Privacy Policy

Contents

• 1. Controller and Contact
• 2. Scope and Processing Roles
• 3. Data Categories
• 4. Purposes and Legal Bases
• 5. Data Sources and Recipients
• 6. International Data Transfers
• 7. Retention and Deletion
• 8. Security and Audit Controls
• 9. Data Subject Rights
• 10. Complaints and Supervisory Authorities
• 11. Children and Automated Decisions
• 12. Changes to This Policy

1. Controller and Contact

The data controller for this website and ByteGate commercial communications is HumanByte.

• Address: Lothringerstrasse 162, 4056 Basel, Switzerland
• Email: humanbyte.info@gmail.com
• Contact form: https://humanbyte.ch/contact

2. Scope and Processing Roles

This Privacy Policy applies to website visitors, prospects, customers, and authorized users of ByteGate and ByteKey Cloud Platform services.

In many business deployments, HumanByte acts as a processor for customer-controlled access data processed through the platform, while customers act as controllers for their own end-user datasets. For account, billing, security, and support operations, HumanByte may act as an independent controller.

3. Data Categories

• Identity and account data (name, organization, email, account role).
• Authentication and security data (login events, token/session metadata, audit records).
• Device and telemetry data (device identifiers, heartbeat status, operational diagnostics).
• Access-event metadata (timestamps, entry decisions, store/device context, operational notes).
• Support and communications data (messages, issue history, implementation correspondence).
• Website usage data (technical logs and limited analytics where enabled).

ByteGate is designed for access control and operational auditability. It does not intentionally process biometric templates through this web platform unless explicitly enabled under a separate written agreement.

4. Purposes and Legal Bases

For Swiss and EU privacy frameworks, we process personal data under applicable legal bases including contract performance, legitimate interests, legal obligations, and consent where required.

• Service delivery and account operation: contract performance and legitimate interests.
• Security monitoring and abuse prevention: legitimate interests and legal obligations.
• Support, onboarding, and implementation: contract performance and legitimate interests.
• Compliance, incident handling, and legal claims: legal obligations and legitimate interests.
• Optional marketing communications: consent or legitimate interests, depending on context.

5. Data Sources and Recipients

We collect data directly from you, from your organization's administrators, from devices connected to the platform, and from authorized integrations.

Data may be disclosed to subprocessors and service providers that support hosting, database operations, analytics, communication, and security services. We require contractual safeguards and confidentiality obligations from these providers.

6. International Data Transfers

Where data is transferred outside Switzerland or the EEA, we apply appropriate safeguards, such as adequacy decisions or approved contractual transfer mechanisms, as required by applicable law.

7. Retention and Deletion

• Account and commercial records: retained while the relationship is active, then archived as required.
• Operational logs and telemetry: retained according to service configuration and legal requirements.
• Support records: retained for continuity, quality assurance, and dispute resolution periods.
• Backups: retained on a rolling cycle and deleted according to infrastructure retention schedules.

At termination, customer data handling is governed by contract terms and applicable law, including reasonable export and deletion workflows.

8. Security and Audit Controls

We apply technical and organizational measures proportionate to risk, including role-based access controls, authentication safeguards, audit logging, and monitoring controls. ByteGate operational events are designed for traceability, including standardized timestamp handling to support audit integrity.

9. Data Subject Rights

Subject to applicable law, you may have rights to access, rectify, erase, restrict, object, or request portability of personal data. You can submit requests by email at humanbyte.info@gmail.com. We may request identity verification before fulfilling rights requests.

10. Complaints and Supervisory Authorities

If you believe your data has been processed unlawfully, you may contact us first so we can address the issue. You may also lodge a complaint with a competent supervisory authority, including the Swiss Federal Data Protection and Information Commissioner (FDPIC) or an EU authority in your country of residence.

11. Children and Automated Decisions

Our services are intended for business users and are not directed to children. We do not intentionally collect personal data from children through these services.

We do not use fully automated decision-making that produces legal or similarly significant effects on individuals without human oversight in this website context.

12. Changes to This Policy

We may update this Privacy Policy to reflect legal, technical, or operational changes. Material updates will be reflected by a revised effective date on this page. Continued use of the service after updates means the updated policy applies to the extent permitted by law.

This policy is intended as a serious operational baseline and should be read together with customer contracts and technical implementation agreements where applicable.