Privacy Policy

1. Who We Are (Data Controller)

This Privacy Policy describes how A.L.S.I. Technologies ("we", "us", "our") collects and processes personal data when you use the byiCloud platform at byicloud.com.

Data Controller:
A.L.S.I. Technologies
Jalaka-2, Ala küla, Tõrva vald, 68507, Estonia
Email: info@byicloud.com

As a company registered in the European Union (Estonia), we are subject to EU data protection law including the General Data Protection Regulation (GDPR) (EU) 2016/679.

2. Data We Collect

2.1 Account & Registration Data

• Full name
• Email address
• Company name (if applicable)
• Password (stored in hashed form only)
• Billing address and VAT number (for invoicing)

2.2 Payment Data

We do not store full credit card numbers. Payment data is processed by our PCI-compliant payment processors. We retain transaction IDs, amounts, and dates for billing records.

2.3 Technical & Usage Data

• IP address and device identifiers
• Browser type and operating system
• Pages visited and features used
• Timestamps of access and actions
• API access logs

2.4 Service Data

Data you upload, store, or transmit through byiCloud services ("Customer Data") is processed solely to provide the services. We do not access Customer Data unless required for technical support (with your consent), legal obligations, or security incident response.

2.5 Communications Data

When you contact our support or send us emails, we retain the content of those communications and your contact details.

2.6 Cookies

We use cookies and similar tracking technologies. See Section 9 and our Cookie Policy for full details.

3. How We Use Your Data

Purpose	Data Used	Legal Basis
Providing and managing cloud services	Account, service, technical data	Contract performance
Billing and payment processing	Account, billing, payment data	Contract performance
Customer support	Account, communications data	Contract performance
Security monitoring and fraud prevention	Technical, usage data	Legitimate interest
Service improvement and analytics	Usage, technical data (anonymized)	Legitimate interest
Sending service notifications and updates	Email address	Contract performance
Marketing communications (optional)	Email, name	Consent
Legal compliance and tax records	Billing, transaction data	Legal obligation

4. Legal Basis for Processing (GDPR Article 6)

We rely on the following legal bases to process personal data:

• Contract (Art. 6(1)(b)): Processing necessary to deliver the services you signed up for
• Legal Obligation (Art. 6(1)(c)): Processing required by EU/Estonian law (e.g. tax records)
• Legitimate Interests (Art. 6(1)(f)): Security monitoring, fraud prevention, service analytics
• Consent (Art. 6(1)(a)): Marketing emails, analytics cookies. You may withdraw consent at any time.

5. Data Sharing & Third Parties

We do not sell your personal data. We share data only in these circumstances:

• Service Providers: We use trusted third-party providers for payment processing, email delivery, and infrastructure. These providers act as Data Processors under GDPR contracts and may only use your data to provide services to us.
• Legal Requirements: We may disclose data to comply with legal obligations, court orders, or requests from competent authorities.
• Business Transfers: In the event of a merger, acquisition, or sale, personal data may be transferred. We will notify you before such transfer.
• With Your Consent: We will share data with third parties only with your explicit prior consent.

6. International Data Transfers

We store and process data primarily within the European Economic Area (EEA). A.L.S.I. Technologies is registered in Estonia, an EU member state.

Where any service providers are located outside the EEA, we ensure appropriate safeguards are in place, such as EU Standard Contractual Clauses (SCCs) or adequacy decisions by the European Commission.

7. Data Retention

• Account data: Retained for the duration of your account plus 2 years after closure
• Billing and transaction records: Retained for 7 years (Estonian accounting law)
• Service logs and technical data: Retained for 90 days
• Customer Data (uploaded files/databases): Deleted 30 days after account termination
• Marketing preferences: Until you withdraw consent

You may request deletion of your personal data at any time (subject to legal retention obligations) by emailing info@byicloud.com.

8. Your GDPR Rights

Under GDPR, you have the following rights regarding your personal data:

Opt-Out of Marketing

To opt out of marketing communications, click the "Unsubscribe" link in any email, or email info@byicloud.com with the subject "Opt-Out Request". We will process your request within 5 business days.

Supervisory Authority

You have the right to lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon):
Website: www.aki.ee
Email: info@aki.ee

9. Cookies

We use cookies and similar technologies to operate our website and services. For detailed information about which cookies we use and how to manage them, see our Cookie Policy.

You can manage your cookie preferences at any time through your browser settings or our cookie consent tool.

10. Children's Privacy

Our Services are not directed to children under the age of 16. We do not knowingly collect personal data from children. If we become aware that a child under 16 has provided us with personal data, we will delete it promptly. If you believe a child has provided data to us, please contact info@byicloud.com.

11. Security

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, destruction, or alteration, including:

• TLS 1.3 encryption for all data in transit
• AES-256 encryption for data at rest
• Access controls and role-based permissions
• Regular security audits and penetration testing
• Employee training on data protection

In the event of a personal data breach that poses a risk to your rights and freedoms, we will notify the Estonian Data Protection Inspectorate within 72 hours and affected individuals without undue delay, as required by GDPR Article 33–34.

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. We will notify you of material changes by email and by updating the "Last Updated" date at the top of this page. We encourage you to review this policy periodically.

13. Contact & Data Protection

For any privacy-related questions, requests, or concerns, please contact us:

A.L.S.I. Technologies
Jalaka-2, Ala küla, Tõrva vald, 68507, Estonia
Email: info@byicloud.com

We aim to respond to all privacy inquiries within 5 business days and to complete data subject requests within 30 days as required by GDPR.