1. Who is responsible for your information
byigital is responsible for information used to operate your account and our platform. When a business uses byigital to collect enquiries through its website, that business determines how those enquiries are used and is responsible for its own privacy notice. byigital processes that website and lead information to provide the service on the business’s behalf.
2. Information we handle
We handle account information such as your name, email and sign-in details; business and Brand Kit information such as services, location, contact details and uploaded assets; prompts, generated content and website versions; enquiries and lead contact details; subscription, payment and AI credit records; and information about services you choose to connect. Technical information includes page events, session identifiers, device category, referral sources and campaign attribution. Do not submit sensitive personal information that is not necessary for the service.
3. How and why we use information
We use information to authenticate users, maintain business accounts, generate and edit content, publish websites, handle enquiries, process billing, operate requested integrations, explain performance and protect the service. Where applicable, our legal bases are performing our contract with you, legitimate interests in securing and improving the service, compliance with legal obligations, and consent where required. Consent can be withdrawn without affecting earlier lawful processing.
4. AI processing
Business information, Brand Kit details, your instructions and relevant content are sent to AI service providers through the Lovable AI Gateway to fulfil your requests. This can include personal information you put in a prompt. Review generated content before using or publishing it. Our AI diagnostics record operational details such as feature, timing and error category, rather than prompts or customer details. This policy does not promise that third-party AI providers never retain data or use it for model improvement; their applicable terms and settings govern their processing.
5. Payments and connected services
Stripe processes payment details. byigital stores billing references, subscription and payment status, and related accounting records, not full payment card numbers. If you connect Meta services, we use the permissions you approve to access selected Pages, Instagram accounts and advertising accounts for supported features. Access credentials are kept server-side and are not exposed in the customer interface. You can disconnect services in byigital and manage permissions with the provider. Providers also process information under their own privacy policies.
6. Storage, service providers and transfers
We use Lovable Cloud for application data, authentication and stored assets, and service providers for hosting, AI and payments. Information is shared only as needed to provide requested services, meet legal obligations or protect rights and security. These providers may process information outside your country. Where applicable, international transfers require safeguards under relevant data protection law. Do not assume that all information stays in your country.
7. Browser storage and website analytics
The platform uses browser storage for sign-in and preferences. Generated-site analytics use a session identifier in session storage rather than an analytics cookie, and record page views, interactions, device category, referral hosts and campaign parameters. The current tracker respects Do Not Track and Global Privacy Control signals. Essential browser storage and third-party services may still operate. Website owners are responsible for any additional tracking they add and for obtaining consent where required.
8. Retention and security
We retain information as needed to provide the service, maintain account and website history, resolve disputes and meet legal or accounting obligations. Different categories may need different retention periods. Access controls, business-level isolation and server-side checks protect information, but no service can guarantee absolute security. Ending a subscription does not itself erase all account data or legally required records.
9. Your choices and rights
Depending on your location, you may have rights to access, correct, delete or receive your information, restrict or object to processing, withdraw consent, and complain to your local data protection authority. You can update available account and business details and disconnect integrations in the platform. For requests not available in settings, contact byigital through the service-request area in your account; identity verification may be required. There is currently no self-service account-deletion button. For enquiries submitted to a customer’s website, contact that business first.
10. Changes and contact
We may update this policy as the service or legal requirements change. The date above identifies this version. For privacy questions or requests, contact byigital through the service-request area in your account. This policy describes the platform, not a replacement privacy policy for every website created with byigital.