Privacy Policy

Last updated: August 19, 2026

This Privacy Policy explains how ByteCorp ("we", "us", "our") collects, uses, shares, and protects information when you use BTCMS - our test-case, ticket, and team-communication platform (the "Service"). By using BTCMS you agree to the practices described here.

1. Information we collect

We collect the following categories of information:

Account information - your name, email address, password (stored hashed), profile avatar, and authentication identifiers when you register or sign in (including via single sign-on).
Workspace content - the data you and your team create in the Service: test cases, test runs, tickets, sprints, requirements, comments, mentions, attachments, files, and chat messages.
Usage & technical data - log data such as IP address, browser and device type, pages viewed, actions taken, and timestamps, collected to operate and secure the Service.
Cookies & local storage - strictly necessary tokens used to keep you signed in and remember preferences (e.g. active workspace, theme). We do not use advertising cookies.

2. Google user data

This section discloses how BTCMS accesses, uses, stores, and shares Google user data, as required by Google's API Services User Data Policy.

Access - When you use Google Sign-in, BTCMS receives your Google name, email address, and profile (OpenID). When you connect Google Calendar, BTCMS can create and update calendar events you choose to schedule from BTCMS.
Use - Sign-in data is used only to create or link your BTCMS account and keep you signed in. Calendar event access is used only to create and update events for tickets, sprints, and reminders. BTCMS does not use Google user data for advertising or for selling data.
Store - Account identifiers and email are stored with your BTCMS user record. Calendar tokens are stored encrypted so BTCMS can keep the Calendar connection until you disconnect it. We do not store the contents of your whole Google Calendar.
Share - BTCMS does not sell Google user data. We do not share it with third parties except as needed to operate the Service (for example hosting on Google Cloud Platform) or as required by law.

3. How we use information

Provide, maintain, and improve the Service and its features.
Authenticate you and keep your account and workspaces secure.
Send transactional email (verification, password reset, invitations, notifications) via our email provider.
Respond to support requests and communicate about the Service.
Monitor for abuse, debug issues, and maintain reliability and performance.
Comply with legal obligations and enforce our terms.

4. Legal bases for processing

Where the GDPR or similar laws apply, we process personal data on the bases of: performance of a contract (to deliver the Service you signed up for), legitimate interests (securing, improving, and operating the Service), consent (where required, e.g. optional communications), and legal obligation.

We do not sell your personal data. We share information only with service providers ("sub-processors") that help us run the Service, under agreements requiring them to protect it:

Cloud hosting & storage - Google Cloud Platform, for application hosting, databases, and file/attachment storage.
Email delivery - SendGrid, for transactional email only.
Team communication - our chat pillar is powered by Mattermost for workspaces that enable it.

We may also disclose information if required by law, to protect our rights and users, or as part of a merger, acquisition, or asset transfer (with notice where required).

6. Data retention

We retain your information for as long as your account is active or as needed to provide the Service. Workspace content is retained until you or your workspace administrator deletes it. Some records may be kept longer where required for legal, security, or backup purposes. On account deletion we remove or anonymise personal data within a reasonable period, subject to those obligations.

7. Security

We use industry-standard measures to protect your data, including encryption in transit (TLS), hashed passwords, workspace-level access controls, and role-based permissions. Secrets managed in our Vault feature are encrypted at rest. No method of transmission or storage is 100% secure, but we work continuously to protect your information.

8. Your rights

Depending on your location, you may have the right to access, correct, export, or delete your personal data, to object to or restrict certain processing, and to withdraw consent. To exercise these rights, contact us at the address below. You may also lodge a complaint with your local data protection authority.

9. International data transfers

Your information may be processed and stored in countries other than your own. Where we transfer personal data internationally, we rely on appropriate safeguards such as standard contractual clauses.

10. Children's privacy

BTCMS is a workplace tool not directed to children. We do not knowingly collect personal data from anyone under 16. If you believe a child has provided us personal data, contact us and we will delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we make material changes we will update the "Last updated" date above and, where appropriate, notify you within the Service or by email.

12. Contact us

Questions about this policy or your data? Contact us at info@bytecorp.io.