Last updated: 3 July 2026 · Version 1.0

Privacy Policy

This is a draft prepared from standard SaaS practice and the SpoolBoard Legal Pack. Company registration details, registered address, ICO registration number and Data Protection contact must be completed, and the pack reviewed by a qualified legal adviser, before publication.

This Privacy Policy explains how Bytewise Solutions (“Bytewise”, “we”, “us”) collects, uses and protects personal data when you use the SpoolBoard website and application (the “Service”). Bytewise is the data controller. It covers users in the United Kingdom and EU (UK GDPR / EU GDPR) and the United States (CCPA/CPRA), reflecting the UK (GBP) and US (USD) versions of the Service.

1. Data we collect

• Account data - name, email, hashed password, display name, account & role, MFA settings.
• Subscription & billing data - plan, currency, subscription status and billing identifiers. Card details are handled directly by Stripe; we never receive or store full card numbers.
• Service content - printers, spools, rolls, jobs, prints, costs, maintenance logs, and any uploaded .gcode.3mf files where storage is enabled.
• Technical & usage data - IP address, device/browser type and interactions, collected via cookies subject to your consent.
• Communications - messages you send us and your notification preferences.

2. How and why we use it

To provide and operate the Service (contract), to bill and meet tax/fraud obligations (contract; legal obligation), to keep the Service secure and audited (legitimate interests), for product analytics (consent), and for advertising measurement (consent).

3. Third parties and sub-processors

• Stripe - payments, billing and tax.
• Google Analytics (GA4) - website & app analytics; sets analytics cookies, loaded only after you consent, with IP anonymisation and Google Consent Mode v2 respected.
• Google Ads - conversion tracking and remarketing; advertising cookies fire only after advertising consent. Under CCPA/CPRA this counts as “sharing”, so we honour Global Privacy Control and provide a Do-Not-Sell-or-Share option.
• Google Search Console - SEO/indexing; does not set visitor cookies or collect visitor personal data.
• Hosting & database / object storage - application hosting, database and gcode storage, with UK/EU data residency where available.
• Postmark / Resend - transactional email (invites, receipts, alerts).

4. International transfers

Where data is transferred between the UK/EU and the US, we rely on appropriate safeguards (UK IDTA / EU Standard Contractual Clauses).

5. Retention

We keep account data for the life of your subscription and for a limited period afterwards (default 30 days after cancellation) before archival or anonymisation, except where longer retention is legally required.

6. Your rights

Under UK/EU GDPR you have rights of access, rectification, erasure, restriction, portability and objection. Under CCPA/CPRA, California residents have rights to know, delete, correct, and opt out of “sharing”, and not to be discriminated against for exercising them. Per-account data export and erasure are available in-app.

7. Contact

Data protection queries: toby@byte-wise.uk. [Registered address and DPO/contact to be completed.]

← Back to home · Terms · Cookies