Privacy Policy

Effective date: 20 September 2026 · Last updated: 20 September 2026

This policy explains what personal information ByteMind collects, why it is collected, who it is shared with, and the choices you have. It covers the website at bytemind.work and the ByteMind application.

1. Who we are

ByteMind (“ByteMind”, “we”, “us” or “our”) is a sole proprietorship. ByteMind is the party responsible for the personal information described in this policy.

You can reach us about anything in this policy at contact@bytemind.work.

2. Scope of this policy

This policy applies to:

• the ByteMind website at bytemind.work, including its contact form; and
• the ByteMind application, including sign-in with Google.

It does not apply to personal information we process on behalf of a client during a consulting engagement. In those cases the client determines how the information is used, and the engagement contract and the client’s own privacy notice govern that processing.

3. Information we collect

3.1 Information you give us

When you submit the contact form on our website, we collect the name, email address, company name (optional) and message you enter. We use this only to read and respond to your enquiry.

If you email us directly, we receive whatever you choose to include in that email.

3.2 Information from your Google Account

If you choose to sign in to ByteMind with your Google Account, we receive a limited set of information from Google. This is described in detail in section 4. We do not receive your Google password, and we do not request access to your Gmail, Google Drive, Google Calendar or any other Google service.

3.3 Information collected automatically

Our website is hosted on Microsoft Azure Static Web Apps. Like effectively all web hosting, Azure records standard server and network logs, which may include your IP address, browser user-agent string, the pages requested and the time of the request. These logs are generated and retained by Microsoft as our hosting provider, and are used for delivering the site, diagnosing faults and protecting against abuse.

3.4 What we do not collect

To be explicit, on this website we do not use:

• analytics services of any kind, including Google Analytics;
• advertising networks, advertising cookies or remarketing pixels;
• social media tracking pixels or third-party session recording;
• any form of cross-site tracking or user profiling.

We also do not collect payment card details through this website, and we do not knowingly collect sensitive personal information such as government identifiers, precise geolocation, health data or biometric data.

4. Google user data and Limited Use

4.1 The scopes we request

The ByteMind application requests only the following non-sensitive OAuth scopes, and nothing else:

• openid — provides a unique identifier for your Google Account, so that we can recognize you as the same user when you return.
• .../auth/userinfo.email — provides your Google Account email address, used to identify your account, to contact you about the service, and to prevent duplicate accounts.
• .../auth/userinfo.profile — provides your basic profile information, namely your name and profile picture, used to display who is signed in.

These scopes give read-only access to basic account identity. They do not permit access to your email, files, contacts, calendar or any other content in your Google Account.

4.2 How we handle Google user data

Specifically, and in line with the Limited Use requirements:

• we use Google user data only to provide and improve the user-facing features of the ByteMind application that are visible to you;
• we do not transfer Google user data to others, except as necessary to provide and improve the service, to comply with applicable law, or as part of a merger, acquisition or sale of assets with notice to you;
• we do not use Google user data for serving advertisements of any kind, including retargeted, personalised or interest-based advertising;
• we do not sell Google user data;
• we do not allow humans to read Google user data, unless we have your explicit consent for specific messages, it is necessary for security purposes such as investigating abuse, it is required to comply with applicable law, or the data has been aggregated and anonymised.

4.3 Revoking access and deleting your data

You can revoke ByteMind’s access to your Google Account at any time from the Google Account permissions page. Revoking access stops any further data being received from Google.

To have the Google user data we already hold deleted, email contact@bytemind.work from the address associated with your account. We will delete it and confirm within 30 days, except where we are required by law to retain it.

5. How we use information

We use the personal information described above only for the following purposes:

• Responding to you. Reading and replying to enquiries you send us.
• Providing the application. Authenticating you, maintaining your session, and showing your identity within ByteMind.
• Operating and improving our services. Diagnosing faults, maintaining reliability and improving user-facing features.
• Security and abuse prevention. Detecting and blocking spam, fraudulent submissions and attempts to compromise the service.
• Legal compliance. Meeting our obligations under applicable law and responding to lawful requests.

We do not use your information to build advertising profiles, and we do not make automated decisions about you that produce legal or similarly significant effects.

6. Cookies and tracking

The bytemind.work marketing website sets no cookies and uses no local storage for tracking. There is nothing to consent to, which is why you will not see a cookie banner.

The ByteMind application sets a strictly necessary session cookie when you sign in. Its only purpose is to keep you signed in between requests; it is not used for tracking or advertising, and it is cleared when you sign out.

7. Who we share information with

We do not sell personal information and we do not share it for cross-context behavioral advertising. We disclose personal information only to the service providers we use to run the business, and only to the extent they need it:

• Microsoft Corporation (Azure). Hosting of the website and application infrastructure, including the server logs described in section 3.3.
• Web3Forms. Processing of contact form submissions and delivery of those submissions to our inbox.
• Our email provider. Delivery and storage of the email correspondence between us.
• Google LLC. Where you sign in with Google, Google authenticates you and provides the information listed in section 4.1. Google’s own handling of your data is governed by the Google Privacy Policy.

We may also disclose information where we are legally required to do so, where it is necessary to establish or defend legal claims, or where it is necessary to protect the rights and safety of users or the public. If ByteMind is ever involved in a merger, acquisition or sale of assets, personal information may be transferred as part of that transaction, and we will give notice before your information becomes subject to a different privacy policy.

8. How long we keep information

• Contact enquiries. Kept for up to 24 months from our last correspondence, so that we can pick up a conversation where it left off, then deleted.
• Account information from Google sign-in. Kept for as long as your account is active. Deleted within 30 days of you closing your account or asking us to delete it.
• Server and security logs. Retained by our hosting provider according to its own retention schedule, typically a short rolling window.
• Records we must keep by law. Retained for the period the relevant law requires, and no longer.

9. Security

We take reasonable and appropriate measures to protect personal information, including encryption in transit using HTTPS across the entire site and application, access controls and multi-factor authentication on the systems that hold personal information, minimising the data we collect in the first place, and using reputable infrastructure providers.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If we become aware of a breach affecting your personal information, we will notify you and any relevant authority as required by applicable law.

10. Your privacy rights

Wherever you are located, you can ask us to:

• tell you what personal information we hold about you and provide a copy;
• correct information that is inaccurate or incomplete;
• delete information we hold about you;
• stop sending you correspondence.

Email contact@bytemind.work to make a request. We may need to verify your identity before acting, normally by confirming control of the email address concerned. We will respond within 45 days; if we need more time, we will tell you why within that period.

There is no charge for these requests, and we will not treat you differently for making one.

11. California privacy rights

If you are a California resident, the California Consumer Privacy Act as amended by the California Privacy Rights Act (the “CCPA”) gives you specific rights. This section is our notice at collection.

11.1 Categories of personal information

In the last 12 months we have collected the following categories of personal information, from the sources and for the purposes described earlier in this policy:

• Identifiers — name, email address, Google Account identifier, IP address. Collected from you and from Google when you sign in.
• Commercial information — the content of enquiries about our services, including company name. Collected from you.
• Internet or network activity — server log data such as pages requested and user-agent string. Collected automatically by our hosting provider.

We do not collect the categories of sensitive personal information defined by the CCPA, and therefore the right to limit the use of sensitive personal information does not apply.

11.2 No sale or sharing

We do not sell personal information, and we have not sold personal information in the preceding 12 months. We do not share personal information for cross-context behavioral advertising. This applies to all users, including anyone under 16. Because we do not sell or share personal information, we do not offer a “Do Not Sell or Share My Personal Information” link — there is nothing to opt out of.

11.3 Your CCPA rights

• Right to know the categories and specific pieces of personal information we have collected, the sources, the purposes, and the categories of third parties to whom it was disclosed.
• Right to delete personal information we have collected from you, subject to the exceptions in the CCPA.
• Right to correct inaccurate personal information.
• Right to non-discrimination for exercising any of these rights. We do not offer financial incentives in exchange for personal information.

To exercise any of these rights, email contact@bytemind.work. You may use an authorised agent, in which case we will ask for written proof of their authority. We will respond within 45 days as described in section 10.

12. Children

Our website and application are intended for business users and are not directed at children. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, email contact@bytemind.work and we will delete it promptly.

13. International visitors

ByteMind operates from the United States, and the service providers listed in section 7 process information in the United States and in other countries where they operate data centers. If you access our website or application from outside the United States, you understand that your information may be transferred to, stored in and processed in countries whose data protection laws differ from those of your own country.

14. Changes to this policy

We may update this policy as the website and application change or as the law requires. When we do, we will revise the “last updated” date at the top of this page. If a change materially affects how we use information you have already given us, we will give notice by email to affected users before it takes effect, or by a prominent notice on this website.

Earlier versions are available on request.

15. How to contact us

For any question, request or complaint about privacy:

• Email: contact@bytemind.work
• Operator: ByteMind, a sole proprietorship

We read every message and aim to reply within one business day.