GDPR Compliance

The GDPR gives individuals in the EU and UK rights over their personal data. As a BryteChat customer you are typically the data controllerfor your customers' data, and BryteChat acts as a data processor on your behalf.

Your rights

Under the GDPR, individuals have the right to:

• Access — request a copy of the personal data we hold.
• Rectification — correct inaccurate or incomplete data.
• Erasure — request deletion of personal data ("right to be forgotten").
• Restriction — limit how we process data.
• Portability — receive your data in a structured, machine-readable format.
• Objection — object to certain types of processing.

How we help you stay compliant

• Data is encrypted in transit and at rest.
• We offer a Data Processing Agreement (DPA) for business customers.
• You can export or delete contact and conversation data on request.
• We only use sub-processors that provide adequate data protection safeguards.

Data Processing Agreement

If your business requires a signed DPA, contact us at hello@brytelabs.co and we will provide our standard agreement.

International transfers

Where data is transferred outside the EU/UK, we rely on appropriate safeguards such as Standard Contractual Clauses to ensure your data remains protected.

Exercising your rights

To make a data request or raise a concern, email our Data Protection team at hello@brytelabs.co or use our contact page. We respond to all verified requests within 30 days.