Privacy Policy
Last updated: 11 Juli 2026
1. Introduction
At DataByte AI, we take your privacy seriously. This Privacy Policy outlines how we collect, use, disclose, and safeguard your information when you access our platform, API services, AI Studio, managed Hermes AI Agents, and other associated offerings.
By utilizing DataByte AI, you consent to the data practices described in this policy. If you disagree with any aspect of this policy, we encourage you to discontinue use of our services immediately.
2. AI Conversation Storage & Third-Party Providers
DataByte AI does not store your conversations with AI. Your messages, prompts, and interactions with our AI services are processed in real-time and are not persisted to DataByte AI servers after the request is completed. DataByte AI has no access to, nor does it retain, the content of your conversations with AI.
DataByte AI operates as an API gateway that routes requests to underlying third-party AI model providers (including but not limited to MiniMax, DeepSeek, Anthropic, OpenAI, and other integrated model vendors). Each provider operates under its own independent privacy policy, data processing rules, and terms of service distinct from DataByte AI.
3. Information We Collect
Account Information
When you establish a DataByte AI account, we gather:
- Email address utilized for account creation and transactional communications
- Name and profile particulars you voluntarily provide
- Billing and payment information processed securely through established payment gateways
- Communication preferences and support interaction records
Usage and Technical Data
Our systems automatically gather technical information to enhance service quality:
- API request logs and consumption metrics for billing and optimization purposes
- Service performance indicators and diagnostic information
- Device specifications, browser characteristics, and connection parameters
- IP addresses and inferred geographic location data
- Interaction patterns with AI Agents and conversational histories
4. How We Utilize Your Information
The data we gather serves multiple operational purposes:
- Delivering, sustaining, and progressively enhancing our AI services and infrastructure
- Processing financial transactions and administering your account balance
- Dispatching transactional notifications, service announcements, and security advisories
- Responding to support inquiries and providing technical assistance
- Analyzing behavioral patterns to refine our platform and develop new capabilities
- Detecting and preventing fraudulent activities and ensuring platform integrity
- Fulfilling statutory and regulatory compliance obligations
- Managing Hermes AI Agent instances on your behalf
5. Data Retention
We retain your personal information exclusively for the duration necessary to fulfill the objectives outlined in this policy. Specific retention periods are governed by:
- The operational requirements of the specific service you utilize
- Applicable legal and regulatory mandates
- The resolution of pending disputes or enforcement actions
- Authentic business requirements with legitimate justification
Upon account closure or data deletion request, we will remove your personal information from our active systems, with customary exceptions for archived records maintained solely for legal compliance purposes.
6. Information Sharing and Disclosure
We maintain strict protocols regarding your data. Your personal information is never sold to third parties. Disclosure may occur solely under these circumstances:
Service Providers
We engage trusted third-party vendors for payment processing, cloud infrastructure, and customer support tools. These entities are contractually restricted from utilizing your data for purposes beyond delivering services to DataByte AI.
Legal and Regulatory Requirements
Information may be disclosed when legally compelled by court order, governmental authority, or applicable Indonesian law.
Business Transitions
In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of the transaction, subject to the acquiring party honoring this Privacy Policy.
Safety and Protection
We reserve the right to disclose information when necessary to protect the rights, property, or safety of DataByte AI, our users, or the general public.
7. Data Security
We implement comprehensive technical and organizational safeguards to protect your data:
- AES-256-GCM encryption for sensitive data including bot tokens and authentication credentials
- TLS encryption for all data transmitted over networks
- Periodic security audits and vulnerability assessments
- Role-based access controls and authentication protocols
- Secure, geographically distributed data center infrastructure
- MFA support for enhanced account protection
While we employ rigorous security measures, no digital transmission or storage system can guarantee absolute invulnerability. We encourage users to maintain strong password practices and enable two-factor authentication.
8. Cookies and Tracking Technologies
We deploy cookies and analogous tracking technologies to optimize your experience:
- Preserving session state and authentication across page navigations
- Remembering user preferences and interface customizations
- Analyzing platform traffic, usage trends, and performance metrics
- Facilitating personalized content delivery and feature recommendations
- Implementing security measures including bot detection and fraud prevention
You retain control over cookie preferences through your browser settings. Disabling cookies may diminish certain platform functionalities.
9. Your Rights
You possess the following entitlements regarding your personal data:
- Access: Obtain a comprehensive overview of your personal information in our possession
- Rectification: Request correction of inaccurate or incomplete data entries
- Erasure: Demand deletion of your personal information, subject to legal retention requirements
- Portability: Receive your data in a structured, machine-readable format
- Restriction: Request limitations on specific processing activities
- Objection: Challenge certain data processing operations based on legitimate interests
To exercise any of these rights, please contact us at [email protected]. We will respond to verified requests within 30 days.
10. Third-Party Services
Our platform may integrate with or rely upon third-party services, including but not limited to:
- Payment processors and financial institutions
- Cloud infrastructure and hosting providers
- Large Language Model providers for API services
- External AI and machine learning services
- Analytics and monitoring platforms
This Privacy Policy does not extend to the data practices of these external services. We recommend reviewing their respective privacy policies before utilizing their offerings.
11. Children's Privacy
DataByte AI services are not designed for, nor intended to be used by, individuals under 18 years of age. We do not knowingly collect personal information from minors.
If we become aware that personal information from a child under 18 has been inadvertently collected, we will promptly delete such data from our systems. If you believe we may have collected information from a minor, please notify us immediately.
12. International Data Transfers
DataByte AI operates servers globally. Your information may be processed on infrastructure located outside of Indonesia.
When we transfer data internationally, we ensure appropriate safeguards are implemented, including standard contractual clauses and compliance with applicable data protection regulations.
13. Policy Modifications
We retain the prerogative to revise this Privacy Policy as required. Material modifications will be communicated through:
- Posting the updated policy on this page with a revised publication date
- Notifying registered users via email for significant changes
- Updating the policy version indicated in our system
Your continued utilization of DataByte AI following any modifications signifies your acceptance of the revised policy terms.
14. Contact Information
For inquiries, concerns, or requests pertaining to this Privacy Policy or our data practices, please reach out to us: