Privacy policy

CloudByte AI ("CloudByte", "we", "us") operates this website and provides the CloudByte AI platform, an observability and governance platform for engineering teams that use AI coding tools.

For any question about privacy or this policy, email hello@cloudbyte.ai.

This policy explains how we handle personal data when you visit our website, contact us, request a demo, start a free plan or trial, or apply for the startup plan. It also explains how the CloudByte AI platform processes data on behalf of the organizations that use it.

When you fill in a form on this website we collect the details you enter, such as:

• your name, work email address, company and role;
• your team size, preferred plan and preferred workspace subdomain;
• for startup applications, your website, founding year, funding range and developer count;
• anything you write in a message field.

We use these details to reply to you, set up the workspace you asked for, schedule a demo, or review an application.

We measure how this website is used with privacy-friendly, cookieless analytics. It counts page views and records the referring site and approximate country, browser, operating system and device type. It does not use cookies and does not build profiles of individual visitors.

When we email you, for example to reply to a form submission, our email provider may record whether a message was delivered, opened or clicked. We use this to confirm that messages arrive and to improve them. You can ask us to stop emailing you at any time.

When an organization uses the CloudByte AI platform, the CloudByte agent on each developer machine collects a fixed set of data and sends it to that organization's workspace:

• prompts, tool observations, session details and session summaries from Claude Code, Cursor and GitHub Copilot;
• git commit metadata (SHA, message, author and diff stats) and, for AI summaries, the commit diff, which is deleted after 5 days;
• pull request details, token usage, CLAUDE.md compliance, skills usage and agent heartbeats.

The agent does not collect source code files, keystrokes or environment variables. We process this data on behalf of the customer organization, which decides who is monitored, who can see the data and how long it is kept. If you are a developer whose organization uses the CloudByte AI platform, please contact your organization with questions about your data.

• to provide, operate, secure and support the CloudByte AI platform;
• to respond to enquiries, demo requests and applications;
• to understand how our website and product are used so we can improve them;
• to meet legal obligations and enforce our terms.

Where data protection laws such as the GDPR apply, we rely on the performance of a contract (providing the service you signed up for), our legitimate interests (responding to enquiries, securing and improving our services), your consent where we ask for it, and compliance with legal obligations.

We do not sell personal data. We share it only with service providers that help us run our services, such as hosting, infrastructure and email delivery providers, under contracts that limit how they can use it.

AI features such as commit summaries send the minimum data needed, for example a commit diff, to the AI provider configured for the customer organization, such as the organization's own Anthropic account when it brings its own key. We may also disclose data where the law requires it.

We keep website enquiries for as long as we need them to respond and to maintain our relationship with you. In the CloudByte AI platform, retention follows the customer's plan: 7 days on Free, 90 days on Starter, unlimited on Team, and a custom policy on Enterprise. Commit diffs used for AI summaries are deleted after 5 days.

Customer data is isolated per organization and per project, access is enforced on the server with role-based permissions, and API keys and bring-your-own-key credentials are encrypted at rest with AES-256-GCM. Read more on our security page.

Our service providers may process data outside your country. Where data leaves the European Economic Area or the United Kingdom, we use appropriate safeguards such as the European Commission's standard contractual clauses.

Depending on where you live, you may have the right to access, correct or delete your personal data, to restrict or object to its processing, to receive a copy of it, and to withdraw consent at any time. You also have the right to complain to your local data protection authority.

To exercise any of these rights, email hello@cloudbyte.ai.

Our website and services are built for businesses and are not directed at children under 16.

We may update this policy from time to time. When we do, we will change the date at the top of this page, and for significant changes we will give more prominent notice.

CloudByte AI · hello@cloudbyte.ai