Privacy policy

01Who we are

Vantage by Bytefount is provided by Bytefount Limited, a company registered in Kenya, of The View, General Mathenge Road, Spring Valley, Westlands, Nairobi, Kenya (postal address: P.O. Box 48620-00100, Nairobi, Kenya). Write to support@bytefount.com about anything to do with privacy.

Vantage by Bytefount is a business product. Customers load their own business data into a workspace. For that data we are the processor and the customer is the controller: we handle it only to provide the service and on the customer's instructions. For account and billing data, such as your name, email address and subscription, we are the controller.

02What we collect

Account data: your name, email address and the identity record created when you sign up or are invited to a workspace, and the workspace name, projects and member roles.

Workspace content: the files you upload, the data pulled in from the sources you connect, the tables and models built from them, and your dashboards, saved queries and settings. This may include personal data about your own customers, staff or suppliers, which is why the customer decides what to load.

Billing data: Paddle.com, our reseller, is the merchant of record. It collects your payment details and sends us your plan, subscription status, billing period and customer and subscription identifiers. We never receive or store your full card number.

Sign-in: when you sign in we keep a session cookie that holds your session for up to 8 hours. We use cookies only to keep you signed in and to remember the plan you chose on the pricing page. We do not use advertising or analytics cookies.

AI features: when a workspace turns AI on, the questions and prompts people type into AI features (including SQL they ask about), the workspace's model metadata sent with them (the names, types and descriptions of datasets, columns, metrics and dashboards), and error messages with data values removed. Figures are sent only when the figures switch is on.

Support: whatever you send us when you write to support@bytefount.com.

03How we use it

We do not sell personal data, use it for advertising, or look at the contents of a workspace except to give support you ask for or to investigate abuse or a security incident.

• To run your workspace: sign you in, store and load your data, build the metrics and dashboards you ask for, and run your queries and scheduled loads.
• To bill you and keep the records the law requires.
• To answer support requests and send service and security notices.
• To keep the service secure and fix faults.

04Where your data is stored

Vantage by Bytefount runs on infrastructure we operate at a cloud hosting provider in Europe. Each workspace has its own database in our data warehouse, its own read-only query user, and every query is limited to that workspace by the tenant identity set on the server, not by the browser. The control-plane database that holds accounts, projects and dashboards separates workspaces by row-level security. Sign-in is handled by a self-hosted ZITADEL identity service that we run ourselves.

Because Bytefount Limited is based in Kenya, our staff may access personal data from Kenya. Where the law requires it, we rely on appropriate safeguards for that transfer.

AI requests are processed by Anthropic in the United States.

05Who we share it with

We use a small number of service providers to run Vantage by Bytefount, and they handle personal data only to provide their service to us:

• Paddle.com, as reseller and merchant of record, for payments, invoicing, tax and refunds. Paddle handles your payment details under its own privacy notice.
• Our cloud hosting provider in Europe, which hosts the infrastructure.
• Anthropic, PBC, for AI features a workspace has turned on.

06Other disclosures

We also disclose personal data if the law or a court requires it, or to protect our rights and the safety of others. If we are part of a merger or sale, the data may transfer to the new owner, who must honour this policy. AI features are off until a workspace owner or admin turns them on. When they are on, we send Anthropic, PBC the question or prompt you type (including SQL you ask about), your workspace's model metadata (the names, types and descriptions of datasets, columns, metrics and dashboards) and error messages with data values removed, so it can return an answer. We do not send the rows of your data unless an admin separately turns on features that need them, which are marked in the app. Anthropic processes this only to return the answer and does not use it to train models.

07How long we keep it

Your workspace content stays for as long as the workspace exists. When a trial ends or a subscription lapses nothing is deleted: the workspace becomes read-only. Archived or deleted dashboards, sources and projects are removed from the workspace when you remove them in the app.

To close a workspace and have its data deleted, write to support@bytefount.com. We then delete the workspace's data, including its warehouse data, and its account records. Billing records are kept for as long as tax and accounting law require. Support correspondence is kept while it is useful to resolve your request.

08Your rights

Under the Kenya Data Protection Act 2019 and similar laws you may ask for access to your personal data, correction, deletion, a portable copy, to restrict or object to processing, and to withdraw consent. Write to support@bytefount.com. You can also complain to the Office of the Data Protection Commissioner in Kenya, or to the authority where you live.

If your data is in a workspace opened by your employer or another organisation, ask that organisation first, because it is the controller; we will help it respond.

09Security

Workspaces are separated at the database, warehouse and query layers, access inside a workspace is checked on the server by role, and service credentials are issued from a secrets vault rather than stored in images. No system is perfectly secure, so if we learn of a breach affecting your data we will tell you as the law requires.

10Changes and contact

We may update this policy and will publish the new version here, with notice by email for material changes. Questions: support@bytefount.com.

Version 1.2 (20 October 2026) names Paddle.com as our merchant of record for payments.

Version 1.1 (18 October 2026) adds Anthropic, PBC as a sub-processor for optional AI features. AI stays off in every workspace until an owner or admin turns it on. A workspace that does not want Anthropic, PBC as a sub-processor can keep AI off (it is off by default), turn it off at any time under AI, or write to support@bytefount.com.