Privacy Policy

This Privacy Policy explains how Blackwire LLC ("GetByt", "we", "us", or "our") collects, uses, and shares personal information in connection with the GetByt platform (the "Service"). It applies to people who create an account with us ("Merchants") and to visitors of our marketing website. It also explains how we handle the personal information of people who visit or buy from websites our Merchants operate ("End Customers").

1. Our Roles: Controller and Processor

For the account and marketing data described below, GetByt acts as a data controller — we decide how and why it is used.

For personal information that End Customers provide to a Merchant's website or store (such as a checkout order or a form submission), the Merchant is the data controller and GetByt acts as a data processor, handling that information on the Merchant's behalf and under their instructions. Each Merchant is responsible for maintaining its own privacy policy and for having a lawful basis to collect End Customer data. If you are an End Customer, please refer to the privacy policy of the website you are using.

2. Information We Collect

From Merchants and account holders:

• Account information: name, email address, and password when you register.
• Billing information: subscription and transaction history, billing address, and payment details. Card numbers are processed by Stripe — we do not store full card numbers.
• Site and store content: text, images, products, and other content you create, upload, or generate with our tools, including the prompts you submit to our AI features.
• Communications: messages you send through our contact form or support system.

From End Customers of Merchant sites (processed on the Merchant's behalf):

• Order information: name, email, shipping and billing address, items purchased, and order status.
• Form and survey responses submitted through a Merchant's site.

Collected automatically:

• Usage and device data: pages visited, features used, browser type, IP address, and similar technical information, collected via cookies and server logs.

3. How We Use Information

• provide, maintain, secure, and improve the Service;
• generate, host, and publish your websites and stores;
• process subscriptions and facilitate payments for your sales;
• send transactional messages (account, billing, order, and support notices);
• respond to your requests and provide support;
• detect, prevent, and investigate fraud, abuse, and security incidents; and
• comply with legal obligations and enforce our terms.

Where required by law, our lawful bases for processing include performance of our contract with you, our legitimate interests in operating and securing the Service, your consent (where applicable), and compliance with legal obligations.

4. AI Processing

When you use our AI-assisted features, the prompts and related content you submit are sent to our AI service provider to generate output. We use this processing only to provide the feature to you. Do not submit sensitive personal information to AI prompts that you do not want processed by a third-party AI provider.

5. Service Providers and Sharing

We do not sell your personal information. We share information only as needed to run the Service, with providers ("sub-processors") that are bound to protect it, including:

• Stripe — payment processing for subscriptions and Merchant sales (Stripe Connect).
• Anthropic — AI processing that powers our website-generation and editing features.
• Amazon Web Services — cloud hosting, storage, and DNS for the Service and Published Sites.
• Unsplash — stock imagery sourced when generating sites.
• Domain registrar — when you register a domain, the contact information required by ICANN is shared with the registrar.
• Email/communications providers — to send transactional and support messages.

We may also disclose information to comply with the law, respond to lawful requests, protect our rights and the safety of others, or in connection with a merger, acquisition, or sale of assets.

6. International Transfers

We are based in the United States and our providers may process information in the United States and other countries. Where personal information is transferred internationally, we rely on appropriate safeguards (such as standard contractual clauses) where required by law.

7. Data Security

We protect information using industry-standard measures, including encrypted connections (TLS/SSL), hashed passwords, and access controls. Payment card information is handled by Stripe and is not stored on our servers. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.

8. Cookies

We use essential cookies to keep you signed in and remember your preferences. We do not use third-party advertising cookies. Any analytics cookies we use collect aggregated or pseudonymized usage data to help us improve the Service. You can control cookies through your browser settings, though disabling essential cookies may affect functionality.

9. Your Privacy Rights

Depending on where you live, you may have the right to:

• access the personal information we hold about you;
• correct inaccurate information;
• request deletion of your account and associated data;
• obtain a portable copy of, or export, your content; and
• object to or restrict certain processing.

We do not sell or "share" personal information for cross-context behavioral advertising, and we will not discriminate against you for exercising your rights. To exercise any right, contact us at privacy@getbyt.com; we may need to verify your identity first. If your request concerns data held by a Merchant about you as an End Customer, please contact that Merchant directly, and we will assist them as their processor.

10. Children's Privacy

The Service is not directed to children, and Merchant accounts require you to be at least 18. We do not knowingly collect personal information from children under 13 (or the minimum age in your jurisdiction). If you believe a child has provided us personal information, contact us and we will delete it.

11. Data Retention

We retain account and content data while your account is active. After cancellation, we delete website content and personal data within 30 days, except records we must keep to comply with legal, tax, accounting, or fraud-prevention obligations, or to resolve disputes and enforce our agreements.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by email or through a notice on the Service. Continued use of the Service after a change takes effect constitutes acceptance of the updated policy.

13. Contact

For privacy questions or requests, contact us at privacy@getbyt.com or through our contact page.