Privacy
Privacy notice
What we collect on this website, why, where it goes, how long we keep it, and how to use your rights under India's Digital Personal Data Protection Act, 2023.
Last updated
Who we are
ByteKnot Labs LLP, a limited liability partnership in India, is the Data Fiduciary for personal data collected on this website, byteknotlabs.com. Questions, requests and complaints go to [email protected], read by the person responsible for data protection at ByteKnot Labs.
This notice covers this website only. Our products have their own notices: ByteMirror, ByteLoader, ByteKeys and ByteViewer. When we build or run systems for a client, the client decides how personal data is used and we act as their Data Processor; see our DPDP compliance policy.
What we collect and why
When you send an enquiry
- What
- Your name and email address; what you need, where your data lives and your project stage; whether you want an NDA; your message; how you heard about us, if you choose to say; and your browser's user agent and the page you came from.
- Why
- To read and reply to your enquiry, ask follow-up questions and, if we are a fit, prepare a proposal.
- Basis
- You give it to us voluntarily for that purpose (DPDP Act, section 7(a)). Tell us at any time if you no longer want us to use it.
- Where
- Google Firebase (Cloud Firestore). Our replies are sent by email.
- How long
- For as long as we are in conversation or working together, then deleted within 24 months of our last contact, unless a contract or law requires us to keep it longer.
To limit repeat submissions, your IP address is kept briefly in server memory. It is never saved with your enquiry.
When you email us
- What
- Your email address, your name and whatever you include in your message.
- Why
- To reply to you.
- Basis
- You give it to us voluntarily for that purpose (DPDP Act, section 7(a)).
- Where
- Our email service provider.
- How long
- As for enquiries: deleted within 24 months of our last contact, unless a contract or law requires longer.
Analytics, only if you accept
- What
- The pages you visit and the page you came from; how far you scroll, links you follow to other sites, files you download and when you send a form, but never what you type; your browser, device and screen size; your approximate location, which Google Analytics works out from your IP address without storing the address; and a random identifier kept in two cookies.
- Why
- To understand which pages are useful and how people find us.
- Basis
- Your consent, given by choosing Accept. Withdraw it at any time with Analytics choices in the footer or on this page. Withdrawing is as easy as accepting: it stops collection and deletes the analytics cookies from your browser.
- Where
- Google Analytics, a Google service. Google may process the data in the United States and other countries.
- How long
- Up to 14 months in Google Analytics, after which only totals such as visits per page remain. The cookies expire two years after your last visit, or straight away if you turn analytics off. We review what we hold at least once a year.
No session recordings, no click maps, no advertising features or Google signals, and we never identify you in analytics.
Analytics is not enabled on this site at the moment, so there is nothing to choose.
Server logs
- What
- Standard request information such as IP address, browser and the page requested.
- Why
- To run the website and protect it against abuse.
- Basis
- Needed to deliver the website you asked for and keep it secure.
- Where
- Vercel, our hosting provider.
- How long
- For the short period set by Vercel's log retention.
Stored only in your browser
- What
- Your light or dark theme, and your analytics choice with the date you made it.
- Why
- To remember your preferences on your next visit.
- Basis
- These stay on your device and are never sent to us.
- Where
- Your browser's local storage.
- How long
- Until you clear your browser's storage.
What we do not do
- We do not sell personal data or share it for advertising.
- We do not use personal data from this website to train AI models.
- We do not use advertising, social-media or cross-site tracking.
- We do not load fonts from font services: ours are served from our own domain. The only script from another company is Google Analytics, and it loads only if you accept.
Your rights
- Access
- A summary of the personal data we hold about you, how we use it, and who we have shared it with.
- Correction and erasure
- Correct, complete or update your data, or have it erased once it is no longer needed for the purpose you gave it.
- Withdraw consent
- Withdraw consent for analytics at any time. It is as easy as giving it.
- Grievance redressal
- Complain to us about how we handle your data, and get a response within 30 days.
- Nominate
- Nominate someone to exercise your rights if you die or become unable to.
- Complain to the Board
- If you are not satisfied with our response, complain to the Data Protection Board of India.
To use any of these, email [email protected] from the address you used with us, with “Privacy request” in the subject. We may ask you to confirm it is you. We answer grievances within 30 days. If you are not satisfied, you can complain to the Data Protection Board of India once you have raised it with us first.
Security and breaches
Data travels over HTTPS and is encrypted at rest by our providers. Only the people who answer enquiries can open them, through access we grant individually and can revoke, and secrets such as API keys are kept out of our code.
If a personal data breach affects you, we will tell you without delay what happened, the likely consequences, what we are doing about it and how to reach us, and we will report it to the Data Protection Board of India as the DPDP Rules require.
Children
This website is for businesses and is not meant for children under 18. We do not knowingly collect children's personal data, and we do not track, monitor or target advertising at children. If you believe a child has sent us personal data, tell us and we will delete it.
Language and changes
This notice is in English. Ask us and we will provide it in any language listed in the Eighth Schedule to the Constitution of India.
We update this page when our practices change and show the date at the top. If a change affects how we use data you have already given us, we will tell you before it applies. Most obligations under the DPDP Rules, 2025 apply from 13 May 2027; this notice already follows them.
Contact
Privacy questions, requests and complaints: [email protected]