Privacy Policy

1. Introduction

ByteAndBook ("we", "us") respects your privacy. This policy covers the ByteAndBook website and the project-request process. We do not claim certified compliance with any specific privacy law (such as GDPR or CCPA) — this policy describes our actual practices in plain terms.

2. Information we collect

When you submit a project request through the Start a Project form, we collect: your full name, email address, mobile/WhatsApp number, company or brand name (if provided), the service(s) you selected (including a description if you chose "Other"), your project description, and — if provided — your budget range, desired timeline, and preferred contact method. We also record your Terms acceptance and Privacy acknowledgement, a system-generated reference ID, and the submission timestamp.

If you email us directly at info@byteandbook.com instead of using the form, whatever you include in that email is received the same way any email is — handled by our mailbox, not by any separate system on this website.

3. Why we collect it

We collect this information solely to understand, respond to, and (where relevant) scope and quote your project request. We do not use it for advertising, and we do not sell it.

4. Project inquiry handling

When you submit the Start a Project form, the information is validated and emailed directly to info@byteandbook.com. The website does not store your submission in a database. Our backend also applies basic anti-abuse measures — a hidden honeypot field and short-term rate limiting — described further in Cookies and tracking (section 9).

5. Communications

We use the contact details you provide to follow up about your project request — by email, WhatsApp/mobile, or your stated preferred contact method. We do not add you to a marketing list from a project request; there is no separate marketing-consent checkbox because there is no marketing list to opt into at this time.

6. Security

Project requests are submitted over HTTPS. Our submission endpoint validates input server-side, rejects requests from unexpected origins, and applies rate limiting to reduce abuse. No security measure is perfect, and we cannot guarantee absolute security of information transmitted over the internet.

7. Service providers

Our website is hosted on Namecheap shared hosting, which processes project-request submissions to deliver them by email and provides the mailbox that receives them. Fonts are served by Google Fonts (see section 9). If you use the optional AI Assistant, your message is processed by our configured AI provider, currently Google's Gemini API, solely to generate a response (see section 10). We do not currently use any analytics, advertising, or marketing-automation service provider.

8. Data retention

Project request content is delivered by email and is not stored in a website database. Emails themselves remain in our business mailbox for as long as reasonably necessary to respond to and manage your inquiry; we have not yet finalized a fixed maximum retention period for that mailbox and will update this policy when we do. Technical rate-limiting metadata (see section 9) is short-lived and automatically ages out — it is not a record of your submission content.

9. Cookies and tracking

This website does not use analytics, advertising pixels, or tracking cookies, and does not use browser storage (such as localStorage) to track you across visits. The only third-party resource loaded is Google Fonts (typeface files), which is functional, not tracking-related.

Our project-request backend applies short-term, IP-based rate limiting purely to reduce spam/abuse of the submission endpoint. It stores a hashed version of your IP address together with a small list of request timestamps, in a location outside the public website, for a rolling ten-minute window — not your submission content, and not used for tracking or profiling. If our use of cookies or tracking changes, we will update this section.

10. AI Assistant (chatbot)

This website includes an optional AI Assistant ("Ask ByteAndBook AI") for general questions about our services, process, and getting started. It is closed by default — nothing is sent anywhere until you open it and send a message.

When you send a message, the message text and a short window of your recent chat history on this device (no more than the last few exchanges) are sent to our backend, which forwards them — together with relevant excerpts of our own published website content used to ground the answer — to Google's Gemini API to generate a response. We are launching this feature on Gemini's Free Tier. According to Google's current Gemini API Free Tier terms, content submitted through the Free Tier may be used by Google to improve its products. We do not control Google's own data-handling or retention practices; see Google's Gemini API terms and documentation for details on how they process Free Tier API requests.

Because of this, please do not submit confidential, sensitive, payment, account, password, health, identity, or other private project information through the chat — it is intended for general questions about our services, process, and getting started, not for sharing information you wouldn't want a third-party AI provider to see. Anything that needs to be tied to your identity or involves private details should go through the Start a Project form or a direct email instead.

Your conversation is kept only in your browser's session storage on your own device — it is not written to a website database and is cleared automatically when you close the tab. ByteAndBook does not intentionally maintain a permanent website database of chat conversations under the current architecture; our server does not intentionally log full chat message content, though routine technical logs may briefly include a truncated snippet of a failed request for debugging. Using the chat does not add you to any marketing list or enroll you in any marketing program.

11. Your rights

You can ask us what information we hold about you, request that we correct it, or ask us to delete a project-request email from our mailbox, by contacting info@byteandbook.com. We will respond and act on reasonable requests. Depending on where you live, you may also have additional rights under local law; this policy does not limit those rights.

12. Children's privacy

This website is intended for business inquiries and is not directed at children. We do not knowingly collect information from children.

13. Changes to this policy

If our data practices change, we will update this page and the Terms Version shown at the top. Continued use of the project-request form after an update constitutes acknowledgement of the current policy.

14. Contact

For any privacy question or request, contact info@byteandbook.com.