Privacy Policy

Last Updated: March 6, 2026

1. Introduction

BF HOLDING LTD, trading as Deskify AI, is committed to protecting the privacy and security of personal information.

This Privacy Policy explains how we collect, use, process, store, and protect personal data when individuals visit our website, interact with our services, or engage with our automation and artificial intelligence solutions.

This Policy applies to:

  • Visitors to our website
  • Prospective and existing clients
  • Individuals whose information is processed through automation systems configured for our clients
  • Users interacting with communication systems, chat interfaces, or automated workflows operated through our services

Our services involve the development and implementation of automation systems, AI-powered workflows, CRM integrations, communication systems, and marketing automation solutions for businesses.

In providing these services, BF HOLDING LTD may act in different roles depending on the context of processing:

Data Controller: When we collect and process information for our own business operations (such as website inquiries or client onboarding).

Data Processor: When we process personal data on behalf of our clients in connection with the services we provide.

Where we act as a Data Processor, the relevant client remains the Data Controller responsible for determining the purposes and lawful basis for processing personal data.

This Privacy Policy should be read together with our: Master Services Agreement, Data Processing Addendum (DPA), Acceptable Use Policy, Website Terms of Service.

By accessing or using our website or services, you acknowledge that you have read and understood this Privacy Policy.

2. Information We Collect

BF HOLDING LTD collects different types of information depending on how individuals interact with our website, services, and automation platforms.

2.1 Information You Provide Directly

We may collect personal information that individuals voluntarily provide when interacting with our website or communicating with us. This may include: Name, Email address, Phone number, Company name, Job title or role, Business contact information, Consultation request details submitted through website forms.

This information is typically collected when individuals: Submit inquiries through our website, Request information about our services, Schedule consultations or demonstrations, Communicate with us via email or messaging platforms.

Payments for services are not processed directly through the website. The website is used for informational purposes and consultation requests only. Any service payments are handled separately through approved invoicing or third-party payment arrangements after a service agreement has been executed.

2.2 Client Onboarding Information

In order to deliver our services, we may collect certain operational or business information from clients during the onboarding process. This may include: Business contact details, CRM configuration information, Customer journey workflows, Marketing preferences and automation rules, Integration credentials for approved platforms.

This information is used solely for the purpose of configuring and delivering the contracted services.

2.3 Information Processed Through Client Systems

Our services may involve configuring systems that process personal data on behalf of our clients. These systems may include: CRM platforms, Messaging systems, Automation workflows, AI integrations.

Depending on the client's configuration, such systems may process information such as: Customer names, Email addresses, Phone numbers, CRM records, Lead information, Customer interaction history.

In these circumstances, BF HOLDING LTD acts as a Data Processor, and the client remains the Data Controller responsible for determining how such personal data is collected and used.

2.4 Communication and Call Data

Certain automation systems may involve communication services or telephony integrations. As part of these services: Call recordings may be generated or stored through third-party telephony platforms, Message logs or communication records may be stored within CRM systems. BF HOLDING LTD does not independently host or store these recordings outside of the third-party platforms used for service delivery.

2.5 Automatically Collected Information

When individuals visit our website, certain technical information may be automatically collected. This may include: IP address, Browser type, Device information, Pages visited, Referring website, Interaction data, Date and time of visits.

This information helps us understand how our website is used and supports the improvement of our services and user experience.

2.6 Cookies and Similar Technologies

Our website may use cookies and similar tracking technologies to: Improve website functionality, Understand visitor interactions, Measure website performance, Support marketing and analytics.

Users may adjust browser settings to refuse cookies; however, certain website features may not function properly if cookies are disabled.

3. How We Use Information

BF HOLDING LTD processes the information we collect for the following purposes.

3.1 To Provide and Improve Our Services

We use the personal and business data we collect to: Configure and implement automation workflows for our clients, Integrate CRM platforms, AI systems, and messaging services, Monitor, maintain, and optimise system performance, Provide customer support and troubleshooting assistance, Improve service delivery, system updates, and user experience.

3.2 Client Onboarding and Account Management

We use information provided during onboarding to: Set up client systems, Configure integrations with CRM and third-party platforms, Maintain accurate client records and communications.

3.3 Marketing Communications

With consent where applicable, we may use collected information to: Send updates about our services, Provide educational materials and resources, Share service announcements or improvements. Users can unsubscribe at any time.

3.4 Legal Compliance

We may process personal data to: Comply with data protection laws, Respond to regulatory requests, Enforce agreements, Detect and prevent fraud or abuse.

3.5 AI and Automation Processing

In providing automation services, we may process personal data to: Enable AI-driven messaging, Generate analytics or reports, Route communications and workflows. These activities are performed strictly to fulfil our contractual obligations to clients.

4. Legal Basis for Processing

We process personal data in accordance with applicable data protection laws including GDPR.

Legal bases include: Contractual necessity, Consent, Legitimate interests, Legal obligations.

5. Cookies and Tracking Technologies

We may use cookies including: Strictly necessary cookies, Performance cookies, Functional cookies, Advertising cookies.

Third-party tools may include: Google Analytics, Meta (Facebook), LinkedIn.

Users may manage cookies through browser settings.

6. Data Sharing and Third Parties

We may share data with service providers required to deliver our services, including: CRM platforms (e.g. GoHighLevel), Telecommunications providers (e.g. Twilio), Payment processors (e.g. Stripe), Artificial intelligence providers (e.g. OpenAI), Cloud infrastructure providers (e.g. AWS or Google Cloud).

We do not sell personal data.

7. AI and Automation Processing

AI systems may process personal data for: Automated messaging, CRM automation, Lead routing, Analytics.

Personal data is not used by us to train AI models. Clients remain responsible for reviewing AI outputs.

8. Data Retention

Personal data is retained only as long as necessary to: Fulfil contractual obligations, Comply with legal requirements, Resolve disputes, Enforce agreements.

Clients determine retention policies within their automation systems.

9. Data Security

We implement industry-standard security measures including: Encryption, Access controls, Monitoring and security reviews.

No system can guarantee absolute security.

10. Your Privacy Rights

Individuals may have rights to: Access personal data, Correct inaccurate data, Request deletion, Restrict processing, Data portability, Object to processing, Withdraw consent.

Requests can be submitted using the contact information below.

11. Children's Privacy

Our services are not intended for individuals under the age of 13.

If we become aware that personal data has been collected from a child under 13, we will delete such data.

12. Updates to This Policy

We may update this Privacy Policy from time to time.

The updated version will be posted on our website with a revised "Last Updated" date.

13. Contact Information

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please contact:

BF HOLDING LTD
Trading as Deskify AI

Email: [email protected]