Privacy Policy
Effective date: May 26, 2026 · Virobit LLC · Dallas, TX
Information We Collect
Contact Information
Today, the main personal data we collect is what you send us: when you submit the contact form or email us, we receive your name, email address, company name, and whatever you write. If you engage us for a build or hosting, we additionally collect billing contact details to invoice you.
Business Operational Data
During a scoped build or under optional hosting, we handle the data needed to do the work — customer records, billing data, service orders, inventory, claims, or subscriber records from your legacy system. This is your data. You own it (along with the software we build), and we process it only to deliver the engagement.
Payment Information
Build and hosting invoices are paid by the method agreed in your engagement. We never store full card numbers, CVVs, or banking credentials on our systems.
Website Usage
This website is static and loads no third-party analytics networks. Cloudflare, which serves the site, provides us aggregate traffic statistics (request counts, countries) that identify no individual visitor.
Communications
If you email us or use the contact form, we keep those communications to respond to you and keep a record of the conversation.
How We Use Your Information
We use the information we collect to:
- Reply to your inquiries and scoping requests
- Perform engagements — builds, migrations, and optional hosting
- Process billing and send invoices and receipts
- Send security notices and policy changes to active clients (these cannot be opted out of during an engagement)
- Send the newsletter, if you signed up for it (unsubscribe anytime)
- Comply with legal obligations
We do not use your data for advertising, and we do not build advertising profiles from your usage.
Self-Hosted Deployments
If your rebuild runs on your own hardware or private cloud (the default — you own the software), then:
- Virobit does not receive, transmit, or process your operational business data
- Usage telemetry is opt-in only — by default, nothing is sent to Virobit servers
- Support access requires explicit, client-initiated session sharing (we cannot access your system without your action)
- Virobit only retains engagement-level data (contracts, billing contact, invoices) regardless of deployment mode
Information We Share
We do not sell, rent, or trade your personal information. We share data only in the following limited circumstances:
Service Providers
The third-party services this website and business rely on:
- Cloudflare — hosts and serves this website
- Web3Forms — delivers contact-form and newsletter submissions to our inbox
- GitHub — hosts Drift's open-source code
- Google Fonts — serves the site's web fonts to your browser
Vendors used for a hosted client system are listed in that engagement's scope document.
Legal Requirements
We may disclose information if required by law, regulation, legal process, or governmental request — for example, a valid court order or subpoena. Where legally permitted, we will notify you of such requests.
Business Transfers
If Virobit is acquired, merges with another company, or undergoes a similar business transfer, your information may be transferred as part of that transaction. We will notify you via email and/or a notice on our website before your information becomes subject to a different privacy policy.
Data Retention
Contact-form emails are kept as ordinary business correspondence. For engagements, we retain contracts and invoices as required by law, and hosted-system data for 90 days after hosting cancellation (for export or reactivation), after which it is deleted from our systems.
Business operational data we handled during a build is deleted from our working systems after hand-off — the authoritative copy is the one you own. On request, we export everything in standard formats (CSV, JSON) first.
Anonymized, aggregated usage statistics may be retained indefinitely as they cannot be linked to any individual.
Self-Hosted Deployments — Data Retention
For customers on an on-site self-hosted plan, all business operational data resides exclusively on your own hardware:
- Virobit retains no copies of your business data — customer records, billing history, claims, subscriber data, or any other operational content
- Your retention policy is entirely at your discretion and governed by your own IT and compliance requirements
- You are responsible for backup, archival, and deletion of data stored on your infrastructure
- Engagement records (contracts, billing contact, invoices) are retained as required by law
- Your software keeps working regardless of your relationship with us — you own it, there is no license key to deactivate, and your data is never touched by Virobit
Cookies and Tracking
We use cookies and similar technologies to operate the platform. We do not use advertising or tracking cookies.
- Session cookies — required to keep you logged in. These expire when your browser session ends.
- Theme preference — the terminal color theme you pick is stored in browser local storage. That's it.
- Analytics — no third-party analytics networks (Google Analytics, Meta Pixel, etc.) are loaded on this site.
Aggregate, non-identifying traffic statistics come from Cloudflare, which serves the site. Nothing follows you across other websites.
Security
Systems we build and host follow this standard:
- TLS 1.3 encryption for all data in transit
- AES-256 encryption for data at rest
- Role-based access controls — your team members only see what their role permits
- Two-factor authentication available on all accounts
- Single-tenant deployments — your system is its own environment, not a row in a shared database
In the event of a security incident affecting your data, we will notify affected customers within 72 hours of discovery as required by applicable law. Full details on our security practices are at virobit.dev/security.
Your Rights
Depending on where you are located, you may have the following rights regarding your personal data:
- Access — request a copy of the personal data we hold about you
- Correction — ask us to correct inaccurate or incomplete data
- Deletion — request that we delete your personal data, subject to our legal retention obligations
- Export — receive your data in a portable, machine-readable format (CSV or JSON)
- Opt-out of sale — we do not sell personal data, so this right is automatically satisfied
California residents (CCPA): You have the right to know what personal information we collect and how it is used, to delete your personal information, and to opt out of the sale of personal information (we do not sell personal information). To exercise these rights, contact us at hello@virobit.dev.
EEA/UK residents (GDPR): Our legal basis for processing your data is the performance of a contract (your engagement with us) and our legitimate interest in operating a secure, functional website and service. You have the right to lodge a complaint with your local supervisory authority.
To exercise any of these rights, email hello@virobit.dev with the subject line "Privacy Request." We will respond within 30 days.
Children's Privacy
Virobit is a B2B platform intended for use by businesses and professionals. We do not knowingly collect personal information from anyone under 18. If we become aware that we have collected data from a minor, we will delete it promptly.
Changes to This Policy
We may update this privacy policy from time to time. When we make material changes, we will notify you by email and post the updated policy on this page with a new effective date. Continued use of Virobit after the effective date constitutes acceptance of the revised policy.
Contact Us
For privacy questions, requests, or concerns, contact us at: