Introduction

ByteVerity, Inc. (“ByteVerity,” “we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI code governance platform and visit our website at byteverity.com (collectively, the “Services”).

Information We Collect

Information You Provide

Account Information: Name, email address, company name, job title, and password when you create an account.
Contact Information: Information you provide when you contact us, request a demo, or subscribe to our newsletter.
Payment Information: Billing address and payment details processed through our third-party payment processor.
Repository Data: Code repository metadata, commit information, and AI detection results when you connect your repositories to our platform.

Information Collected Automatically

Usage Data: Information about how you use our Services, including features accessed, actions taken, and time spent.
Device Information: Browser type, operating system, device identifiers, and IP address.
Cookies: We use cookies and similar tracking technologies. See our Cookie Policy section below.

How We Use Your Information

We use the information we collect to:

Provide, maintain, and improve our Services
Process transactions and send related information
Send technical notices, updates, security alerts, and support messages
Respond to your comments, questions, and customer service requests
Communicate about products, services, offers, and events
Monitor and analyze trends, usage, and activities
Detect, investigate, and prevent fraudulent transactions and other illegal activities
Personalize and improve your experience

Code and Repository Data

ByteVerity processes code repository data to provide AI code detection and governance services. We want to be clear about how we handle this sensitive data:

Purpose Limitation: We only process repository data to provide our governance services. We do not use your code for training machine learning models.
Access Control: Repository data is only accessible to authorized personnel who need it to provide support or maintain the service.
Encryption: All repository data is encrypted in transit (TLS 1.3) and at rest (AES-256).
Retention: Repository data is retained according to your subscription terms. Upon account termination, data is deleted within 30 days.
No Code Storage: Our detection engine processes code but does not store raw source code. Only metadata and detection results are stored.

Data Sharing

We may share your information in the following circumstances:

Service Providers: With vendors who perform services on our behalf (hosting, analytics, payment processing).
Business Transfers: In connection with a merger, acquisition, or sale of assets.
Legal Requirements: To comply with legal obligations or protect our rights.
With Your Consent: When you direct us to share information with third parties.

We do not sell your personal information to third parties.

Data Security

We implement appropriate technical and organizational measures to protect your information, including:

Encryption of data in transit and at rest
Regular security assessments and penetration testing
Access controls and authentication mechanisms
Employee security training
SOC 2 Type II certification

Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information:

Access: Request access to your personal information.
Correction: Request correction of inaccurate information.
Deletion: Request deletion of your personal information.
Portability: Request a copy of your data in a portable format.
Opt-Out: Unsubscribe from marketing communications.

To exercise these rights, contact us at privacy@byteverity.com.

Cookie Policy

We use the following types of cookies:

Essential Cookies: Required for the Services to function properly.
Analytics Cookies: Help us understand how visitors interact with our website.
Marketing Cookies: Used to deliver relevant advertisements.

You can control cookies through your browser settings. Note that disabling certain cookies may affect the functionality of our Services.

International Data Transfers

We may transfer your information to servers located outside your country of residence. When we transfer data internationally, we use appropriate safeguards such as Standard Contractual Clauses approved by the European Commission.

Data Retention

We retain your information for as long as necessary to provide our Services and fulfill the purposes described in this Privacy Policy. Retention periods may vary based on:

The nature of the information
Our legal and regulatory obligations
Whether the information is needed for dispute resolution
Your account status and preferences

Children's Privacy

Our Services are not directed to children under 16. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new Privacy Policy on this page and updating the “Last updated” date.

Contact Us

If you have questions about this Privacy Policy, please contact us:

Email: privacy@byteverity.com
Address: ByteVerity, Inc., 548 Market St #35410, San Francisco, CA 94104

GDPR Addendum (EEA Residents)

If you are located in the European Economic Area (EEA), the following additional terms apply:

Legal Basis: We process your data based on contractual necessity, legitimate interests, consent, or legal obligations.
Data Controller: ByteVerity, Inc. is the data controller for personal information collected through our Services.
Data Protection Officer: Contact our DPO at dpo@byteverity.com.
Supervisory Authority: You have the right to lodge a complaint with your local data protection authority.

CCPA Notice (California Residents)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA):

Right to know what personal information we collect, use, and disclose
Right to delete your personal information
Right to opt-out of the sale of personal information (we do not sell personal information)
Right to non-discrimination for exercising your privacy rights

To exercise your CCPA rights, contact us at privacy@byteverity.com.