1. Who we are
Bvyte (“Bvyte”, “we”, “us”) is an AI and software studio headquartered in Ahmedabad, India, working remotely with clients worldwide. For personal data collected through this website, Bvyte is the data fiduciary under India’s Digital Personal Data Protection Act, 2023 (“DPDP Act”) and the controller under the EU and UK General Data Protection Regulation (“GDPR”).
Operated by bvyte.co, based in Ahmedabad, Gujarat, India.
2. What we collect
Information you give us
When you use the contact form or email us, we receive what you choose to send: your name, work email, company, budget range and a description of your project. The contact form does not store anything on our servers; it opens your own email app with a pre-written message, and we receive that email.
Information collected automatically
Our hosting provider keeps standard server logs, such as IP address, browser type, the page requested and the time of the request, to deliver the site and protect it from abuse.
What we do not collect
- No cookies. The site stores one short-lived value in your browser’s session storage to make page transitions smooth; it contains no personal data and is deleted when you close the tab.
- No analytics, advertising or social media trackers.
- No third-party font or script requests: our fonts and code are served from our own site.
- Nothing you type into the demos on our Projects page leaves your browser.
3. How we use it
- To reply to your enquiry and discuss a possible project.
- To prepare a scope, proposal or contract you have asked for.
- To keep the website secure and working.
- To meet legal, tax and accounting obligations.
We do not sell personal data, and we do not send marketing emails unless you have asked to receive them. We do not use your enquiry to train AI models.
4. Legal basis
Under the DPDP Act we process your data on the basis of the consent you give when you contact us, and for legitimate uses permitted by law. Under the GDPR we rely on steps taken at your request before entering into a contract, our legitimate interest in running and securing our business, and compliance with legal obligations. You may withdraw consent at any time; this does not affect processing already carried out.
6. International transfers
We work with clients and providers in several countries, so your data may be processed outside the country where you live. Where the GDPR applies, we use recognised safeguards such as the European Commission’s standard contractual clauses. Transfers from India follow the DPDP Act and any restrictions notified under it.
7. How long we keep it
- Enquiries that do not become a project: up to 24 months, then deleted.
- Client and contract records: for the life of the engagement and as long afterwards as tax and company law require.
- Server logs: up to 90 days, unless needed to investigate a security incident.
8. Security
We apply access controls, encryption in transit, least-privilege access and regular reviews to the systems that hold personal data. No system is perfectly secure, so if we learn of a breach affecting your data we will notify you and the relevant authorities as the law requires.
9. Your rights
Depending on where you live, you can ask us to:
- Tell you what personal data we hold about you and how we use it.
- Correct, complete or update it.
- Erase it, or restrict how we use it.
- Withdraw your consent.
- Object to processing based on our legitimate interests.
- Give you a copy in a portable format.
- Nominate another person to exercise your rights, under the DPDP Act.
Write to us at the address below and we will respond within 30 days. If you are not satisfied, you can complain to the Data Protection Board of India, or to your local supervisory authority in the EU or UK.
10. Client project data
When we build or run systems for a client, we process that client’s data on its instructions, as a data processor under a signed data processing agreement. That agreement, not this policy, governs how project data is handled. We never use client data to train models for anyone else.
11. Children
This website is for businesses and is not directed at anyone under 18. We do not knowingly collect children’s personal data.
12. Changes
We will update this policy when our practices change and show the new effective date at the top. Significant changes will be highlighted on this page.
13. Contact and grievances
Privacy questions and requests: hello@bvyte.co (subject: Privacy request)
Grievances (DPDP Act): bvyte.co, Ahmedabad · hello@bvyte.co (subject: Grievance). We acknowledge grievances within 48 hours and resolve them within 30 days.