the United States and other countries. If you use ByteBoard from outside the United States, your information will be transferred to and processed in the United States and other countries where data protection laws may differ from those in your country.

We may update this policy from time to time. When we do, we will change the "Last updated" date at the top. If we make material changes, we will notify account users by email or in the app before the changes take effect.

For privacy questions or requests, contact:

BitByte Labs LLC 2465 Arnold Mill Rd NW Lawrenceville, GA 30044, USA

You can also use the contact form.