Privacy Policy
1. Data controller
The controller of your personal data is Krzysztof Mosek, trading as ByteLab Krzysztof Mosek, Polish tax ID (NIP): 2530321902, REGON: 360516868, address: ul. Wronia 45 lok. 275, 00-870 Warszawa, Poland. Contact: bytelab@mosek.pl.
2. Data processed
When using the contact form, you provide your name, email address, and message. The hosting provider and Web3Forms may additionally process technical request data, including your IP address, connection date and time, browser type, and information required to prevent abuse.
If you use the ByteBot assistant, the content of your messages, selected conversation language, limited history of the current conversation, and a pseudonymous short-lived session identifier are processed. Cloudflare, which provides Turnstile protection and relays requests to the model, may additionally process technical data such as your IP address, device and browser parameters, timestamps, and information used to detect abuse. Do not enter confidential information, special categories of personal data, or other sensitive information in the chat.
Except for the functions required to operate ByteBot and the contact form, the website does not use analytics or behavioural advertising. Language versions use separate URLs and the language choice is not stored in your browser. Fonts are hosted with the website, so displaying them does not require a request to Google Fonts.
3. Purpose and legal basis
Contact-form data is processed to answer your enquiry and, where relevant, to discuss a potential commercial relationship. Data submitted to ByteBot is processed to generate answers to questions about ByteLab's services, demonstrate the ByteBot solution offered by ByteLab, maintain the context of the current conversation, and protect the service against abuse. Depending on the nature of the contact, the legal basis is Article 6(1)(b) GDPR (steps taken at your request before entering into a contract) or Article 6(1)(f) GDPR (the controller's legitimate interests in answering enquiries, presenting services, and keeping the website secure).
4. Retention
I retain correspondence for no longer than 24 months after the last contact, unless an ongoing relationship or legal obligation requires a longer period. Web3Forms processes data to forward the message; according to its documentation, personal data may appear in server logs that are periodically deleted, currently every two months. If additional submission storage is enabled in the Web3Forms account, the shortest available retention period is used.
ByteLab does not save ByteBot conversation history in a database or application logs. Limited conversation context remains in browser memory only while the page is open, and a pseudonymous session token is stored briefly in the browser's session storage. Requests to OpenAI are sent with store: false so that the application does not create stored response or conversation objects.
According to OpenAI's current documentation, data submitted through the API is not used to train models by default unless the account owner explicitly opts in to data sharing. Data may nevertheless appear in OpenAI abuse-monitoring logs, generally retained for up to 30 days, unless account configuration, security requirements, or legal obligations require otherwise. Cloudflare may retain limited technical and security data for periods determined by the service configuration and its then-current terms. ByteLab limits its own logging to technical information needed for error detection and cost control, without message content.
5. Your rights
You may request access, rectification, erasure, restriction, data portability, or object to processing. You may also lodge a complaint with the President of the Polish Personal Data Protection Office (UODO). To exercise your rights, email bytelab@mosek.pl.
6. Recipients and transfers outside the EEA
Data may be received by the website hosting provider, Web3Forms/Web3Creative as the form processor, the email provider, Cloudflare as ByteBot's security and relay layer, OpenAI as the language-model provider, and their approved subprocessors. Data is shared solely to the extent required to provide those services.
These providers may process data in the United States or other countries outside the European Economic Area. Where required, transfers rely on mechanisms under Chapter V GDPR, such as an adequacy decision, the EU–US Data Privacy Framework where the recipient participates in it, or Standard Contractual Clauses together with appropriate supplementary measures. The applicable mechanism depends on the current configuration, processing location, and status of each provider.
7. Automated ByteBot answers
ByteBot's answers are generated automatically by a language model using the supplied ByteLab context. They may be incomplete or inaccurate and do not constitute a binding offer or legal, financial, or other professional advice. ByteBot does not make decisions that produce legal or similarly significant effects concerning you. For anything that requires confirmation, use the contact form or email bytelab@mosek.pl.
8. Voluntary provision of data
Using ByteBot and providing data through the contact form are voluntary. A chat message is necessary to generate an answer, and the form data is necessary for me to reply to your enquiry. You may instead contact ByteLab directly by email. The checkbox below the form confirms that you have read this policy; it is not separate marketing consent.
9. Changes
This policy may be updated. Last updated: .