Privacy Policy

Effective Date: May 24, 2025.

Yottabyte Studio https://yottabyte.studio

1. Who We Are

We are Yottabyte Studio, an independent web studio and technology platform providing digital product development services for businesses.

2. What data we collect

When ordering a service:

  • First and last name

  • Company name

  • Email and phone number

  • Order information

  • Legal data (to form a contract)

When using personal account:

  • Authorization data (email, password hash)

  • IP address and technical metadata (browser, device)

  • History of orders and transactions

  • API-keys and actions on them

Automatically:

  • Cookies (minimally - only technical)

  • Session logs for protection and diagnostics

3. How we use data

  • To provide and improve our services

  • For internal analytics and statistics

  • For legal compliance (e.g. accounting and taxation)

  • For security and abuse prevention

4. Data Security

  • All data is transmitted over HTTPS.

  • API is protected from CSRF attacks.

  • Authorization is via JWT and session cookies.

  • Access to data is role-based (RBAC).

  • Passwords are stored in hashed form only (bcrypt).

  • Payment data is processed via third-party payment systems (WayForPay, Stripe) - we do not store card data.

5. Third Parties

We do not share your data with third parties, with the exception of:

  • Payment processors (for transaction processing only)

  • Public authorities (only by law)

6. Data Storage

  • Your data is stored on secure VPS servers in the EU.

  • We do not store data for longer than is necessary to provide services and comply with legal obligations.

7. Your rights

You can:

  • Request access to your data

  • Correct or delete them

  • Withdraw your consent to processing

  • Receive a copy of your data in machine-readable format (on request)

To do this, email us at: info@yottabyte.studio

8. Updates.

We may update this policy. All changes will be posted on this page.
The latest revision is May 24, 2025.