Privacy Policy

Information We Collect

Personal Information You Provide

We collect information you voluntarily provide to us, including:

• Name, email address, phone number, and company information
• Project requirements, preferences, and specifications
• Content, images, and materials you provide for projects
• Communication history and feedback
• Payment and billing information (processed securely through third-party providers)

Automatically Collected Information

• Website usage data, including pages visited and time spent
• Device information (browser type, operating system, IP address)
• Cookies and similar tracking technologies
• Analytics data to improve our website and services

Formation Engine Websites and Advertising

For certain website plans generated by our Formation Engine, we may display third-party advertising (for example, Google or Meta adverts) on sites that we host and manage. Where this is the case, we only use the minimum information necessary to serve, measure, and safeguard those adverts, and we do not sell your visitors' personal data to advertisers.

These advertising technologies may rely on cookies, pixels, or similar identifiers. Visitors can manage their preferences via the cookie banner and browser controls, and ad-free plans are available where you prefer a website without any third-party advertising.

How We Use Your Information

We use your information to:

• Provide account access, client projects, contact management, email, meeting scheduling, social publishing, advertising tools and our design and development services
• Communicate with you about projects, updates, and support
• Process payments and manage billing
• Improve our website, services, and user experience
• Send newsletters and marketing communications (with your consent)
• Comply with legal obligations and protect our rights
• Analyse usage patterns to enhance our offerings

Information Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

• Service Providers: With trusted third-party providers who assist in delivering our services (hosting, payment processing, analytics)
• Legal Requirements: When required by law, court order, or to protect our rights and safety
• Business Transfers: In connection with mergers, acquisitions, or asset sales
• With Your Consent: When you explicitly authorise us to share specific information

Data Security

We implement appropriate technical and organisational security measures to protect your personal information against unauthorised access, alteration, disclosure, or destruction. These measures include:

• Encryption of sensitive data in transit and at rest
• Regular security assessments and updates
• Access controls and authentication procedures
• Secure backup and recovery systems

Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your browsing experience, analyse website traffic, and understand user preferences. You can control cookie settings through your browser preferences.

Third-Party Services

Our website and services may integrate with third-party platforms, including:

• Payment processors for secure transaction handling
• Analytics services (such as Google Analytics) for website improvement
• Email marketing platforms for newsletters and communications
• Cloud storage services for project file management

These third parties have their own privacy policies, and we encourage you to review them.

Your Rights and Choices

You have the right to:

• Access, update, or delete your personal information
• Opt out of marketing communications
• Request data portability or restriction of processing
• Withdraw consent where processing is based on consent
• Lodge a complaint with relevant data protection authorities

Data Retention

We retain your personal information for as long as necessary to provide our services, comply with legal obligations, resolve disputes, and enforce our agreements. Project-related data is typically retained for the duration of the project and a reasonable period thereafter for support and warranty purposes.

International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place to protect your data in accordance with applicable privacy laws.

Google API Services User Data Policy

ByVeya uses Google OAuth APIs to provide integrated services such as email synchronization, calendar management, and advertising analytics. ByVeya's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

Data accessed and why

Google connections use OAuth: Google asks you to authorise permissions and gives ByVeya access tokens, rather than your Google password. The data available depends on the permissions you grant and the features you use:

• Google account: account identifier, name, email address and profile picture identify your account and connected services.
• Gmail: message content, subjects, senders, recipients, attachments and mailbox information support inbox synchronisation, reading, sending and organising business email.
• Google Calendar: calendars, availability, event details and attendees support scheduling, updating meetings and creating Google Meet links.
• Google Meet: conference details, participants and available recordings and transcripts support meeting records, summaries and follow-up action items.
• Google Drive: files you select or make available to the app, their metadata and contents support document import and attachment workflows; Meet-related file access retrieves available meeting recordings and transcripts.
• YouTube: channel and video details, uploaded video files, publishing settings, comments and performance metrics support publishing and channel management. Revenue metrics are available when you grant the additional analytics permission.
• Google Ads: advertising account identifiers, campaigns, assets, budgets and performance reports support campaign management and reporting.
• Search Console and Google Analytics: connected properties, search queries, traffic and performance reports support SEO and website reporting.
• Google Business Profile: business locations, profile information, posts and reviews support managing your business presence and review replies.
• Google Contacts: names, email addresses, phone numbers and contact records support synchronising business contacts with your workspace.

AI-assisted features

Features such as meeting summaries, action-item extraction and reply drafting can process relevant content through our AI service providers. For example, meeting intelligence processes transcript text to produce notes and follow-up tasks. This is processing to deliver the feature, not training a general-purpose AI model. Our commitment is not to use Google user data to train general-purpose AI or machine-learning models.

Use, sharing and human access

We use Google user data to provide the connected features described above. Hosting, storage and feature-processing providers process relevant data to deliver those services. Content you send, publish or share is disclosed to the recipients, platforms or workspace collaborators involved in that action. We do not sell Google user data or use it for personalised advertising, retargeting, data brokerage or creditworthiness decisions. The advertising and business-transfer provisions elsewhere in this policy do not override these Google data restrictions.

Transfers of Google user data are limited to delivering or improving appropriate user-facing features with your consent, security purposes, legal requirements, or a business transfer with your prior explicit consent. Human access is limited to your affirmative agreement to review specific data, necessary security investigations, legal obligations, or aggregated data used internally as permitted by Google's Limited Use rules.

Storage and protection

We store connection identifiers, granted permissions, access and refresh tokens, and data needed for the connected features in our hosted systems. Depending on your use, stored records can include synchronised messages, contacts, meeting records, imported documents, publishing records and reporting data. HTTPS protects data in transit; authentication, server-side authorisation and database access controls restrict access to stored data. Access tokens allow background synchronisation while the connection remains authorised.

Retention, revocation and deletion

We retain connection data while needed to operate the services you use. Saved content and business records may remain until you delete them or request deletion, even after a connection is removed. Revoking access stops future authorised Google API access; it does not itself delete previously imported records or content already sent to recipients or published on Google.

You can remove ByVeya's access through your Google Account connections and use the disconnect controls provided by the relevant ByVeya integration. To request deletion of stored Google data, including tokens, imported content and derived records, email hello@byveya.com or follow our account deletion instructions. We verify your identity before acting on requests. Where legal, security or dispute-resolution obligations require retention, we restrict the retained information to that purpose. Backup copies may remain until the applicable backup retention cycle expires. Deleting ByVeya data does not delete your Google account.

Children's Privacy

Our services are not intended for children under 16 years of age. We do not knowingly collect personal information from children under 16.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of significant changes by posting the updated policy on our website and updating the "Last updated" date.

Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

• Email: hello@byveya.com
• Address: Office 6288 58 Peregrine Road, Ilford, England, IG6 3SZ
• Company Number: 15702190
• Website: Contact Form