Privacy, data and AI
Generating a scope sends your brief to a third-party model provider. This page explains exactly what leaves Byteflare and what is kept.
Who this is for: Anyone putting confidential client information into a brief, and anyone answering a client's data question.
What is sent to the model provider
When you generate clarifying questions or a scope, Byteflare sends the text you supplied — the brief, your answers to the clarifying questions, and the scoping settings such as project type, complexity, timeline and hourly rate — to a third-party large language model provider over an encrypted connection, and receives the generated document back.
Byteflare is built against Anthropic's Claude models. Depending on how the deployment is configured, requests reach those models either directly through Anthropic's API or through Amazon Bedrock. The specific model used for each operation is set in the deployment's configuration rather than being chosen per request in the interface.
What Byteflare records about AI usage
Each AI call writes one usage row containing the account it belongs to, which endpoint was called, the prompt tier, and the time. That record exists to enforce the Free plan's rate limits and to diagnose failures. It does not contain your brief text or the generated output.
The generated scope itself is stored against your project in Byteflare's database, because that is the product. It is subject to the same access rules as the rest of your workspace — see Workspaces and isolation.
Who can see your content inside Byteflare
| Content | Visible to |
|---|---|
| A personal project | You only. No organisation owner or admin can open it. |
| An organisation project | Every active member of that organisation. |
| A public proposal link | Anyone who has the link, until it expires or is revoked. Only the allowlisted proposal fields are exposed. |
| Usage records | Byteflare, for rate limiting and diagnostics. |
Deleting your data
- A single project — move it to trash, then permanently delete it from Trash. Trashed items are permanently deleted after 30 days in any case.
- A shared copy — revoking a public link stops the snapshot being reachable.
- Everything — deleting your account removes your profile, personal projects and their generated scopes, personal templates, favourites, visit records and memberships, immediately and permanently. See Account and security.
Data-protection requests
Access, correction, erasure, portability and objection requests go to privacy@byteflare.app, from the address on the account. The Privacy Policy sets out the rights that apply to you, the lawful bases, and the response timescales; this page does not restate them so that the two can never drift apart.
Answering a client who asks about AI
A short, accurate answer you can reuse: the brief is processed by a third-party large language model provider to draft the scope; Byteflare stores the resulting document under your account; the shared proposal is a frozen snapshot that can be revoked; and the published Privacy Policy sets out the retention and rights position in full.
Related
- Workspaces and isolationPersonal and organisation workspaces are strictly separated, and the separation is enforced at the database level rather than in the interface.
- Account and securityHow you sign in to Byteflare, how to recover an account you cannot get into, and what deleting your account actually removes.
- Byteflare for EnterpriseAn Enterprise agreement covers everything in the Team plan, arranged under a contract that satisfies procurement, security review and finance.