1. Introduction & Overview
This Privacy Policy describes how BitByte Factory ("we", "us", or "our"), operated by Rohan Ghatage, collects, uses, processes, and safeguards the personal and technical data of visitors, clients, and end-users who interact with our website (www.bitbytefactory.com), our custom web applications, our WhatsApp bot automations, and related engineering services.
We comply with applicable global and domestic data privacy frameworks including the Digital Personal Data Protection Act (DPDPA), 2023 (India), the General Data Protection Regulation (GDPR) (EU/EEA), the California Consumer Privacy Act (CCPA), and official Meta Platform Developer Policies for WhatsApp Cloud API and Instagram Graph API integrations.
2. Data Controller Contact Information
If you have questions, inquiries, or wish to exercise your data subject rights, you may contact our designated Data Protection Representative:
- Entity: BitByte Factory
- Lead Architect: Rohan Ghatage
- Direct Email: contact@bitbytefactory.com
- Official Phone: +91 7875329992
- Website: www.bitbytefactory.com
3. Categories of Data We Collect
We only collect data strictly necessary to fulfill our engineering contracts and provide our automation tools:
A. Information You Provide Directly
- Identity & Contact Details: Full Name, Email Address, WhatsApp Phone Number, Business / Clinic / Brand Name.
- Operational Workflow Specifications: Information about your business bottlenecks, inventory volume, team headcount, and scheduling requirements submitted through our contact forms or onboarding simulator.
- Client Invoicing Data: Billing address, GST number (where applicable), and transaction records.
B. Automated Messaging & Meta API Integration Data
- WhatsApp Cloud API Logs: Recipient phone numbers, timestamp records, message delivery/read statuses, and appointment booking selections processed via webhook endpoints.
- Instagram Graph API Interactions: Public user handles who comment on authorized posts requesting automation lead magnets, and delivery confirmation of direct messages.
C. Technical & Diagnostic Telemetry
- Server Telemetry: IP addresses, browser types, device screen resolutions, operating system versions, and anonymized page performance timings.
- Performance Cookies: Session tokens necessary for persistent user sessions and responsive UI rendering. We do NOT use invasive cross-site tracking cookies.
4. Legal Basis & Purposes for Processing
We process your data under the following lawful grounds:
| Purpose of Processing | Legal Basis | Categories of Data |
|---|---|---|
| Delivering custom software, CRM dashboards & WhatsApp bots | Performance of Contract | Contact, Business & Messaging Data |
| Simulating live interactive AI WhatsApp flows on onboarding page | Explicit User Consent | Transient Form Inputs |
| Responding to consultation & architecture inquiries | Legitimate Interests | Contact & Requirement Details |
| Invoicing, tax compliance, and financial bookkeeping | Legal Obligation | Billing & Transaction Records |
| Guaranteed 99.9% server uptime and threat mitigation | Legitimate Interests | Technical IP & Access Logs |
5. Third-Party Infrastructure & Sub-Processors
BitByte Factory works exclusively with world-class, SOC-2 and ISO-27001 certified cloud infrastructure providers. We never sell, rent, or monetize your data.
- Meta Platforms Ireland / Inc.: Official WhatsApp Cloud API and Instagram Graph API processing.
- Amazon Web Services (AWS) & Cloudflare: Secure server hosting, SSL encryption, and Edge CDN caching.
- Razorpay / Stripe: PCI-DSS Level 1 compliant payment gateway processing. (We never store raw credit/debit card numbers).
6. Data Retention Schedule
We retain data only as long as required to serve its business and legal purpose:
- Consultation Requests: Retained for 12 months after resolution, or purged immediately upon request.
- Active Client Code & Databases: Maintained for the duration of the active maintenance SLA + 7 years for financial records.
- WhatsApp / Bot Messaging Logs: Transmit logs are automatically rotated and purged after 90 days.
- Simulator Inputs: Client-side simulated inputs are processed locally in your browser and are not permanently logged to external databases.
7. Your Statutory Data Protection Rights
Depending on your jurisdiction (India, EU, UK, US, etc.), you are entitled to the following rights:
- Right to Access: You may request a machine-readable copy of any personal information we hold about you.
- Right to Rectification: You may request immediate correction of inaccurate or incomplete records.
- Right to Erasure ("Right to be Forgotten"): You may request full permanent deletion of your data. (See our dedicated Data Deletion Instructions).
- Right to Withdraw Consent: You may opt-out of marketing communications or WhatsApp notifications at any time.
8. Security Architecture
We employ defense-in-depth technical safeguards including 256-bit TLS/SSL encryption in transit, AES-256 encryption at rest, role-based access control (RBAC), and automated daily snapshot backups.
9. Amendments & Policy Updates
We may update this Privacy Policy from time to time to reflect evolving regulatory requirements or new service features. Material updates will be highlighted on this page with an updated revision date.
10. Inquiries & Data Rights Requests
To exercise any of your privacy rights or submit an inquiry, please contact our team directly at contact@bitbytefactory.com or message us on WhatsApp at +91 7875329992.