1. Our privacy approach
SIXBYTE respects your privacy. This Privacy Policy explains how SIXBYTE collects, uses, stores, protects and discloses personal information when you use our website, account system, portfolio hosting platform and related services (the "Service"). "SIXBYTE", "we", "us" and "our" refer to the operator of the Service.
Where applicable, we aim to handle personal information consistently with the Privacy Act 1988 (Cth) and the Australian Privacy Principles. We seek to collect only information reasonably necessary to provide, secure and improve the Service.
2. Information we may collect
Account information
When you create or maintain an account, we may process information such as:
- your email address, username and account identifier;
- profile and display information you provide;
- account creation and update timestamps; and
- account preferences and settings.
Authentication information
Our authentication systems process information needed to create accounts, verify email addresses, sign you in, maintain sessions, reset passwords and secure access. SIXBYTE does not need to know or store your password in plain text.
3. Portfolio and uploaded content
When you upload, manage or publish a portfolio, we may process:
- portfolio names, descriptions, visibility settings and public URLs;
- HTML, CSS, JavaScript and other website files;
- ZIP archives, images, documents and project assets;
- profile photographs, resumes and professional information; and
- any other information you choose to include in your portfolio.
A public portfolio may contain information that becomes accessible to anyone on the internet. You control what information you intentionally place in your portfolio, subject to our Terms of Service.
4. Information you make public
Published portfolios can be viewed, indexed, shared or copied by third parties. Before publishing, consider whether you want to make your name, photograph, education, employment history, skills, projects, contact details or social links publicly available.
Do not publish passwords, private keys, API credentials, government identification documents, financial information, confidential workplace data or other information that you do not want publicly available.
5. Technical, usage and security information
When you access SIXBYTE, we or our service providers may automatically process technical information such as:
- IP address, browser type, operating system and device type;
- requested pages, timestamps and referring information;
- session and authentication events;
- file-upload and portfolio-publishing events;
- system errors, performance information and API activity; and
- security events and indicators of suspicious activity.
This information helps operate, troubleshoot, protect and improve SIXBYTE.
6. Communications and support
If you contact us, we may retain your name, email address, message content, attachments and information reasonably necessary to respond. Correspondence may be retained for support, security, record-keeping or dispute-resolution purposes.
7. How we collect information
We may collect information:
- directly from you, such as when you create an account, upload a portfolio, contact support or request deletion;
- automatically, when you sign in, navigate the Service or interact with our systems; and
- from service providers, such as authentication, hosting, storage, email and security providers that support our operations.
8. Why we use personal information
We may use personal information to:
- create, authenticate and maintain accounts;
- verify email addresses and provide password resets;
- upload, host, process, publish and deliver portfolio websites;
- provide user-selected public profile and portfolio features;
- provide customer support and respond to requests;
- send necessary service, account and security messages;
- detect fraud, abuse, malware and cybersecurity incidents;
- troubleshoot errors and maintain reliability;
- improve and develop the Service;
- investigate complaints or enforce our Terms; and
- comply with applicable legal obligations.
9. Cookies and browser storage
SIXBYTE may use cookies, local storage and similar technologies that are necessary for authentication, security, account sessions, preferences and other core functions. More information is available in our Cookie Policy.
10. Service providers and infrastructure
SIXBYTE may use specialist third-party providers to operate authentication, databases, cloud hosting, portfolio storage, content delivery, email, domain services and cybersecurity functions. These providers may process limited personal information on our behalf where necessary to provide their services.
Our current technical stack may include services such as Supabase for authentication/database functions, Cloudflare infrastructure and storage services, Vercel hosting/deployment services, and specialist email delivery services used by SIXBYTE. Providers may change as the platform develops.
11. When we may disclose information
We do not sell your personal information. We may disclose information:
- to service providers where necessary to operate the Service;
- where reasonably required by applicable law, a valid court order or other binding legal process;
- where reasonably necessary to investigate serious fraud, cyberattacks, malicious content or threats to users or infrastructure; or
- as part of a legitimate business restructure, acquisition or transfer, subject to applicable privacy requirements.
12. Overseas processing
Some technology providers may store or process information outside Australia. The locations involved depend on the provider and infrastructure region in use at the relevant time. Where applicable Australian privacy law imposes obligations regarding overseas disclosure, we will take reasonable steps required by that law.
13. Data security
We may use technical and organisational safeguards designed to protect personal information against unauthorised access, misuse, disclosure, loss and alteration. Depending on the system, safeguards may include encrypted network connections, secure authentication, access controls, database security rules, credential management, software updates, logging, monitoring and backups.
No method of online storage or transmission can guarantee absolute security.
14. Data breaches
If we become aware of a data breach, we may investigate, contain and remediate the incident. Where applicable law requires notification of affected individuals or a regulator, we will take reasonable steps to meet those obligations.
15. Retention
Personal information is generally retained only for as long as reasonably necessary for the purpose for which it was collected or where retention is reasonably required for security, legal compliance, fraud prevention, technical operations, backups, dispute resolution or enforcement of our policies.
Retention periods may vary depending on the category of information and operational need.
16. Account and portfolio deletion
When an account is deleted, associated account information, portfolios and uploaded files may be removed or scheduled for deletion. Limited information may temporarily remain in backups, security logs, fraud-prevention records or legally required records. Where appropriate, retained information may later be deleted or de-identified.
17. Access and correction
You may request access to personal information SIXBYTE holds about you or ask us to correct information that is inaccurate, incomplete or out of date. Some information can be managed directly through your account. Requests may be sent to privacy@sixbyte.io.
We may need to verify your identity before providing access or making certain changes.
18. Requesting deletion
You may request deletion of your SIXBYTE account and associated personal information by using available account-deletion features or contacting privacy@sixbyte.io. We will take reasonable steps to process valid requests, subject to information we are legally or reasonably required to retain.
19. Marketing communications
If SIXBYTE introduces optional promotional emails, we will manage them separately from necessary account and security communications and provide an appropriate unsubscribe mechanism where required. Email verification, password resets, security alerts and other operational communications may still be necessary to provide the Service.
20. Children and young people
SIXBYTE is designed primarily for people creating professional, educational and personal portfolios. Users under 18 should involve a parent or guardian where appropriate. We do not intentionally seek unnecessary sensitive information about children.
21. Third-party links
SIXBYTE portfolios may link to GitHub, LinkedIn, social networks, educational institutions, employers and other external websites. SIXBYTE is not responsible for the independent privacy practices of those services.
22. Privacy complaints
If you believe we have not handled your personal information appropriately, contact privacy@sixbyte.io with enough information for us to understand the issue. We will take reasonable steps to acknowledge, investigate and respond to legitimate complaints.
Where applicable, you may also have a right to complain to the Office of the Australian Information Commissioner.
23. Changes to this Privacy Policy
We may update this Policy as SIXBYTE develops, providers change, security practices evolve or legal requirements change. Material changes will be communicated where reasonably appropriate, and the current version will display its latest update date.
24. Contact
Privacy requests and complaints: privacy@sixbyte.io
General support: support@sixbyte.io
SIXBYTE · Victoria, Australia