Privacy Policy
Effective date: October 9, 2026 · Virobit LLC · Dallas, TX
Information We Collect
Contact Information
Today, the main personal data we collect is what you send us: when you submit the contact form or email us, we receive your name, email address, company name, and whatever you write. If you engage us for a build or hosting, we additionally collect billing contact details to invoice you.
Business Operational Data
During a scoped build or under optional hosting, we handle the data needed to do the work — customer records, billing data, service orders, inventory, claims, or subscriber records from your legacy system. This is your data. You own it (along with the software we build), and we process it only to deliver the engagement.
Payment Information
Build and hosting invoices are paid by the method agreed in your engagement. We never store full card numbers, CVVs, or banking credentials on our systems.
Website Usage
This website is static and uses no advertising pixels or cross-site profiling tools. Cloudflare serves and protects the site and may load its performance and web-analytics beacon. In doing so, Cloudflare processes request data such as IP address, user agent, requested URL, timing, and security signals. We may view aggregate statistics such as request counts, performance, and countries; we do not use them to build advertising profiles. Cloudflare also enables network error reports that discard client IP addresses after processing.
Communications
If you email us or use the contact form, we keep those communications to respond to you and keep a record of the conversation.
How We Use Your Information
We use the information we collect to:
- Reply to your inquiries and scoping requests
- Perform engagements — builds, migrations, and optional hosting
- Process billing and send invoices and receipts
- Send security notices and policy changes to active clients (these cannot be opted out of during an engagement)
- Send the newsletter, if you signed up for it (unsubscribe anytime)
- Comply with legal obligations
We do not use your data for advertising, and we do not build advertising profiles from your usage.
Self-Hosted Deployments
Once a rebuild is handed off to your own hardware or private cloud (the default — you own the software):
- The running system does not send operational business data to Virobit; any temporary migration data is handled under the engagement terms and deleted after hand-off
- Usage telemetry is opt-in only — by default, nothing is sent to Virobit servers
- Support access requires explicit, client-initiated session sharing (we cannot access your system without your action)
- Virobit only retains engagement-level data (contracts, billing contact, invoices) regardless of deployment mode
Information We Share
We do not sell, rent, or trade your personal information. We share data only in the following limited circumstances:
Service Providers
The third-party services this website and business rely on:
- Cloudflare — hosts, delivers, and protects this website
- Web3Forms — receives contact-form and newsletter submissions and delivers them to our inbox
- GitHub — hosts public source code and downloads you choose to open
Vendors used for a hosted client system are listed in that engagement's scope document.
Legal Requirements
We may disclose information if required by law, regulation, legal process, or governmental request — for example, a valid court order or subpoena. Where legally permitted, we will notify you of such requests.
Business Transfers
If Virobit is acquired, merges with another company, or undergoes a similar business transfer, your information may be transferred as part of that transaction. We will notify you via email and/or a notice on our website before your information becomes subject to a different privacy policy.
Data Retention
Contact-form emails are kept as ordinary business correspondence. For engagements, we retain contracts and invoices as required by law, and hosted-system data for 90 days after hosting cancellation (for export or reactivation), after which it is deleted from our systems.
Business operational data we handled during a build is deleted from our working systems after hand-off — the authoritative copy is the one you own. On request, we export everything in standard formats (CSV, JSON) first.
Anonymized, aggregated usage statistics may be retained indefinitely as they cannot be linked to any individual.
Self-Hosted Deployments — Data Retention
After hand-off of an on-site self-hosted deployment, the authoritative business operational data resides on your own hardware:
- Virobit retains no post-handoff copies of your business data — customer records, billing history, claims, subscriber data, or other operational content — unless a separate support request requires a temporary copy
- Your retention policy is entirely at your discretion and governed by your own IT and compliance requirements
- You are responsible for backup, archival, and deletion of data stored on your infrastructure
- Engagement records (contracts, billing contact, invoices) are retained as required by law
- Your software keeps working regardless of your relationship with us — you own it, there is no license key to deactivate, and support access happens only when you initiate it
Cookies and Tracking
The public website does not set advertising, analytics, login, or preference cookies. It does not have visitor accounts. We do not use cross-site tracking.
- Local preference — on pages that offer a terminal color choice, that choice may be stored in your browser's local storage. Local storage is not sent with web requests.
- Cloudflare security — Cloudflare may set strictly necessary cookies if it needs to present a security challenge or mitigate abusive traffic.
- Measurement — Cloudflare may provide aggregate web-performance and traffic measurement. We do not load advertising networks such as Google Analytics or Meta Pixel, and we do not use cross-site identifiers.
Aggregate traffic and network-reliability statistics come from Cloudflare, which serves the site. Virobit does not use them to follow you across websites or build an advertising profile.
Security
Systems we build and host follow this standard:
- TLS encryption for data in transit; hosted deployments target TLS 1.2 or newer
- AES-256 encryption for data at rest
- Role-based access controls — your team members only see what their role permits
- Two-factor authentication available on all accounts
- Single-tenant deployments — your system is its own environment, not a row in a shared database
In the event of a security incident affecting your data, we will notify affected customers within 72 hours of discovery as required by applicable law. Full details on our security practices are at virobit.dev/security.
Your Rights
Depending on where you are located, you may have the following rights regarding your personal data:
- Access — request a copy of the personal data we hold about you
- Correction — ask us to correct inaccurate or incomplete data
- Deletion — request that we delete your personal data, subject to our legal retention obligations
- Export — receive your data in a portable, machine-readable format (CSV or JSON)
- Opt-out of sale — we do not sell personal data, so this right is automatically satisfied
California residents (CCPA): You have the right to know what personal information we collect and how it is used, to delete your personal information, and to opt out of the sale of personal information (we do not sell personal information). To exercise these rights, contact us at hello@virobit.dev.
EEA/UK residents (GDPR): Our legal basis for processing your data is the performance of a contract (your engagement with us) and our legitimate interest in operating a secure, functional website and service. You have the right to lodge a complaint with your local supervisory authority.
To exercise any of these rights, email hello@virobit.dev with the subject line "Privacy Request." We will respond within 30 days.
Children's Privacy
Our business software and this website are intended for businesses and professionals, and we do not knowingly collect personal information from anyone under 18 through them. If we become aware that we have collected such data from a minor, we will delete it promptly.
Our consumer apps are different, and simpler. DIGGSWORTH requires no account, no sign-in, and no personal information of any kind. It stores your progress on your own device and can be played with the network switched off. Because we collect nothing, there is nothing for us to hold, sell, or delete — for a player of any age. If a specific app ever departs from this, that app will say so plainly on its own page before you install it.
Changes to This Policy
We may update this privacy policy from time to time. We will post the updated policy on this page with a new effective date, and will directly notify active clients when an engagement or applicable law requires it.
Contact Us
For privacy questions, requests, or concerns, contact us at: