Privacy policy

Bytecheck is owned and operated by SPS Consulting LLC, doing business as Bytemine (www.bytemine.ai). This policy describes personal information processed through Bytecheck’s website, beta waitlist, accounts, workspaces, email validation, email finder, APIs, and related support and billing activities.

Bytemine determines how account, billing, waitlist, and operational information is used and acts as controller for those purposes. When a customer submits personal data for validation or finding on behalf of an organization, that customer generally acts as controller and Bytemine processes it to provide the requested Service. The customer’s own privacy notice also applies to that data.

Account and workspace information: email address, display name, workspace name, membership and role, team invitations, and authentication information. Beta waitlist information: email address and any optional name, company, or monthly email volume you provide.

Service inputs and outputs: email addresses, first and last names and business domains used for finding, uploaded or pasted bulk inputs, job names and status, validation or finder results, scores, timestamps, and workspace history. Requests may also include the integration or API-key identifier and webhook destination you configure. Please submit only information needed for the requested check.

Billing information: billing email, purchases, selected packs, credit balances, auto-top-up settings, payment references, and receipt or invoice links. Card payments are handled by Stripe; Bytecheck uses payment references rather than storing full card numbers or security codes in its application records.

Operational and support information: request and error details, network information such as IP addresses where recorded by hosting or security systems, and information you provide in support communications. The exact technical information depends on the feature and service provider involved.

We use information to create and secure accounts, manage workspace access, validate or find email addresses, process bulk jobs, return results, maintain history and relevant caches, enforce usage limits, account for credits, process purchases and authorized auto top-ups, and deliver integrations you request.

We also use relevant information to manage beta access, send necessary account and service messages, respond to support and rights requests, diagnose failures, prevent abuse and fraud, and meet legal and accounting obligations. Joining the beta allows us to contact you about beta access and launch; it is not permission for unrelated marketing.

Where European or UK data-protection law applies, controller processing relies on performance of a contract or steps requested before a contract, legitimate interests in operating and securing the Service where not overridden by your rights, legal obligations, or consent when required. Processing customer-submitted data on a customer’s behalf follows that customer’s lawful instructions and applicable contractual arrangements.

Checks may assess address syntax, domain and mail-server information, and available mailbox signals. Live checks can involve querying the destination domain’s DNS or mail infrastructure, which can receive technical details needed for the query, including the address being tested for mailbox probing. Finder requests use the supplied name and domain to assess candidate addresses. Preview results are not equivalent to live mailbox verification.

Inputs and results are associated with your workspace and can be accessible to other authorized workspace members. Relevant results may be cached to reduce repeated checks. Your webhook or other configured integration receives the data you instruct us to send. A finder result does not establish the person’s consent to receive communications.

Information is processed with providers needed to operate the Service, including Lovable Cloud for application hosting, authentication, and data storage; Bytemine infrastructure for configured validation and finder processing; Stripe for payments; and managed email delivery for account messages. Providers receive information relevant to their role. Destination DNS and mail systems may receive query details as described above.

We may disclose information to authorized members of your workspace, endpoints and services you configure, professional advisers where necessary, authorities where legally required, or parties involved in a merger, acquisition, or similar transaction subject to applicable safeguards. We may also disclose information where reasonably necessary to protect rights, safety, and the Service against abuse. This policy does not authorize you to share another person’s data unlawfully.

We retain information for as long as reasonably necessary for its purpose, considering your account and workspace activity, the need to provide history and results, cache usefulness, legal and accounting requirements, security, and dispute resolution. There is no single retention period for every category. Closing an account does not necessarily erase records required by law or immediately remove copies from backup cycles.

The Service uses authentication and workspace access controls, restricted administrative access, and hashed API-key credentials. No system is completely secure. Protect your credentials, restrict team access, and avoid placing API keys or sensitive data in public files or insecure webhook destinations. Contact Bytemine promptly about suspected security incidents.

Authentication and session management use browser storage and may use cookies or equivalent technologies depending on the environment. Hosting and security providers may use technical mechanisms needed to deliver and protect the Service. Disabling necessary storage can prevent sign-in or other essential functionality.

The website loads font resources from Google Fonts, which requires your browser to connect to Google and can disclose network information such as your IP address. Stripe’s payment pages use their own technologies and are covered by Stripe’s privacy notice. Any optional analytics or advertising technologies requiring consent must be disclosed and offered with the controls required by applicable law before use; this policy is not itself a cookie-consent mechanism.

Depending on hosting and service-provider arrangements, information may be processed in countries other than where you live, with different data-protection laws. Where a transfer requires legal safeguards, the applicable transfer mechanism and contractual protections must be put in place. Customers with regional-hosting or transfer requirements should confirm the relevant arrangements with Bytemine before submitting personal data. This policy is not a promise that data stays within a particular country or region.

Depending on your location and applicable law, you may request access to, correction of, deletion of, or a portable copy of your personal information; object to certain processing; request restriction; or withdraw consent where processing relies on consent. Withdrawal does not affect prior lawful processing. Some records may need to be retained for legal or other permitted reasons.

Contact Bytemine through the official channels at www.bytemine.ai, identify Bytecheck, and describe your request. We may request proportionate information to verify identity and authority. Do not send passwords or full card details. If the information belongs to a customer’s submitted list, contact that customer first; we will assist the customer as appropriate. You may also complain to the competent data-protection authority.

Where applicable, California and other US state residents may have rights to know categories of information collected and disclosed, access, correct, delete, and obtain a copy, and to opt out of sale, sharing for cross-context behavioral advertising, or certain targeted advertising. These categories are described above. These activities are not necessary to use Bytecheck’s validation service. If such processing applies, applicable opt-out mechanisms and recognized preference signals must be honored. You may use an authorized agent as permitted by law, and we will not unlawfully discriminate for exercising rights.

Bytecheck is a business service and is not directed to children. Do not use it to submit children’s information or sensitive information unrelated to email validation or finding. If you believe a child’s personal information has been provided improperly, contact Bytemine so the concern can be investigated and addressed.

We may update this policy to reflect changes in the Service, processing practices, or law. The revised policy will show its effective date. Material changes will be communicated where required by applicable law. This policy does not replace a customer’s own privacy notice, a required data-processing agreement, or legal requirements that apply to their use of personal data.

For privacy questions, account-closure requests, or data-rights requests, contact the Bytecheck operator using the official contact channels published at www.bytemine.ai. Mention Bytecheck and your workspace, if applicable, so the request can be directed appropriately.