Privacy Policy

ibute Technologies (“ibute,” “we,” “our,” or “us”) is committed to protecting your privacy. This Privacy Policy explains what personal data we collect when you visit ibute.tech, engage with our services, or communicate with us, how we use it, and the rights you have over your data.

ibute Technologies (Private) Limited is a custom software and AI automation studio headquartered in Lahore, Pakistan, with a US affiliate — ibute Systems LLC — registered in Texas, USA, for North American operations. We serve clients across 15+ countries, which means this policy is designed to meet the requirements of multiple data protection frameworks including the EU General Data Protection Regulation (GDPR), the UK GDPR, and the California Consumer Privacy Act (CCPA / CPRA).

By using ibute.tech you agree to the practices described in this policy. If you do not agree, please discontinue use of the site.

For the purposes of GDPR and applicable privacy law, the data controller is:

• Company name: ibute Technologies (Private) Limited
• Website: https://ibute.tech
• Registered address: Lahore, Pakistan
• US affiliate: ibute Systems LLC, registered in Texas, USA (for North American operations)
• Data protection contact: hello@ibute.tech

For any privacy-related questions, requests, or complaints, please contact us at the email address above. We aim to respond within 30 days.

Information you provide directly

When you use the contact form, book a consultation via Calendly, or email us, we collect:

• Full name
• Business email address
• Company name (optional)
• Project description or message content
• Calendar availability data (via Calendly)

Information collected automatically

When you visit ibute.tech, we collect certain data automatically through cookies and analytics tools (subject to your cookie consent choices):

• IP address and approximate location (country / city level)
• Browser type and version
• Operating system
• Pages visited, time on page, and referral source
• Device type (desktop, mobile, tablet)
• Click events and scroll depth (aggregated, not individual keystroke level)

We use Google Analytics 4 (GA4) and Google Tag Manager (GTM) for analytics. Both are configured to require your explicit consent before firing — managed via our CookieYes consent banner. See our Cookie Policy for the full cookie list.

Information from third parties

If you book a meeting through our Calendly widget, Calendly processes your booking data under Calendly’s own Privacy Policy. We receive your name, email, and scheduled time. We do not receive payment information.

We use the personal data we collect for the following purposes:

We do not use your data for automated decision-making or profiling that produces legal or similarly significant effects.

We do not sell, rent, or trade your personal data to third parties for marketing purposes.

We share data only in the following limited circumstances:

Service providers (data processors)

• Resend — transactional email delivery for contact form responses. Resend processes email data on our behalf under a Data Processing Agreement.
• Google Analytics 4 & Google Tag Manager — website analytics, loaded only after you accept analytics cookies. Google processes data subject to the EU Standard Contractual Clauses.
• Calendly — appointment scheduling. Calendly receives your booking details and operates under its own privacy policy.
• CookieYes — cookie consent management. CookieYes records your consent preference and stores it in a first-party cookie.
• Netlify — website hosting and serverless functions. Netlify processes server access logs containing IP addresses for security purposes.

Legal requirements

We may disclose your data if required to do so by law, court order, or governmental authority, or to protect the rights, property, or safety of ibute, our clients, or others.

Business transfers

In the event of a merger, acquisition, or sale of all or part of our assets, your data may be transferred. We will notify you before your data becomes subject to a different privacy policy.

ibute operates across multiple jurisdictions. When you contact us or use our website, your data may be processed in the United States, Pakistan, or the European Economic Area, depending on where our team members and service providers are located.

For transfers of personal data from the EEA, UK, or Switzerland to countries that have not been deemed adequate by the European Commission (including the US and Pakistan), we rely on:

• Standard Contractual Clauses (SCCs) — as adopted by the European Commission, incorporated into our contracts with sub-processors such as Google and Resend.
• Legitimate interests— for internal processing between ibute’s US and Pakistan offices, subject to appropriate technical and organisational safeguards.

We retain personal data only as long as necessary for the purpose it was collected:

Note on analytics: the 14-month figure is how long Google retains the analytics event data. It is distinct from the lifespan of the analytics cookies on your device — the _ga cookie can persist for up to 2 years (see the Cookie Policy for cookie lifespans). 14 months is the maximum data-retention window GA4 offers; its out-of-the-box default is 2 months.

You may request earlier deletion of your data at any time — see Your Rights below.

Rights under GDPR (EU / UK / EEA residents)

If you are located in the EU, UK, or EEA, you have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — ask us to correct inaccurate or incomplete data.
• Erasure(“right to be forgotten”) — request deletion of your data where there is no legitimate reason for us to continue processing it.
• Restriction — ask us to pause processing of your data in certain circumstances.
• Portability — receive your data in a structured, machine-readable format where processing is based on consent or contract.
• Objection — object to processing based on legitimate interests or for direct marketing.
• Withdraw consent — where processing is based on consent, withdraw it at any time without affecting the lawfulness of prior processing.

You also have the right to lodge a complaint with your national data protection authority (e.g., the ICO in the UK, or your EU member state’s supervisory authority).

Rights under CCPA / CPRA (California residents)

If you are a California resident, you have the right to:

• Know what personal information we collect, use, disclose, and sell (we do not sell personal information).
• Delete personal information we hold about you.
• Correct inaccurate personal information we maintain about you.
• Opt-out of sale or sharing — ibute does not sell or share personal information for cross-context behavioural advertising.
• Non-discrimination — we will not discriminate against you for exercising any of your CCPA rights.

How to exercise your rights

Email us at hello@ibute.techwith the subject line “Privacy Request.” We will respond within 30 days (GDPR) or 45 days (CCPA). We may need to verify your identity before fulfilling a request.

ibute.tech uses cookies and similar tracking technologies. You can manage your cookie preferences at any time using the consent banner that appears on your first visit, or by reviewing our full Cookie Policy which lists every cookie we use, its purpose, and its retention period.

Strictly necessary cookies are set without consent as they are required for the site to function. All other cookies (analytics, marketing) require your explicit consent.

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. These include:

• HTTPS encryption for all data in transit (TLS 1.2+)
• HTTP security headers (HSTS, CSP, X-Frame-Options, Referrer-Policy)
• Access controls — only team members who need access to data for their role have it
• Rate limiting on public-facing form endpoints to prevent abuse
• Regular dependency auditing (“npm audit” before every deploy)

No method of transmission over the internet is 100% secure. If you believe your data has been compromised, please contact us immediately at hello@ibute.tech.

ibute.tech is a B2B service directed at business professionals aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe a minor has submitted data to us, please contact us at hello@ibute.tech and we will delete it promptly.

We may update this Privacy Policy from time to time to reflect changes in our practices, legal requirements, or services. The “Last updated” date at the top of this page indicates when the policy was most recently revised.

For material changes, we will take reasonable steps to notify you — for example, by placing a prominent notice on our website. Your continued use of ibute.tech after any change constitutes acceptance of the revised policy.

For any questions, requests, or complaints regarding this Privacy Policy or our data practices, please contact:

• Email: hello@ibute.tech
• Subject line: Privacy Request
• Address: ibute Technologies (Private) Limited, Lahore, Pakistan
• Response time:We aim to respond within 30 business days. For urgent matters, please indicate “Urgent” in your subject line.

You can also submit questions through our contact page.