Privacy Policy

Byterat, Inc. d/b/a Ohm ("we," "our," or "us") is committed to protecting the privacy and security of our customers' data. This Privacy Policy explains how we collect, use, store, retain, delete, and protect information when you use our platform. It also explains who owns Customer Data and how we treat Customer Data in connection with artificial intelligence and machine learning.

1. Information We Collect

We collect and process two main categories of information:

a. Customer Data

"Customer Data" means data, files, records, and other information submitted to the platform by or on behalf of a customer, together with results and outputs generated from that information. Customer Data includes:

• Uploaded Data: Raw engineering data, time series data, files, and other information uploaded or otherwise provided by customers.
• Results and Outputs: Metrics, analyses, reports, and related outputs generated from uploaded data.

b. User Information

• Authentication Data: User identities and login details are managed by a third-party authentication provider. We receive only the minimal profile information required for account access (e.g., email, name, organization).
• Platform Usage Data: Limited technical logs (e.g., IP addresses, browser type, timestamps) may be collected to maintain security, troubleshoot issues, and improve the service.

2. How We Use Information

We use collected information to:

• Provide, maintain, and improve our services
• Process and compute metrics from uploaded engineering data
• Manage user accounts and permissions
• Ensure platform security and monitor for unauthorized access
• Respond to customer support requests
• Comply with applicable legal obligations

3. Data Ownership and Permitted Use

As between Ohm and the customer, the customer retains all rights, title, and interest in and to its Customer Data. Ohm does not acquire ownership of Customer Data.

Customers grant Ohm only the limited rights necessary to host, copy, transmit, process, and display Customer Data to provide, secure, support, and maintain the services, comply with law, and carry out the customer's documented instructions. We do not sell Customer Data or use it for advertising.

Artificial Intelligence and Machine Learning

We may use a customer's Customer Data to train, fine-tune, or otherwise develop machine learning models specifically for that customer as part of the services requested by the customer ("Customer Models"). As between Ohm and the customer, the customer owns its Customer Models and the outputs generated by those models.

We will never use Customer Data or Customer Models to train, fine-tune, or improve a general-purpose, shared, or cross-customer model that we sell, license, or otherwise make available to other customers or third parties. We do not combine one customer's Customer Data with another customer's data for model training, and we do not provide Customer Data or Customer Models to third-party vendors for model training or any other processing.

4. Data Sharing and Disclosure

Customer Data is stored and processed only within Ohm's isolated cloud environment hosted on Amazon Web Services. We do not transmit Customer Data to third-party application or service vendors, and those vendors cannot access or process Customer Data. We do not sell, rent, or trade Customer Data.

We disclose Customer Data outside that environment only at the customer's direction or in the limited circumstances described below:

• Legal Requirements: When required by law, subpoena, or court order.
• Security: To investigate and prevent fraud, abuse, or security incidents.

5. Data Security

We implement industry-standard security practices, including:

• Encryption of data in transit and at rest
• Network segmentation and access controls
• Regular audits, monitoring, and logging
• Least-privilege access policies for employees

6. Data Retention and Deletion

We retain information only for as long as reasonably necessary for the purposes described in this Policy, to provide the services, and to meet our legal and contractual obligations. More specifically:

• During the Subscription: We retain Customer Data while the customer's account is active, unless the customer requests earlier deletion.
• At the Customer's Request: An authorized customer representative may request deletion of some or all Customer Data at any time by contacting us. We will delete the requested Customer Data from active systems within a reasonable period, unless retention is required by law or an applicable agreement.
• After Termination: Upon termination or expiration of the services, customers may request a return or export of their Customer Data as provided in the applicable agreement. We then delete Customer Data from active systems in accordance with that agreement or, if no period is specified, within a reasonable period.
• Backups: Residual copies may remain in encrypted backups until they are overwritten through our ordinary backup cycle. Backup copies are isolated from routine access, remain protected under this Policy, and are not restored except for disaster recovery or business continuity purposes.
• Account and Usage Information: We retain account, security, and technical records only as long as needed to operate and secure the services, resolve disputes, enforce agreements, and comply with legal obligations. We delete or de-identify this information when it is no longer needed.

If we must retain information to comply with law, preserve evidence, resolve a dispute, or enforce an agreement, we will limit retention to the information and period reasonably necessary for that purpose. Deletion requests can be sent to the contact address below.

7. Customer Control

Customers maintain control over their Customer Data. At any time, you may:

• Request access to, export of, or deletion of raw files and computed outputs
• Manage user access through your organization's account settings
• Contact us directly for account-level data removal

8. International Data Transfers

If you access our services from outside the United States, your information may be transferred to and processed in the United States or other jurisdictions where our service providers operate. We ensure appropriate safeguards are in place to protect your data.

9. Children's Privacy

Our services are not directed to children under the age of 16, and we do not knowingly collect personal information from them.

10. Updates to this Policy

We may update this Privacy Policy from time to time.

11. Contact Us

For questions or requests related to this Privacy Policy, please contact us at: