Legal

Privacy Policy

Last updated: October 29, 2026

    The short version: We collect only what we need to run the service. We don't sell your data. Your content is yours.
  

1. Information We Collect

Account Information

When you create an account, we collect your email address and, if you sign in with Google, your name and profile picture.

Content You Create

We store the articles, drafts, and products you create so you can access them across devices. This includes your article topics, keywords, and generated content.

Payment Information

Payments are processed by Stripe. We store your purchase history (dates, amounts, credit packs) but never your card details—those stay with Stripe.

Usage Data

We collect anonymous analytics (page views, feature usage) via Vercel Analytics and PostHog to understand how people use Byline and improve the product.

2. How We Use Your Information

To provide and maintain the Service
To process payments and manage credits
To sync your work across devices
To send important service updates (no marketing spam)
To detect and prevent abuse
To improve the product based on usage patterns

3. Third-Party Services

We use the following services to operate Byline:

Content generation provider — Your prompts are sent to their API to generate articles.
Stripe — Payment processing. See Stripe's Privacy Policy.
Supabase — Database and authentication. Data stored in secure, encrypted databases.
Vercel — Hosting and analytics. See Vercel's Privacy Policy.
PostHog — Product analytics. See PostHog's Privacy Policy.

4. Data Retention

We retain your account and content data as long as your account is active. If you delete your account, we will delete your data within 30 days, except where we're required to retain it for legal or accounting purposes.

5. Data Security

We implement industry-standard security measures including:

Encrypted data transmission (HTTPS/TLS)
Encrypted data at rest
Row-level security in our database
Regular security reviews

However, no method of transmission over the Internet is 100% secure. We cannot guarantee absolute security.

6. Your Rights

You have the right to:

Access your data — available in your account settings
Correct inaccurate data — edit your profile anytime
Delete your data — request account deletion
Export your data — download your content as files

To exercise these rights, contact us at ali@braskgroup.com.

7. Cookies

We use essential cookies for authentication and session management. Analytics services may use their own cookies. You can control cookies through your browser settings.

8. Children's Privacy

Byline is not intended for users under 13. We do not knowingly collect information from children under 13. If you believe we have collected such information, please contact us immediately.

9. International Data Transfers

Your data may be processed in the United States or other countries where our service providers operate. We ensure appropriate safeguards are in place for such transfers.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service. Continued use after changes constitutes acceptance.

11. Contact Us

Questions about this Privacy Policy? Contact us at ali@braskgroup.com.