Privacy policy

Account data: name, work email, company and role.

Workspace data: connections, Actions, approvals, evidence and receipts.

Operational data: logs and traces needed to prove what happened and to keep the service running.

Website visits: byom.co counts page visits and waitlist signups on our own server at Cloudflare, without cookies. Each count keeps only the page, the referring site, campaign tags, country and device type. No IP address or identifier is stored in that count. Google Analytics also counts visits to byom.co. It sets cookies in your browser, and Google receives the page you open, how you reached the site, and technical details such as your browser and device. PostHog counts visits too, without cookies and keeping nothing in your browser between visits; PostHog receives the page you open, how you reached the site, technical details such as your browser and device, and the choices made on Talk to Kina, and holds that in the United States.

Job applications: if you apply at byom.co/careers, we keep your name, email, links, what you tell us about something you built with AI, and your CV. The CV sits in private storage that is not public and is not sent by email. We use it only to consider you for work at BYOM. Write to hello@byom.co and we will delete it.

Talk to Kina: what you tell Kina on byom.co/talk (your name, what you do, your store's web address, the problem you pick and what the site read from your store's home page) is kept in our customer records against the store you name, so that Kina can pick up where you left off. If you leave an email to keep the page, that email is kept with it. Nothing is sent to you from it unless you ask.

To run the service you asked for, to prove what changed in your systems, and to meet our obligations to you under contract.

We do not sell personal data and we do not use merchant data to train models shared with other merchants.

Durable data, approvals and receipts are held in the UK. Kina keeps working context for your account.

Receipts are retained for the life of the account so the record of changes stays complete.

Deletion on request. Write to hello@byom.co and we will confirm scope and timing in writing.

Full deletion instructions, including for a connected Meta account, are at byom.co/legal/data-deletion.

Access, correction, export, deletion and objection, as set out in UK GDPR. Requests go to hello@byom.co.