# Privacy Policy

Last updated: 2026-10-07 · https://topbyte.app/privacy/

This policy explains what we collect, why, where it is kept, for how long, and what you can do about it. It covers the topbyte.app website and summarizes how our products handle data. If a product publishes its own privacy policy, that policy gives the full detail for that product.

## 1. Who is responsible

Top Byte is the controller of the personal data described here.

Contact for privacy questions and requests: [support@topbyte.app](mailto:support@topbyte.app). We reply within 15 working days.

## 2. The short version

- This website sets no cookies and runs no analytics or advertising scripts.
- We collect the minimum each product needs to work.
- We do not sell personal data and we do not show ads.
- We do not use your content to train AI models.
- You can export your content and delete your account at any time.

## 3. This website (topbyte.app)

| Data | Why | Kept for |
|---|---|---|
| Access logs: IP address, time, page requested, browser user agent | Security and debugging | 6 months |
| Emails you send us | To answer you | Until the matter is closed, then up to 24 months |

That is all. There is no sign-up, no contact form, no tracking pixel, and no third-party script on this website.

The website is delivered through Cloudflare, which processes the same request data in order to route traffic and block attacks.

## 4. Our products

### mindb

mindb is a mind map knowledge base. Its full policy is shown inside the app. In summary:

| Data | When | Why |
|---|---|---|
| Account number and password hash | Sign-up | Sign-in. We cannot see your password. |
| Email address | Only if you add one | Password reset |
| Age declaration and its timestamp | Sign-up | Child-protection laws |
| Maps and attachments you save to the server | When you sync after signing in | To make them available on your devices |
| AI usage counts (calls, tokens) | When you use AI features | Usage limits |
| Anonymous usage statistics with a random ID | While you use the app, unless you turn it off | To learn which steps people reach |
| Access logs | Every request | Security and debugging |

- Without an account, mindb keeps your maps on your own device and sends none of them to us.
- The desktop app stores maps as files on your computer. They are sent to us only if you sign in and turn on sync.
- We do not store the content of your AI conversations.
- We do not record or store meeting video, audio, screen sharing, or chat.

### ShipRGB

ShipRGB is an AI image studio with its own website and policies. See the [ShipRGB privacy policy](https://shiprgb.com/privacy).

## 5. AI features

When you use an AI feature, the text or images you submit are sent through our servers to a third-party AI model provider so that it can generate a response. Those providers may process the request in another country. We forward the request and return the result. We keep usage counts for limits and billing; mindb does not keep the content.

Content generated by AI is labeled as AI-generated inside our products.

## 6. Who we share data with

We share personal data only with service providers that we need in order to run our products:

| Provider type | What they handle |
|---|---|
| Hosting provider (Canada) | Servers that store accounts and synced content |
| Content delivery and security network (Cloudflare) | Routing of web traffic, protection against attacks |
| AI model providers | The input you submit to AI features |
| Email delivery provider | Emails we send you, such as password resets |
| Payment provider | Payment details for paid plans. We never see full card numbers. |

We may also disclose data when the law requires it. We do not sell personal data and do not share it for advertising.

## 7. Where data is stored

Our servers are located in **Canada**. If you use our products from another country, your data is transferred to and processed in Canada. AI requests may be processed in the country of the AI model provider.

If we move our servers to another country, we will update this policy first.

## 8. How long we keep data

- Account and synced content: until you delete your account.
- After account deletion: 30 days, so that you can change your mind, then permanent deletion.
- AI usage records: 12 months.
- Access logs: 6 months.
- Anonymous usage statistics: 24 months.
- Backups: up to 7 days after the data they contain is deleted.

## 9. How we protect data

- All traffic uses HTTPS.
- Passwords are hashed with bcrypt. Sign-in tokens are stored only as hashes.
- Access to servers is limited to the people who operate them and is monitored for unusual sign-ins.
- Data is backed up daily.
- If a breach affects your personal data, we will tell you without undue delay and report it to authorities where the law requires.

## 10. Your rights

Wherever you live, you can:

- **Access and export** your content from inside each product.
- **Correct** your account details.
- **Delete** your account and its data.
- **Object or withdraw consent**, for example by turning off usage statistics.
- **Complain** to us, and to your local data protection authority.

If you are in the European Economic Area, the United Kingdom, or Switzerland, these are your rights under the GDPR and equivalent laws. Our legal bases are: performing our contract with you (accounts, sync, paid plans), our legitimate interest in keeping the service secure and understanding how it is used (logs, anonymous statistics), your consent where we ask for it, and legal obligations.

If you are a California resident, you have the right to know, delete, and correct your personal information, and not to be discriminated against for using these rights. We do not sell or share personal information as those terms are defined in California law.

To use any of these rights, email [support@topbyte.app](mailto:support@topbyte.app) from the address linked to your account, or include your account number.

## 11. Children

- We do not knowingly collect personal data from children under 13.
- mindb does not allow account creation by users under 14. Children can use mindb without an account, in which case nothing they create is sent to us.
- If you believe a child has given us personal data, contact us and we will delete it.

## 12. Changes to this policy

The date at the top of this page shows the latest version. If a change is significant, we will tell you inside our products or by email before it takes effect.

## 13. Contact

[support@topbyte.app](mailto:support@topbyte.app)