Privacy Policy

1. Overview & Scope

ByteStream ("ByteStream", "we", "us", or "our") is a technology solutions and software engineering firm based in Kolkata, West Bengal, India. We respect the privacy of our website visitors, clients, partners, and platform users. This Privacy Policy outlines how we collect, store, utilize, and protect personal and organizational information when you visit our website (https://bytestream.co.in), utilize our consulting services, or engage in software development contracts with us.

2. Information We Collect

We collect information only as necessary to deliver engineering services, evaluate prospective projects, and manage ongoing client engagements:

• Direct Consultation Inquiries: Full name, corporate email address, phone/WhatsApp number, organization name, project requirements, budget, and timeline provided via our contact or consultation forms.
• Client Account & Project Data: Contact details of authorized client representatives, contractual documentation, project specifications, and deployment configurations.
• Technical Telemetry: Anonymized server logs including IP addresses, browser types, operating systems, referring URLs, and timestamps to ensure website security, firewall protection, and optimal performance.

3. How We Use Your Information

ByteStream strictly uses collected information for direct business and engineering purposes:

• Evaluating technical project requirements and responding to consultation inquiries.
• Executing software development, SaaS platform engineering, cloud DevOps, and consulting contracts.
• Maintaining project communications, architectural reviews, and client deliverable updates.
• Preventing security anomalies, fraudulent requests, or malicious attacks against our systems.
• Fulfilling legal, statutory, tax, and regulatory compliance obligations under applicable law.

We do not sell, rent, or trade your personal or business information to third-party advertisers or data brokers under any circumstances.

4. Client Confidentiality & Non-Disclosure

Confidentiality is a cornerstone of ByteStream’s engineering operations. All proprietary code, trade secrets, intellectual property, product roadmaps, and business data shared by our clients during discovery, architecture planning, or production builds are governed by strict Non-Disclosure Agreements (NDAs).

Unless explicitly agreed in writing by the client or where software is designated as an internal ByteStream-owned product (such as InstituteMate), case studies and engineering summaries published on our public website maintain strict client anonymity to protect proprietary business models.

5. Data Security Controls

We employ institutional-grade technical, operational, and organizational security controls to protect information against unauthorized access, loss, alteration, or disclosure. These controls include:

• End-to-end Transport Layer Security (TLS 1.3/1.2) encryption for all web communications and data in transit.
• Strict Role-Based Access Control (RBAC) and least-privilege administrative access policies.
• Isolated cloud infrastructure environments on AWS with multi-factor authentication (MFA).
• Continuous vulnerability monitoring, automated threat detection, and periodic code reviews.

6. Data Retention

We retain personal and corporate information only for as long as necessary to fulfill the purposes for which it was collected, comply with legal requirements, resolve disputes, and enforce our contractual agreements. When information is no longer needed, it is permanently purged or cryptographically anonymized.

7. Your Rights & Choices

Depending on your jurisdiction, you have the right to request access to, correction of, or deletion of your personal data maintained by ByteStream. To exercise these rights, please contact our data governance team at anup@bytestream.co.in.

8. Contact & Inquiries

If you have questions, concerns, or requests regarding this Privacy Policy or our data governance practices, please reach out directly: