Legal
Privacy policy
What we collect, why, who we share it with and what you can do about it.
Last updated 20 October 2026
This policy explains what personal information BereanByte Ltd ("BereanByte", "we", "us"), a company in the United Kingdom, collects through this website and through PulpitCue, why we collect it, who we share it with and what choices you have. We are the controller of this information under the UK GDPR and the Data Protection Act 2018. Questions or requests: hello@bereanbyte.com.
The short version
- PulpitCue runs on your own computer. The audio it listens to, the transcripts, your songs, slides and media stay on your computer. We do not receive them.
- We keep what we need to sell and support the software: your email, your organisation's name, your licence and which computers use it.
- We do not sell personal information, and we do not run advertising or analytics trackers on this website.
What we collect and why
| What | Why | Basis |
|---|---|---|
| Purchase details: your email, name or organisation, plan, number of computers, dates, and Stripe customer and subscription references | To sell you a licence, send your key, renew it and handle refunds and tax records | Contract; legal obligation |
| Payment details | Taken by Stripe. Card numbers never reach us or our servers | Contract |
| Your account: your email address and a sign-in session | To let you see your licence key, downloads and billing. Accounts exist only because of a purchase | Contract |
| Licence checks from PulpitCue: your licence key (we keep only a scrambled copy to check it against, plus a readable copy so you can see it in your account), a random identifier for each computer, the computer's name, and when it last checked in | To give each computer a seat, enforce the number of computers you paid for, start your free trial once and keep your licence working offline | Contract; legitimate interests (stopping misuse) |
| Network address (IP) | Briefly, to slow down key guessing and trial abuse. Kept for up to 24 hours | Legitimate interests (security) |
| Enquiries: your name, email, organisation and message | To reply to you | Legitimate interests; steps before a contract |
| Mailing list: your email address and the product you asked about | To tell you when a product is ready | Consent |
| Server logs kept by our hosting provider: network address, browser and the pages requested | To run, secure and fix the website | Legitimate interests |
What stays on your computer
PulpitCue listens and transcribes on your computer. Recordings, transcripts, sermon notes, songs, slides, pictures and videos are stored there and are not sent to us. The app contacts us only for your trial and licence. When you set it up it also downloads its language models and Bible data, so it needs the internet for that step.
Cookies and browser storage
We do not use advertising or analytics cookies. When you sign in, the sign-in service stores a session in your browser so you stay signed in. It is needed for the account to work, and signing out removes it.
Who we share it with
We use a small number of companies to run the service. They may only use the information to provide their service to us.
- Vercel hosts the website.
- Supabase provides our database, sign-in and file storage.
- Stripe takes payments and runs the billing portal.
- Resend sends our emails (licence keys, sign-in links and replies to enquiries).
We may also disclose information when the law requires it, or to protect our rights, our customers or the public. If the business is sold, customer information may transfer to the buyer under the same promises made here.
These providers may handle information outside the United Kingdom. Where they do, we rely on the safeguards the UK GDPR provides, such as the UK International Data Transfer Agreement or the UK Addendum to standard contractual clauses, or an adequacy decision.
How long we keep it
- Purchase and licence records: while your licence exists, and afterwards for as long as the law requires us to keep accounting records.
- Enquiries: as long as needed to deal with them, then deleted.
- Mailing list: until you ask us to remove you.
- Network addresses used for abuse protection: up to 24 hours.
Your choices and rights
Under the UK GDPR you can ask us to give you a copy of your information, correct it, delete it, restrict or object to how we use it, or move it to another service. You can withdraw consent to the mailing list at any time. Write to hello@bereanbyte.com and we will respond within one month. If you are unhappy with our answer you can complain to the Information Commissioner's Office (ico.org.uk, 0303 123 1113).
Deleting information we must keep by law, or that we need to honour a licence you still hold, may not be possible straight away. We will tell you if that applies.
Children
Our website and software are for churches, organisations and adults who run them. We do not knowingly collect information from children.
Security
We protect information with encrypted connections, restricted access and by keeping payment details with Stripe. No system is perfectly secure. If a breach affects you we will tell you as the law requires.
Changes
We may update this policy. The date at the top shows the latest version, and for significant changes we will tell customers by email or on this site.
Contact
BereanByte Ltd
hello@bereanbyte.com