Privacy Policy
This explains what Byline collects, why, and who it is shared with. Usama Moin is the data controller.
What we collect
| Data | Why |
|---|---|
| Name and email | To create your account and contact you about it |
| Site details you enter (domain, brand voice, keywords) | To research and generate content for that site |
| Content generated for you | To show it to you, version it, and publish it where you ask |
| CMS credentials you connect | To publish on your behalf. Stored encrypted, used for nothing else |
| Usage and billing records | To enforce plan limits and process payment |
| Server logs (IP, timestamps, errors) | Security and debugging |
What we do not do
- We do not sell personal data.
- We do not use your content or site data to train models.
- We do not share your data with other customers, and one customer's sources are never attributed to another.
- We do not run advertising trackers on the application.
Who processes data on our behalf
These subprocessors are necessary to run the Service:
| Provider | Purpose | Region |
|---|---|---|
| Vercel | Application hosting | United States |
| Clerk | Authentication and user accounts | United States |
| OpenAI | Content generation and embeddings | United States |
| Anthropic | Content generation | United States |
| Serper / BrightData | Search results research | United States |
| Jina AI | Reading public web pages | Global |
| Cloudflare R2 | Image storage | Global |
| Lemon Squeezy | Payments and invoicing | United States |
Content you generate is sent to the language model providers listed above for processing. Their terms prohibit using API content for training.
Where data is stored
Data is processed in the United States and other regions where the providers above operate. If you are in the EEA or UK, transfers rely on standard contractual clauses held by those providers.
How long we keep it
- Account and content: while your account is open, then deleted 30 days after closure.
- Billing records: as long as tax law requires, typically seven years.
- Server logs: 30 days.
Your rights
You can request access, correction, export or deletion of your personal data, and object to processing. Email usama@bitrupt.co and we will respond within two business days. You can also complain to your local data protection authority.
Cookies
We use cookies that are strictly necessary: session and authentication. No advertising or cross-site tracking cookies are set, so there is no consent banner to click through.
Security
Data is encrypted in transit and at rest. Credentials you connect are stored encrypted. Access is limited to what is needed to operate the Service. No system is perfectly secure, and we will notify affected users without undue delay if a breach affects personal data.
Children
The Service is not intended for anyone under 16, and we do not knowingly collect their data.
Changes
Material changes will be notified by email at least 14 days before taking effect, and the date at the top of this page will change.
Contact
Privacy questions: usama@bitrupt.co.