Privacy Policy

This policy covers personal data we process as a controller for our own users, and the data our customers process through RealBytes about their website visitors and leads, for which we act as a processor on their behalf.

Account data: your name, email and authentication details.

Usage data: how you interact with the product, device and log information used to operate and secure the service.

Website page views: on sites our customers connect, we record page views — the page path, the visitor's IP address, device type and referring site — and keep a daily total per site. We set no cookies and do not stitch visits into sessions or profiles; detailed view records are automatically deleted after the retention window (90 days by default), while the daily totals are kept.

Email engagement: for newsletters and campaigns, we process opens and link clicks to measure delivery and engagement.

To provide, secure and improve the service; to produce the reports and insights you request; to communicate with you about the service; and to comply with our legal obligations.

We rely on: performance of our contract with you; our legitimate interests in operating and improving the service; your consent where required (for example, certain cookies and marketing); and compliance with legal obligations.

We use strictly necessary cookies to run the service. Page-view counting on customer sites sets no cookies; it records individual page views (path, IP address, device type, referring site) that are automatically deleted after the retention window, plus a permanent aggregate count per site and day.

We do not sell your personal data. We share it only with service providers who process it on our behalf under contract (such as hosting and email delivery providers), or where required by law.

Where data is transferred across borders, we use appropriate safeguards such as standard contractual clauses to protect it in line with applicable law.

We keep personal data only for as long as needed to provide the service and meet legal, accounting or reporting requirements, after which it is deleted or anonymised.

Depending on where you live, you may have rights to access, correct, delete, port or restrict your data, to object to certain processing, and to withdraw consent. Under the CCPA/CPRA you may request access and deletion and opt out of the "sale" or "sharing" of personal information — we do not sell personal information.

To exercise any right, contact us through the support channel in your workspace. You also have the right to complain to your local data protection authority.

We use technical and organisational measures to protect personal data, including encryption of sensitive credentials at rest and access controls. No system is perfectly secure, but we work to keep your data safe.

The service is not directed to children and we do not knowingly collect personal data from children below the age required by local law.

We may update this policy as the service evolves. When changes are material we will take reasonable steps to notify you.

For privacy questions or to exercise your rights, contact us through the support channel in your workspace.