Privacy Policy

Byteroot LLC ("Byteroot", "we", "us", or "our") is a US-registered limited liability company operating at 1209 Mountain Road PL NE STE N, Albuquerque, NM 87110, USA. We provide software services, digital licenses, and custom development services through our website at byteroot.dev.

Questions about this policy: support@byterootllc.com

We collect only what is necessary to operate our services:

• Account data: name, email address, encrypted password (if using email sign-up), or Discord user ID and username (if using Discord OAuth).
• Purchase data: order history, license keys assigned to your account, and payment metadata from Stripe (we do not store card numbers — Stripe handles all payment data).
• Usage data: pages visited, referring URLs, browser type, and IP address via standard server logs. We do not use third-party analytics trackers.
• Communications: any messages you send us via email or contact forms.

• To create and manage your account.
• To process payments and deliver license keys or services.
• To send transactional emails (order confirmations, license delivery, support replies). We do not send marketing emails without your explicit consent.
• To detect fraud and protect the security of our platform.
• To comply with legal obligations.

If you are in the European Economic Area, we process your data under the following legal bases:

• Contract performance: to fulfil your orders and deliver purchased products.
• Legitimate interests: fraud prevention, platform security, and improving our services.
• Legal obligation: where required by applicable law.
• Consent: for any optional communications you opt into.

We share your data only with the following parties and only to the extent necessary:

• Stripe, Inc. — payment processing. Stripe's privacy policy: stripe.com/privacy.
• Discord, Inc. — if you sign in via Discord OAuth. Discord's privacy policy: discord.com/privacy.
• Hosting providers — our infrastructure providers (e.g. Vercel) process data under data processing agreements.

We do not sell, rent, or trade your personal data to any third party for marketing purposes.

We retain account and purchase data for as long as your account is active, and for up to 7 years after account closure for legal and tax compliance purposes. Server logs are retained for up to 90 days.

Depending on your jurisdiction, you may have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate data.
• Request deletion of your data ("right to be forgotten"), subject to legal retention requirements.
• Object to or restrict certain processing.
• Data portability (receive your data in a machine-readable format).

To exercise any of these rights, email us at support@byterootllc.com. We will respond within 30 days.

We use a single session cookie set by NextAuth.js to keep you logged in. We do not use advertising cookies, cross-site tracking cookies, or third-party analytics cookies.

Passwords are hashed using bcrypt before storage. All data in transit is encrypted via TLS. We apply access controls and regularly review our security practices. However, no system is 100% secure — if you discover a vulnerability please contactsupport@byterootllc.com.

Our services are not directed at children under 13. We do not knowingly collect data from children. If you believe a child has provided us with their data, please contact us and we will delete it promptly.

We may update this policy from time to time. We will post the updated version on this page with a revised "last updated" date. Continued use of our services after changes constitutes acceptance of the updated policy.

Byteroot LLC
1209 Mountain Road PL NE STE N, Albuquerque, NM 87110, USA
EIN: 35-2959507
support@byterootllc.com