This Privacy Policy explains what personal information Bypassify collects when you use the Service, why we collect it, who we share it with, and the choices and rights you have. It applies to visitors of bypassify.com, holders of a Bypassify Account, and users of the Bypassify client software.
Bypassify is a provider of an on-device AI assistant. To operate the Service we necessarily collect and process a limited amount of personal information about our users. We do not sell personal information for monetary consideration, and we do not use personal information for cross-context behavioral advertising.
"Personal information" in this policy has the meaning given by whichever privacy law applies to you (for example, the California Consumer Privacy Act, comparable comprehensive privacy statutes in other U.S. states, and the EU/UK General Data Protection Regulation).
The table below summarizes each material data flow, the destination, and the purpose. Additional detail on each processor appears in Section 6.
| Data | Where it goes | Why |
|---|---|---|
| Email + password | Authentication provider | Authenticate your Account and issue a session for the dashboard. |
| One-time verification code | Authentication provider → transactional email provider | Deliver a one-time code to verify sign-ins to client apps. |
| Hardware identifier + device public key | Bypassify backend | Bind a Subscription to a specific Device and issue a signed device-session token. |
| Client prompts + screenshots | Bypassify backend → AI processing provider | Generate responses, enforce daily quota, and capture usage counts. |
| Payment method + charges | Payment processor | Process Subscription and one-time charges; manage the billing portal. |
| Discord identifiers | Bypassify community platform integration | Reconcile entitlements originating from historical community-store purchases. |
| Support messages | Bypassify support channel | Answer your inquiry. |
We process personal information for the following purposes:
We retain personal information only as long as necessary for the purposes described in this policy:
We share personal information with third-party processors solely to provide the Service. Each processor has committed by contract or by its published terms to safeguards commensurate with the sensitivity of the data. The categories we use are:
We will provide the specific identity of a processor in response to a verifiable data-subject request where applicable law requires that disclosure.
We do not sell personal information for monetary consideration to any third party. We do not "share" personal information for cross-context behavioral advertising within the meaning of the CCPA/CPRA.
We employ administrative, technical, and physical safeguards designed to protect personal information. These include encrypting data in transit, hardware-bound sessions with server-side revocability, secrets held outside source control, role-restricted database access, and multi-factor authentication for administrative access. No security program can be fully guaranteed; you use the Service at your own risk, and you are responsible for protecting your Account credentials.
The bypassify.com website uses only strictly necessary cookies and browser local storage to sign you in, maintain your dashboard state, and secure your session. We do not use third-party advertising, analytics, or tracking cookies. The Bypassify client applications do not use web cookies.
9.1 What you can request. Depending on where you live, applicable U.S. state privacy laws — including comprehensive privacy statutes now in effect in a growing number of states — may give you the right, subject to statutory conditions and exceptions, to:
9.2 We honor verifiable requests. We honor verifiable privacy requests from residents of any U.S. state whose law grants such rights, and from anywhere else covered by an applicable law that provides equivalent rights.
9.3 How to exercise your rights. Submit requests through our Discord support server, sent from an account we can verify against your Bypassify Account. We will verify your identity and respond within the time required by applicable law (generally 45 days). You will not be discriminated against for exercising your rights.
9.4 Appeals. If we decline your request, you may appeal by replying to our response with the word "Appeal" in the subject line. We will respond to appeals in accordance with applicable law.
10.1 CCPA/CPRA rights. California residents have the rights described in Section 9 (know, delete, correct, portability, opt-out) plus the right to limit use of "sensitive personal information." Bypassify does not use or disclose sensitive personal information for purposes that require the "Limit Use" right to be offered.
10.2 No sale or sharing. We do not sell personal information as that term is defined in the CCPA/CPRA, and we do not share personal information for cross-context behavioral advertising.
10.3 Categories collected in the past twelve (12) months. Identifiers (email, IP, hardware identifier); commercial information (Subscription and purchase records); internet activity (usage of the Service); electronic information (prompts and screenshots you elect to send); professional information (only if you volunteer it in support). Each category is used for the purposes and disclosed to the categories of processors described in Sections 3 and 6.
10.4 Shine the Light. California residents may request information about disclosures of personal information to third parties for the third parties' direct-marketing purposes. We do not make such disclosures.
11.1 Controller. Bypassify is the controller of the personal information processed as described in this policy.
11.2 Legal bases. We process personal information under Articles 6(1)(a) (consent, where relied on), (b) (performance of a contract), (c) (compliance with a legal obligation), and (f) (legitimate interests) of the UK/EU GDPR, as identified in Section 4.
11.3 Rights. You have the rights to access, rectify, erase, restrict processing of, object to processing of, and receive a portable copy of your personal information. You have the right to withdraw consent where consent is the basis for processing. You may lodge a complaint with your data-protection authority.
11.4 International transfers. Your data is transferred to the United States. We rely on the EU Standard Contractual Clauses and equivalent UK IDTA where required to safeguard those transfers.
The Service is not directed to children under 18, and we do not knowingly collect personal information from anyone under 13. If we learn that we have collected personal information from a child under 13, we will delete it. Contact us through our Discord support server if you believe a child's information may be in our records.
Bypassify is headquartered in the United States. When you use the Service, your personal information is processed in the United States and, potentially, in any country where our processors operate infrastructure. Data-protection law in these countries may differ from that in your home country. Where a transfer requires safeguards (for example, from the EEA, UK, or Switzerland), we implement Standard Contractual Clauses or an equivalent lawful transfer mechanism.
If a security incident results in unauthorized acquisition of personal information for which notification is required by applicable law, we will notify affected persons and, where applicable, regulators, within the timeframes required by the applicable statute.
We may update this Privacy Policy from time to time. When we make material changes, we will post the updated policy at bypassify.com and update the Effective Date at the top of this document. Where required by law, we will provide additional notice.