The short version
- We collect only what you choose to send us through our enquiry forms, plus basic technical data our servers need to deliver and protect the site.
- We do not sell personal information, and we do not run advertising or cross-site tracking on this website.
- Optional analytics and marketing-attribution storage run only if you click Accept on the cookie banner. You can change your mind at any time from "Cookie settings" in the footer.
- Enquiries are researched and categorised with the help of AI (Anthropic’s Claude, using public web search) and then handled by a person. No decision that significantly affects you is made by automated means alone.
- You can ask us to access, correct, delete or export your information, object to or restrict its use, or withdraw consent, using the contact details at the end of this policy.
This summary is for convenience. The full text below is what applies.
1. Who we are and what this policy covers
This website, bytecues.com (the “Site”), is operated by [PLACEHOLDER: ByteCues legal entity name] (“ByteCues”, “we”, “us”, “our”), [PLACEHOLDER: registered address]. For the personal information described in this policy, ByteCues is the “data controller” under the EU and UK GDPR and the “data fiduciary” under India’s Digital Personal Data Protection Act, 2023 (“DPDP Act”).
ByteCues is a technology company that builds the DashCues, RecruitCues and WealthCues platforms. This policy applies to the Site and to the way we handle enquiries, partnership, investor, media and careers contacts that arrive through it. Each platform runs its own website and its own privacy notice, which governs the information you give to that product. This policy does not cover those sites or any third-party site we link to.
If you are a visitor, a prospective customer, partner, investor, journalist or job-seeker who contacts us, this policy is for you.
2. Information we collect
2.1 Information you give us
When you submit one of our enquiry forms (general contact, sales, enterprise, partner, investor, media or careers), we collect the fields on that form and anything you write in it:
- Identity and contact details: your full name and work email address.
- Organisation details: company or organisation name, your role, company size, company website, outlet or publication (for media), partnership type.
- Interest and context: the platform you are interested in, any deadline you mention, a LinkedIn or portfolio link (careers), and the message you write.
- Anything else you choose to include in free-text fields. Please keep messages to what is needed: do not send passwords, financial-account details, government identity numbers, health information or other sensitive data, and do not send personal information about other people unless you are entitled to do so.
2.2 Information collected automatically
- Server logs. Like every website, our web server records the IP address, date and time, requested address (URL), response status, size, referring page and browser/user-agent string of each request. These logs are used for security, abuse prevention and reliability.
- Form-submission metadata. When you send a form we also record the page you submitted it from, your browser’s user-agent string (truncated) and a one-way cryptographic hash of your IP address. The hash lets us spot abuse and duplicates without storing your raw IP address alongside your enquiry.
- Your cookie choice. We store your Accept/Decline preference in your browser so we do not ask you again (see our Cookie Policy).
2.3 Information collected only with your consent
- Marketing attribution. If you accept, we remember how you reached the Site (for example the UTM campaign tags in a link, an advertising click identifier, the referring website and your landing page) in your browser for up to 90 days, and attach it to an enquiry if you send one, so we know which of our activities were useful.
- Product analytics (Google Analytics 4). If you accept, Google Analytics collects pseudonymous information about how the Site is used: pages viewed, approximate location derived from your IP address, device and browser type, and interactions such as clicks on calls to action.
2.4 Information collected without cookies
2.5 Information from other sources
We do not buy personal-data lists and we do not combine the information we collect on the Site with data from data brokers. If you tell us about another person (for example a colleague to contact), we will use their details only for the purpose you gave them for, and you are responsible for having the right to share them. We may also receive information that you choose to make public, for example a business profile you link to in a careers enquiry.
2.6 Sensitive information
We do not ask for sensitive personal data (such as health, biometric, financial-account, caste, religion, political, sexual-orientation or precise-location data) and the Site does not collect it by design. If you include it voluntarily, we will use it only to respond and will delete it when it is not needed.
3. How and why we use your information
We use personal information only for the purposes below. For visitors in the EEA, the UK and Switzerland, the table also shows the legal basis we rely on; for people in India, we rely on your consent or on the “legitimate uses” the DPDP Act recognises (for example responding to a request you made to us).
| Purpose | Information used | Legal basis (GDPR / UK GDPR) |
|---|---|---|
| Respond to your enquiry, arrange a conversation, and follow up | Form fields, contact details, message | Legitimate interests (running our business and answering people who contact us); steps at your request before entering a contract |
| Qualify, route and prioritise enquiries internally, including AI-assisted research and categorisation (see section 5) | Form fields, message, attribution (if consented) | Legitimate interests (handling enquiries efficiently and consistently) |
| Consider partnership, investor, media or careers enquiries | Form fields, message, links you provide | Legitimate interests; for careers, steps at your request and legitimate interests in recruitment |
| Keep the Site secure, prevent spam and abuse, and diagnose faults | Server logs, IP address and hash, user-agent, form metadata | Legitimate interests (security and integrity of the Site); legal obligation where applicable |
| Remember your cookie preference | Consent choice | Legitimate interests / strictly necessary storage (to honour your choice) |
| Understand which marketing activities bring people to the Site | Attribution data (UTM tags, referrer, landing page, ad click ID) | Consent (you can withdraw at any time) |
| Measure and improve how the Site is used | Google Analytics data | Consent (you can withdraw at any time) |
| Back up our systems and recover from failures | All data above | Legitimate interests (resilience and continuity) |
| Comply with law, enforce our terms, and establish, exercise or defend legal claims | Any of the above as necessary | Legal obligation; legitimate interests |
What we do not do
- We do not sell personal information and do not “share” it for cross-context behavioural advertising.
