Privacy policy

Who we are

Purebyte is a software development business operating from South Africa and serving clients worldwide. Purebyte is responsible for the personal information it collects through this website. For privacy questions or requests, email info@purebyte.co.za.

Information we collect

• Enquiries: your name, email address, selected service, message and consent to respond. If you provide them, we also collect your company, phone number, current tools, budget, timeline and request for a free system map and implementation plan.
• Website operation: technical request information, such as IP addresses, browser details and diagnostic logs, may be processed by our hosting provider. Our form and sign-in protection store hashed identifiers and request counts to limit abuse.
• Admin access: the authorized email address, sign-in challenges, session records and actions such as approving a post. This access is intended for authorized Purebyte staff.
• Publishing: staff-created post text, scheduled times, approval details, publishing results and LinkedIn post IDs.

Please avoid including passwords, access tokens or sensitive personal information in an enquiry. The form identifies required fields; without the required details, we cannot accept a submission.

How we use information

We use enquiry information to respond, understand your requirements, prepare a proposal or requested plan, and manage our business relationship. We use technical and admin information to operate, secure and improve the website and prevent misuse. We also process information when necessary to meet legal obligations or address a dispute. Where applicable, processing relies on your consent, steps toward a contract, our legitimate business interests or a legal duty.

Sending an enquiry does not subscribe you to a marketing mailing list. We do not sell personal information.

Service providers and sharing

Authorized staff can access information needed for their work. Our website uses Vercel for hosting and measurement, MongoDB Atlas for database storage, Resend for enquiry notifications and sign-in emails, and Zoho Mail for our business inbox. Enquiry details are stored in our database and included in email notifications to us.

GitHub Actions runs our company-page publishing worker, which reads approved post content from the database and sends it to LinkedIn. These providers may process information outside South Africa under their applicable service terms and data protection arrangements. Information may also be disclosed where required by law or needed to establish, exercise or defend legal rights.

Cookies and website measurement

Admin sign-in uses an essential session cookie to keep authorized staff signed in. It lasts up to eight hours and is cleared on sign-out. Vercel Web Analytics measures website usage without analytics cookies, and Speed Insights measures page performance. Measurement can include page URLs, referrers, browser or device characteristics and performance timings. We do not intentionally send enquiry form contents to these measurement tools.

Read more about Vercel Web Analytics privacy.

LinkedIn integration

Our internal tool schedules and publishes approved posts to Purebyte’s LinkedIn company page using an authorized account. The current tool does not collect visitors’ LinkedIn profiles, comments or messages, and visitors do not need to sign in with LinkedIn. Approved post content becomes public when published. Credentials are kept in server-side secret settings, rather than public website code.

Authorized staff can cancel queued posts through the dashboard. Removing a published post requires managing it on LinkedIn. An authorizing member can revoke the app’s access through LinkedIn’s account settings. LinkedIn’s own handling of information is described in its privacy policy.

Retention and protection

We retain enquiries and business correspondence for as long as needed to handle the request, manage the relationship and meet applicable legal or record-keeping requirements. Enquiry records do not currently have an automatic deletion period. You can contact us to request deletion, subject to information we need or are required to retain. Provider backups and logs may follow separate retention schedules.

Sign-in codes expire after ten minutes and admin sessions after eight hours. Expiring authentication and rate-limit records are scheduled for database cleanup. Access controls, encrypted connections and server-side secret storage help protect information; no system can guarantee absolute security.

Your choices and rights

Subject to applicable law, including South Africa’s Protection of Personal Information Act (POPIA), you may request access to your personal information, correction or deletion, object to certain processing, or withdraw consent where we rely on it. Withdrawing consent does not undo processing that was lawful before withdrawal.

Send requests to info@purebyte.co.za. We may need to verify your identity before responding. You may also lodge a complaint with South Africa’s Information Regulator.

Changes to this policy

We may update this policy as our services or information practices change. The date above identifies the latest revision.