Privacy Policy

Overview

Byte AI (“Byte,” “we,” “our”) is a free, community-driven email AI assistant. We take your privacy seriously and collect only what's necessary to provide the service.

Information We Collect

When you email byte@firstlyte.co, we receive and process:

• Your email address — used to send replies and manage rate limits.
• Message content — the text of your email, used to generate a response.
• Attachments — images, PDFs, and spreadsheets you send are processed to generate responses. Byte does not persist the raw attachment bytes, but a filename and bounded text excerpt may remain in your 30-day conversation history.
• Operational metadata — subject, delivery outcome, provider used, timing, attachment results, and automated safety or abuse signals used to operate and review the service.

How We Use Your Information

• To generate and send AI-powered responses to your emails.
• To maintain conversation context within threads (stored for 30 days, then automatically deleted).
• To enforce rate limits and prevent abuse.
• To run an automated nightly quality and safety review of active conversations and prepare an operator report. Significant issues may be reviewed by the human operator.
• To improve reliability using operational metrics and error reports.

Data Storage & Retention

Conversation history is stored in managed cloud storage (Upstash Redis) and is automatically deleted after 30 days.

Raw attachment bytes are processed in memory and are not stored by Byte after your response is generated. Resend retains the original email and attachments under its own email-data retention policy, currently 30 days.

Per-email operational events (address, timing, outcome — never message content) expire after 30 days. Daily report snapshots are retained for up to 90 days and longer-term numerical rollups for up to 365 days. A deletion request removes your conversations, related notes, and registry entry immediately; reports and rollups keep a record that someone wrote, under a pseudonym, with your address and content removed. Copies of reports or notifications already delivered to the operator's mailbox may remain under that mailbox provider's retention settings until manually deleted.

Third-Party Services

To provide and operate Byte, data is processed by the following services:

• DeepSeek — the AI provider for Byte. DeepSeek processes all messages and the attachments Byte reads (images, spreadsheet contents, text extracted from PDFs, and images of scanned PDF pages) to generate replies. It also processes conversations during the automated nightly quality review and self-correction, and the operational metadata used to write the daily operator report. This processing happens under DeepSeek's published Open Platform terms, which require downstream services like Byte to disclose this processing and do not provide a default commitment that API inputs will not be used for model training.
• Resend — handles email delivery infrastructure.
• Upstash — provides encrypted cloud storage for conversation history.
• Sentry — captures technical error reports. Sender addresses are hashed before being attached to server-side error context. On the public website, error-only session replay masks all text and blocks media.

Each of these services has their own privacy policies. We encourage you to review them.

Automated and Human Review

Active conversation threads may be read by DeepSeek's API during Byte's nightly automated self-check. The resulting findings and a daily operational report are emailed to the human operator. Reports can include sender addresses, subjects, short evidence excerpts when a response needs review, and messages explicitly addressed to the operator. The operator does not routinely read every email, but may review flagged material to investigate safety, misuse, reliability, or accuracy problems.

What We Don't Do

• We do not sell your data. Ever.
• We do not use tracking cookies or advertising pixels.
• We do not build advertising profiles from your emails.
• We do not share your information with marketers.

Your Rights

You can request at any time:

• Deletion of your conversation history, related correction notes, and sender-registry data — carried out immediately and automatically, with any step Byte cannot confirm reported back to you. Operational records that you wrote (no content) expire within 30 days; reports keep a pseudonymous record. Copies of delivered emails held by Resend, copies sent to the operator, and data retained by AI providers follow those providers' terms and cannot be erased directly by Byte.
• Information about what data we hold about you.

To make a request, email byte@firstlyte.co with the subject line “Privacy Request.”

Changes to This Policy

We may update this policy as the service evolves. Significant changes will be communicated via a notice on this website. Continued use of Byte after changes constitutes acceptance of the updated policy.

Contact

Questions about this policy? Email us at byte@firstlyte.co.