- We do not run advertising pixels, retargeting or social-media tracking tags on the Site.
- We do not use your enquiries or any information collected here to train AI models.
- We do not send marketing email to people who only used a contact form. We will contact you about your enquiry; if we want to send you anything else we will ask first and every message will include an unsubscribe route.
- We do not knowingly collect personal information from children (see section 11).
4. Consent and your choices
Where we rely on consent (marketing attribution and, where enabled, Google Analytics), nothing is stored or loaded until you click Accept on the cookie banner. Declining has no effect on your ability to use the Site or to contact us. You can change or withdraw your choice at any time using Cookie settings in the footer; withdrawing consent does not affect processing that happened before you withdrew it. See the Cookie Policy for details.
5. Automated processing and artificial intelligence
To respond to enquiries quickly and consistently, each enquiry is processed by an automated workflow that runs on our own infrastructure. For sales, enterprise, partnership, investor and general enquiries, that workflow uses Anthropic’s Claude models through Anthropic’s API, with web search, to (a) research the organisation you name from public web sources (its business, size, location and public news), (b) suggest how to categorise and prioritise your enquiry, and (c) record the result with your enquiry in our CRM. Search queries contain the organisation and, where relevant, your name; they do not contain your email address or phone number. Media and careers enquiries are recorded in the CRM without web research.
- A person is always in the loop. The AI output is a suggestion for our staff, labelled in our CRM as AI-generated and unverified. Nothing is sent to you automatically; a member of the team reviews it and decides whether and how to reply.
- No solely automated decisions. We do not make decisions about you that produce legal or similarly significant effects based solely on automated processing, and we do not use this workflow for hiring, credit or similar decisions.
- Limited use. Your submission is used only to produce that research and categorisation. We do not use it to train AI models, and Anthropic receives it as our service provider acting on our instructions. Information found on the web is public information about organisations and, where relevant, a person’s public professional role; it may be incomplete or wrong, which is why a person reviews it.
- You can object. If you would prefer that no AI is used on your enquiry, tell us in your message or contact us and we will handle it manually.
AI can make mistakes. If a reply from us seems wrong or you think information about you has been misunderstood, tell us and we will correct it.
7. International transfers
ByteCues and its service providers may process information in India and in other countries, including the United States, where data protection laws may differ from those where you live. Our database backups are stored in India (AWS Mumbai); the AI triage described in section 5 may be processed by Anthropic in the United States or other countries where it operates.
Where the EU/UK GDPR applies and information is transferred to a country without an adequacy decision, we rely on an approved safeguard such as the European Commission’s Standard Contractual Clauses (and the UK International Data Transfer Addendum or Agreement), together with supplementary measures where needed. Transfers from India are made in accordance with the DPDP Act and any restrictions notified under it. You can contact us for information about the safeguards that apply to your data.
8. How long we keep information
We keep personal information only as long as needed for the purpose it was collected for, and then delete or de-identify it. Our approach by category:
| Information | How long |
|---|---|
| Web server logs | Rotated daily and deleted after about 14 days, unless needed longer to investigate a security incident |
| Enquiry submissions and related records | While we are dealing with your enquiry and for as long afterwards as is reasonably needed to continue a relationship you started, to keep a record of what was agreed, and to meet legal and accounting duties. Enquiries that go nowhere are reviewed and deleted when no longer useful |
| Careers enquiries | For as long as the recruitment need exists; we delete them on request |
| Database backups | Replicated continuously and retained for 30 days; deleted records leave the backups as they age out |
| Automation execution logs | Pruned automatically after a short period |
| Marketing attribution (if you accepted) | Up to 90 days in your browser; the session portion ends when you close the tab |
| Your cookie preference | Until you change it or clear your browser data |
When we need to keep information longer for legal reasons, for example to establish or defend a claim, we keep only what is necessary and restrict access to it.
9. How we protect information
We use technical and organisational safeguards appropriate to the risk, including encryption in transit (HTTPS), restricted access on a need-to-know basis, one-way hashing of IP addresses stored with enquiries, signed internal service calls, rate limiting and bot protection, automatic security updates and off-server backups. Our Security page describes these measures in more detail. No system is perfectly secure; if a breach affecting your personal information occurs, we will notify you and the relevant authorities as the law requires.
