Privacy Policy

What we collect

• Account information – your name and email address, either received from Google when you sign in with Google OAuth, or entered by us when your team is set up.
• Project data – the projects, tickets, ideas, and bug reports attached to your account, plus anything you write into them.
• Billing information – your plan, subscription status, and invoice history. Card details are entered directly with Stripe; we never see or store full card numbers.
• Usage data – device, browser, IP address, pages viewed, and actions taken in the dashboard.
• Cookies – a session cookie to keep you signed in, plus the analytics cookies described below.

Why we collect it

• Operate the dashboard and show you your projects and tickets
• Authenticate you and keep your account secure
• Bill your subscription and process plan changes
• Communicate with you about your projects, sprints, and account
• Diagnose bugs and improve the product
• Meet legal, tax, and accounting obligations

We do not sell your personal information, and we do not use it to train AI models.

Who we share it with

We share information with the service providers that run our business. Each one processes it only to provide their service to us:

• Supabase – authentication and database hosting
• Google – OAuth sign-in
• Linear – project and ticket management
• Stripe – payments and subscription billing
• Slack – internal notifications, including bug reports you submit
• SendGrid – transactional email
• Mixpanel and Vercel Analytics – product analytics
• Vercel – application hosting

We may also disclose information if the law requires it, or where necessary to protect our rights, our clients, or anyone’s safety.

Cookies and analytics

The session cookie set at sign-in is required — blocking it means you cannot stay signed in. Mixpanel and Vercel Analytics tell us which parts of the dashboard get used so we can improve them. We do not run advertising cookies or cross-site ad tracking.

Where your data lives

Our application and database are hosted on infrastructure located in the United States. If you access the service from outside the US, your information is transferred to and processed there.

Retention

We keep your information for as long as your account is active. After you cancel, we retain billing and account records for as long as tax and accounting rules require, and delete or anonymize the rest on request. Your code and repositories are yours and live in your own accounts — cancelling does not touch them.

Your rights

Depending on where you live, you may have the right to:

• Access the personal information we hold about you
• Correct or delete it
• Object to or restrict how we process it
• Receive a portable copy
• Withdraw consent where processing relies on it

Email hello@bytamins.com to exercise any of these. We respond within 30 days.

Security

Data is encrypted in transit, database access is restricted by row-level security, and access to production data is limited to the people who need it. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

Children's privacy

Our services are not directed to anyone under 18, and we do not knowingly collect personal information from children.

Changes to this policy

We may update this policy from time to time. Updates are posted here with a revised date, and we email account holders about material changes.

Contact

Questions about this policy? Email hello@bytamins.com, or write to Bytamins, Inc., Brooklyn, NY.