Privacy Policy

Overbyte OÜ is the controller of the personal data described here.

Registry code

17307903

Registered address

Tornimäe tn 5, Kesklinna linnaosa, Tallinn, Harju maakond, 10145, Estonia

For any privacy question or request, write to info@overbytelabs.com. We are not required to appoint a Data Protection Officer and have not appointed one; the founder answers these directly.

• Contact form. Your name, work email, company (optional) and message, plus the campaign or referring site that first brought you here.
• Analytics. Aggregate usage of this site — pages viewed, scroll depth, which buttons were used, and which rendering tier your device received — collected through PostHog in cookieless mode.
• Server logs. Our host records standard request data, including IP address, for security and diagnostics.

We do not collect special category data, we do not buy data about you, and we do not build advertising profiles.

• To answer your enquiry — legitimate interest, and steps taken at your request before entering a contract.
• To understand how the site performs — legitimate interest in running and improving our own website, balanced against your privacy by collecting no identifiers.
• To keep the site secure — legitimate interest.
• To meet accounting and legal obligations — legal obligation.

• Enquiries that do not become engagements: up to 24 months, then deleted.
• Engagement correspondence and records: for the duration of the engagement and the statutory retention period that applies to Estonian company records afterwards.
• Analytics: retained in aggregate by our analytics provider under its own retention policy.
• Server logs: a short rolling window set by our host.

We use a small number of processors, each under contract and each processing only what its job needs:

• PostHog — product analytics, on its EU infrastructure.
• Hostinger — website hosting and the mail relay that delivers the contact form.
• GitHub — source control and deployment automation.

We do not sell personal data and we do not share it with advertisers.

Analytics data is processed on EU infrastructure. Where a processor operates outside the European Economic Area, the transfer is covered by the European Commission's Standard Contractual Clauses or an adequacy decision.

Under the GDPR you can ask us to:

• give you a copy of the personal data we hold about you
• correct it if it is wrong
• delete it
• restrict or object to how we use it, including any processing based on legitimate interest
• send it to you, or to someone else, in a portable format

Write to info@overbytelabs.com and we will respond within one month. There is no charge.

If you think we have handled your data badly, you can complain to the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, aki.ee), or to the supervisory authority where you live. We would rather you told us first.

Access to enquiry data is limited to the people who need it. Transport is encrypted. Deployment credentials are held as secrets and rotated when someone's access ends.

No system is perfectly secure. If a breach affects your rights we will tell you and the regulator within the timescales the GDPR sets.

This is a business-to-business site. It is not directed at children and we do not knowingly collect data about them.

We may update this policy. The date at the top of this page shows when it last changed, and the version published here is the one in force.