10. Your rights
Depending on where you live, you may have some or all of the rights below. We apply the same standard of care to everyone, and we will extend these rights to any visitor where we reasonably can, whatever your location.
10.1 Everyone
- Access the personal information we hold about you and get a copy.
- Correct information that is inaccurate or incomplete.
- Delete your information, subject to legal exceptions.
- Withdraw consent at any time where we rely on it (Cookie settings in the footer, or contact us).
- Object or restrict: ask us to stop or limit certain uses, including AI-assisted triage of your enquiry.
- Not be discriminated against for exercising your rights.
10.2 European Economic Area, United Kingdom and Switzerland
In addition to the above, you may ask us to restrict processing, to port the information you gave us in a structured, machine-readable format, and to object to processing based on legitimate interests (we will stop unless we have compelling grounds or need it for legal claims). You also have the right to lodge a complaint with your local supervisory authority — for example the Information Commissioner’s Office in the UK, or the data protection authority of your EU member state — although we would appreciate the chance to resolve your concern first.
10.3 India (DPDP Act, 2023)
As a data principal you have the right to access a summary of the personal data we process and the identities of those we share it with, to request correction, completion, updating and erasure, to grievance redressal, to withdraw consent, and to nominate another person to exercise your rights in the event of your death or incapacity. Please first raise any grievance with our Grievance Officer, whose details appear in section 14; if it is not resolved you may complain to the Data Protection Board of India.
10.4 California and other US states
If you are a California resident, the CCPA/CPRA gives you the right to know what personal information we collect, use, disclose and (if ever applicable) sell or share; to request deletion and correction; to opt out of the sale or sharing of personal information; to limit use of sensitive personal information; and to be free from discrimination. In the last 12 months we have collected the categories of information described in section 2 (identifiers, contact and professional details, internet activity and inferences limited to enquiry triage) for the business purposes in section 3, and disclosed them to the service providers in section 6. We do not sell or share personal information, and we do not knowingly sell or share the information of anyone under 16. Residents of other US states with privacy laws (for example Colorado, Connecticut, Texas, Virginia, Utah and others) have comparable rights and may appeal a refusal by contacting us with “Appeal” in the subject line.
10.5 Brazil, Canada, Australia, Singapore and elsewhere
Residents of countries with their own privacy laws — including Brazil (LGPD), Canada (PIPEDA and provincial laws), Australia (Privacy Act 1988), Singapore (PDPA), South Africa (POPIA), the UAE and others — have the rights those laws provide, such as access, correction, deletion, portability, information about sharing, and the right to complain to the local regulator. Contact us and we will handle your request under the law that applies to you.
10.6 How to make a request
- Contact us using the details in section 13 and tell us what you would like to do. Please write from the email address you used with us.
- Verification. To protect you, we may ask for information to confirm your identity before we act, and we will use it only for that purpose.
- Agents. You may use an authorised agent; we may ask for proof of authority and verify your identity directly.
- Timing. We aim to acknowledge requests within 10 business days and respond within one month (45 days for California residents), extendable where the law allows if a request is complex; we will tell you if we need longer.
- Cost and refusals. We do not charge a fee unless a request is manifestly unfounded or excessive. If we cannot fully comply we will explain why and tell you how to appeal or complain.
11. Browser signals, children and links
Do Not Track and Global Privacy Control
The Site does not load advertising or cross-site tracking, so there is nothing to opt out of from those signals. Because analytics and attribution storage only run after you click Accept, the Site behaves as though you had declined until you choose otherwise; we do not currently change behaviour specifically in response to “Do Not Track”.
Children
The Site is directed at businesses and professionals and is not intended for anyone under 18 (or the age of majority where you live). We do not knowingly collect personal information from children. If you believe a child has sent us information, contact us and we will delete it.
Links to other sites
The Site links to our platform websites and to other third-party sites. We are not responsible for their privacy practices; please read their notices before giving them information.
12. Changes to this policy
We will update this policy when our practices or the law change. The “Last updated” date at the top shows the current version. For material changes we will give more prominent notice on the Site, and where the law requires it we will ask for your consent again. Earlier versions are available on request.
13. Contact us
Controller / data fiduciary: [PLACEHOLDER: ByteCues legal entity name], [PLACEHOLDER: registered address].
Privacy requests and questions: our contact form (please mention “Privacy” so it reaches the right person)
14. Grievance Officer (India)
In accordance with the Information Technology Act, 2000 and the DPDP Act, 2023, complaints and grievances about the handling of your personal data may be addressed to: the Grievance Officer, through our contact form (please mark your message “Grievance”).
We aim to acknowledge grievances within 24 hours and resolve them within the period prescribed by law (currently within 15 days of receipt under the IT Rules, and within the timeline notified under the DPDP Rules).
Last updated 8 November 2026 (version 1.0). Related: Terms of Use · Cookie Policy · Security.