Privacy Policy
1. Who this policy covers
This Policy explains how Bytora Limited handles personal information for bytpos.com and the Bytora business-management mobile application. It covers account holders, staff and people whose information is submitted to a company workspace. Contact support@bytora.tech, or alternatively bytoratech@gmail.com, with privacy questions or requests.
2. Our role and your company’s role
Bytora determines how account registration, authentication, service security and administration are handled. For business records entered by a tenant company, that company generally determines why the records are collected and how they are used; Bytora processes them to provide the service. The precise responsibilities depend on the activity and applicable law. If your employer or another business entered information about you, you may need to contact that business as well as Bytora.
3. Information you provide
Registration collects your name, company name, email address, password and acknowledgement of the signup terms. Passwords are stored as hashes rather than readable passwords. Depending on enabled modules and what a company submits, its workspace can contain customer and supplier contacts, transactions, invoices, bank-account details, employee and payroll records, tax or company identifiers, project activity, uploaded documents, signatures and correspondence. Some records may be sensitive; companies should submit only information they are authorized to process and actually need.
4. Information generated by the service
The service processes authentication tokens, email-verification status, permissions, plan entitlements and company branding. Server and security records may include request times, IP addresses, device or browser information, errors and access activity. Verification codes are temporary and are checked against a stored hash. Optional integrations generate additional records relevant to the functions you enable.
5. Why information is used
We use information to register and verify accounts; provide company workspaces and their selected features; apply tenant and staff access controls; display company branding; process requested documents and reports; deliver operational emails; investigate errors and misuse; respond to support and privacy requests; and meet applicable legal obligations. We do not treat acceptance of the Terms as permission for unrelated marketing. Where a processing activity requires separate consent, that consent must be obtained separately.
6. Legal grounds and company responsibilities
Personal information must be handled on a lawful basis under applicable data-protection law. Depending on the activity, this may involve necessary service administration, legal obligations, other lawful grounds available under Jamaican law, or specific consent. Tenant companies are responsible for providing notices and obtaining permissions required for their own staff, customer and other business records. Withdrawing optional consent does not necessarily require deletion of information that must still be retained on another lawful basis.
7. Who may receive information
Information is available to authorized users of the relevant company according to their permissions. Hosting, storage, email and other service providers may process information needed to operate the service. Data may also be exchanged with an integration you choose, professional advisers where needed, or authorities where disclosure is lawfully required. We may disclose information as necessary to investigate misuse, protect rights or handle a lawful business transfer, subject to applicable safeguards. We do not make company workspaces public by default.
8. Storage and international processing
Information is held on the systems used to deliver the service, including hosting and email infrastructure and any optional providers used for a selected feature. Provider locations and processing arrangements may involve countries outside Jamaica. International transfers are subject to applicable Jamaican data-protection requirements. Contact us for details relevant to your workspace or a proposed integration; do not assume that every record is stored only in Jamaica.
9. Retention and deletion
Account and business records are retained while the account or workspace exists and until a verified deletion request is processed, except where continued retention is required or justified for legal, accounting, security or dispute purposes. Closing an account does not automatically erase its records. A single fixed automatic deletion period is not currently applied to every category of data. Residual copies may remain in backups until those copies are overwritten or removed. Contact us for the retention position and deletion options for a specific category; tenant-controlled records may require instructions from the relevant company.
10. Security and shared workspaces
The service uses HTTPS for application API connections, hashed passwords, authenticated sessions and tenant/permission checks. The mobile app stores its session credential using platform-protected storage. These measures reduce risk but cannot guarantee that unauthorized access or loss will never occur. Protect your device, use a strong password, limit staff access and report suspected compromise. A company administrator can control staff access to its workspace.
11. Cookies, device permissions and integrations
The website uses browser storage and cookies for relevant session and service functions. The mobile app uses local device storage for session credentials and preferences. Document, photo, camera or similar access is associated with features you choose to use and remains subject to device permissions. Optional third-party services may have their own storage, permission and privacy practices. Review their notices before connecting them.
12. Your rights and how to make a request
Subject to applicable law, you may request information about processing, access to your personal data, correction of inaccurate records, and restriction, objection or deletion where those rights apply. You may also withdraw consent for optional processing based on consent. Send a request to support@bytora.tech or bytoratech@gmail.com, identifying the relevant account or company and the request. Do not email passwords, verification codes or unnecessary identity documents. We may verify identity and authority before responding. We will explain if an exemption, another company’s control of a record, or a legal obligation affects the request.
13. Complaints and children
Raise privacy concerns with Bytora using the contact details above. You may also contact Jamaica’s Office of the Information Commissioner at https://oic.gov.jm about rights and complaints under Jamaican data-protection law. The service is intended for business users, not for children to create personal accounts. Business users remain responsible for the lawful handling of any information about minors that they submit as part of legitimate records.
14. Changes and contact
This Policy is dated and versioned. We will update it when material changes to the service or its data handling require an update, and use reasonable service or account notices for significant changes. Bytora Limited is the service operator. Public privacy and support contact: support@bytora.tech. Alternative contact: bytoratech@gmail.com.
Contact: support@bytora.tech · bytoratech@gmail.com