Privacy policy

This policy explains what personal data ByteKnot Labs LLP collects through ByteMirror and this website, why we collect it, how long we keep it and what rights you have. We are the controller of this data. Our registered office is at [registered office address], India.

It covers the ByteMirror Windows app and its background engine, the ByteMirror source for OBS Studio, the ByteMirror Android app, the iPhone camera page and this website (https://bytemirror.app).

Your phone's video and sound

The video, sound and camera feeds from your phone go straight to your PC, over your USB cable or your local network. They never reach our servers, and we can't see them. The iPhone camera page is served by the ByteMirror app on your own PC, so the camera feed from Safari stays on your network too.

The app keeps its diagnostic logs on your PC. They only reach us if you choose to send them to support.

What we collect

Your account

If you create an account, we store your email address, your name if you give it, how you sign in (email and password, or Google) and which plan you have. If you sign in with Google, Google shares your email address with us, and your name if you allow it. Sign-in is handled by Firebase Authentication.

Purchases

When you buy a plan, Paddle sends us a record of the purchase: the plan, the amounts and dates, the invoice number, and the IDs Paddle uses for you and your subscription. Paddle collects your payment details itself. We never see your full card number.

Signed-in PCs

For each PC you sign in on, we store a device name, a random device ID, the date the PC last checked in and a hash of its sign-in token. This lets us list your PCs on the account page and lets the app check your plan.

Free-plan PCs

On the free plan, the app registers each PC with our servers. It sends a one-way hash of the PC's hardware identifiers and the date ByteMirror was first launched on it. The hash can't be turned back into the identifiers. We use it only to enforce the free plan's 7-day period.

Messages

If you email us, we keep your message and your contact details so we can reply.

Server logs

Our servers log the IP address and user agent of requests from your browser or the app. We use these logs for security and keep them for up to 30 days. To stop the website's forms from being flooded, we also keep a salted hash of your IP address and a count of form submissions for up to 20 minutes.

How we use it

We use personal data only for the purposes below. Laws such as the GDPR require a legal basis for each one, which we give with it.

• To run your account, sell you a plan through Paddle and let the app check your plan. The legal basis is our contract with you.
• To keep our servers and your account secure. The legal basis is our legitimate interest in security.
• To stop the free plan's 7-day period from starting over on the same PC. The legal basis is our legitimate interest in preventing abuse of the free plan.
• To reply to your messages. The legal basis is our legitimate interest in answering people who write to us.
• To keep purchase records for as long as tax law requires. The legal basis is our legal obligation.

Where we ask for your consent, that consent is the legal basis, and you can withdraw it at any time.

We don't use your data for advertising, and we don't sell it. The apps don't send analytics.

Website analytics

To learn which pages and buttons are useful, the website sends a short list of events to PostHog: which page you opened, which buttons you clicked (for example Download or a plan), and whether you sent one of our forms. Each event carries the campaign tags in the link you arrived by, the address of the page that sent you here (without its query string), the first page you opened, your country and which version of a page you saw.

It works without cookies. The website keeps the campaign tags and the first page in your browser's session storage, which is cleared when you close the tab, and PostHog's visitor ID lives only in memory, so reloading the page starts over. Your IP address is used to work out your country. PostHog doesn't store it. When you buy a plan, we tell PostHog which plan you bought, its price, currency and country, under the same anonymous visitor ID, so we can see which pages lead to purchases. We don't send your name, email address or account ID, and we don't record your screen or keystrokes. The legal basis is our legitimate interest in improving the website.

Waitlists and feature interest

If you join a waitlist or tell us you'd use a feature we haven't built, we store your email address, the role and country you pick, what you wrote, and the campaign tags and first page of your visit. We use it only to email you about that product or feature, and we keep it until it launches or we drop it, and for no more than 24 months. The legal basis is your consent, which you give with the checkbox and can withdraw by emailing [email protected].

Cookies

The website uses the cookies and browser storage it needs to keep you signed in, and session storage for the analytics described above, which is cleared when you close the tab. It doesn't use advertising or tracking cookies. If you buy a plan, Paddle's checkout sets its own cookies.

Who we share it with

We use these service providers to run ByteMirror:

• Google, for Firebase Authentication, Cloud Firestore and Firebase App Hosting. Google processes data for us and stores it in the United States.
• PostHog, for the website analytics described above. PostHog stores the events in the [United States or European Union].
• Paddle, for payments. As the merchant of record, Paddle is also a controller of your payment data, which its own privacy policy covers.

We may also disclose personal data when the law requires it. If ByteKnot Labs LLP is merged or sold, personal data may pass to the new owner, and this policy will still apply to it.

Where your data is stored

We're based in India. The data we hold is stored with Google in the United States. When personal data moves out of the European Economic Area, the UK or Switzerland, the transfer is covered by the Standard Contractual Clauses in our agreements with Google and Paddle.

How long we keep it

• We keep account data, including your list of signed-in PCs, until you delete your account.
• We keep purchase records for as long as tax law requires. Paddle keeps the invoices.
• We keep free-plan PC registrations for 24 months after we last see the PC.
• We keep messages for as long as we need them to answer you and deal with any follow-up.
• We keep server logs for up to 30 days.

Your rights

You have the right to:

• Get a copy of the personal data we hold about you
• Have it corrected if it's wrong
• Export it (you can download your data from the account page)
• Have it deleted (you can delete your account from the account page, or email us)
• Object to our use of it where we rely on legitimate interests
• Ask us to restrict how we use it
• Withdraw any consent you've given
• Complain to a data protection authority, such as the one in the country where you live

To use any of these rights, email [email protected]. We may ask you to confirm the request from the email address on your account.

California residents

If you live in California, you have the right to know what personal information we collect and how we use it, to have it corrected or deleted, and not to be treated differently for using these rights. We don't sell or share personal information, as California law defines those terms.

Children

ByteMirror isn't meant for children under 16, and you must be 16 or older to create an account. If you think a child under 16 has given us personal data, email us and we'll delete it.

Changes to this policy

When we change this policy, we update the date at the top. If a change is significant, we'll email account holders before it takes effect.

Grievance officer

Under India's Information Technology Rules, 2011, our grievance officer is [grievance officer's name]. Email [email protected] with "Grievance" in the subject line. We answer grievances within one month.

Contact

For privacy questions or requests, email [email protected]. You can also write to ByteKnot Labs LLP, [registered office address], India.