1. Overview
BytesBrains (“BytesBrains”, “we”, “us”) respects your privacy. This policy describes the information we collect, how we use it, and the choices you have. It applies to our public website and the authenticated areas of our services.
2. Information We Collect
Account information
When you sign in (for example, with Google), we receive basic profile information such as your name, email address, and profile photo. We use this to create and manage your account.
Inquiries & communications
When you submit an inquiry or contact us, we collect the details you provide — such as your subject, message, and any optional company, industry, budget, or timeline information — along with the message thread, so our team can respond and track the conversation.
Usage information
We may collect limited technical information automatically, such as device and browser type, approximate location, and how you interact with the Services, to keep them secure and improve them.
3. How We Use Your Information
- To provide, maintain, and improve our Services;
- To authenticate you and secure your account;
- To respond to your inquiries and provide support;
- To communicate with you about your account or our services;
- To detect, prevent, and address fraud, abuse, or security issues; and
- To comply with legal obligations.
4. How We Share Information
We do not sell your personal information. We share information only:
- With service providers who process data on our behalf — including Google Cloud and Firebase for authentication, data storage, and hosting, and Tucows/OpenSRS for domain registration and for hosting the mailboxes themselves;
- For legal reasons, where required by law or to protect rights and safety; and
- In a business transfer, such as a merger or acquisition, subject to this policy.
5. Domain Registrant Details
Registering a domain requires contact details for the registrant — name, postal address, email address and telephone number — and these are treated differently from everything else in this policy, because their destination is not up to us.
- They are passed to our registrar (Tucows/OpenSRS) and, through them, to the registry operating your chosen extension. Both are required to hold them under ICANN policy.
- Some registries publish some of them. What appears in public WHOIS/RDAP records varies by extension and by applicable law; many registries now redact personal data by default, but this is their decision and not ours.
- ICANN requires them to be accurate and reachable. A registration whose contacts cannot be verified may be suspended, so we cannot minimise or anonymise these fields the way we would prefer to elsewhere.
- They are retained beyond your relationship with us — registrars are obliged to keep registration records for a period set by ICANN, independently of any deletion request made to us.
We store the registrant details you give us so a second purchase does not ask you to type them again, and you can review or replace them from your dashboard. The registrar management credentials for your domains are kept in a separate store that no browser can read.
6. Business Email & the Contents of Your Mailbox
Mailboxes are hosted by Tucows/OpenSRS under their Hosted Email service, not by BytesBrains. Your messages, attachments, folders, contacts and drafts live on their infrastructure, and your mail client, phone and webmail connect to their servers directly — that traffic does not pass through us.
What we hold for a mailbox is the account record and nothing else: the address, its storage size, its status, any aliases, who owns it, and the billing dates. We hold no message content, and we have no ability to read it. Our systems can create, rename, resize, suspend and delete a mailbox; there is no facility anywhere in our platform to open one. A request or legal demand for the contents of a mailbox is one we cannot satisfy and would have to direct to Tucows.
We never see or store your mailbox password. When you set or reset one it is passed straight to the mail provider and discarded.
Connections between your devices and the mail servers are encrypted in transit — IMAP on port 993 and POP3 on 995 over SSL/TLS, and SMTP on 587 with STARTTLS or 465 over SSL. How your messages are stored and protected once they arrive is governed by Tucows' own security practices and privacy policy rather than by ours, and we would encourage you to read them. If you require your mail to be encrypted such that no provider can read it, that is achieved with end-to-end encryption in your own mail client — for example PGP or S/MIME — using keys only you hold. Nothing in this service prevents that, and nothing in it provides it.
Because the mail is hosted by a third party, it may be stored and processed outside your own country; see International Data Transfers below. Deleting a mailbox deletes its contents at the provider, and that is not reversible by us. Suspending a mailbox — for non-payment, for example — deletes nothing.
7. Data Retention
We retain your information for as long as your account is active or as needed to provide the Services, comply with our legal obligations, resolve disputes, and enforce our agreements. You may request deletion of your account and associated data as described below.
8. Data Security
We use administrative, technical, and organizational measures designed to protect your information, including authentication controls and access rules. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security.
9. Your Rights & Choices
Depending on your location, you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. You can update your profile in your account, and you can contact us to exercise these rights. We will respond consistent with applicable law.
10. International Data Transfers
Your information may be processed in countries other than your own, including by our service providers. Where required, we take steps to ensure appropriate safeguards are in place for such transfers.
11. Cookies & Similar Technologies
We and our providers use cookies and similar technologies to keep you signed in, remember preferences, and understand usage. You can control cookies through your browser settings; disabling them may affect some features, such as staying signed in.
12. Children's Privacy
Our Services are not directed to children under 16, and we do not knowingly collect personal information from them. If you believe a child has provided us information, please contact us and we will take appropriate steps.
13. Third-Party Links
Our website may link to third-party sites and services we do not control. This policy does not apply to those sites, and we encourage you to review their privacy policies.
14. Changes to This Policy
We may update this Privacy Policy from time to time. We will revise the “Last updated” date above and, where appropriate, provide additional notice of material changes.
15. Contact Us
For privacy questions or requests, contact us at hello@bytesbrains.com.