Skip to content
Information we collect How we use Legal bases Cookies Sharing Transfers Retention Security Rights Children Changes Contact

Bolify AI Privacy Policy

This executive summary explains how Bolify AI handles personal data across our websites, platform, support channels, and communications. It is written for customers, security teams, and procurement reviewers.

1) Information we collect

  • Identity and business contact data (name, work email, company, role, phone, billing contacts).
  • Service data your organization submits (CRM records, workflow inputs, communications metadata).
  • Technical and usage data (device, IP, logins, feature usage, diagnostics, security events).
  • Limited third-party data from approved integrations, channel partners, and verification providers.

2) How we use information

  • Deliver, operate, and improve AI CRM, AI Voice, and CPaaS services.
  • Authenticate users, enforce permissions, and protect tenant environments.
  • Provide onboarding, support, service updates, and compliance notices.
  • Monitor reliability, prevent abuse, investigate incidents, and meet legal obligations.

We do not sell personal information. For customer-managed workflows, the customer defines what data is sent to Bolify AI and remains responsible for lawful use.

  • Contract: to provide services under customer agreements.
  • Legitimate interests: to secure and improve our platform and operations.
  • Consent: where required for specific activities, such as optional marketing.
  • Legal obligation: to comply with applicable laws and lawful requests.

4) Cookies and tracking technologies

We use necessary, performance, and functional cookies to support sign-in, security, analytics, and product experience. You can manage preferences in your browser and, where offered, our cookie controls.

5) Data sharing and subprocessors

We share data only when needed to run services, support operations, or comply with law.

  • Cloud and infrastructure providers.
  • Messaging, voice, monitoring, and security vendors.
  • Professional advisors under confidentiality obligations.

Subprocessors are subject to due diligence, contractual data protection terms, and access-control requirements.

6) International transfers

Data may be processed outside your country. When cross-border transfers occur, we apply recognized safeguards, including standard contractual clauses or equivalent legal mechanisms, plus operational controls.

7) Data retention

We retain personal data only as long as needed for service delivery, security, legal compliance, dispute resolution, and audit needs. When no longer required, data is deleted or anonymized according to applicable standards.

8) Security safeguards

  • Encryption in transit and for selected data stores.
  • Role-based and least-privilege access controls.
  • Logging, monitoring, and incident response procedures.
  • Ongoing infrastructure and vendor security reviews.

No environment is risk-free, but controls are continuously updated based on risk, technology changes, and customer requirements.

9) Your rights (access, correction, deletion, objection, portability)

  • Request access, correction, deletion, objection, or portability, where legally available.
  • Withdraw consent where processing relies on consent.
  • Submit requests through our contact channel below; identity verification may be required.

If we process data on behalf of a customer, we may redirect the request to that customer as the responsible controller.

10) Children’s privacy

Our services are intended for business use and are not directed to children. If we learn that prohibited child data was submitted, we will take appropriate remediation steps.

11) Changes to this policy

We may update this policy to reflect product, legal, or operational changes. Material updates will be reflected by an updated date and additional notice where required.

12) Contact details

For privacy questions, rights requests, or procurement/security reviews, contact: helpdesk@bolifyai.com

For contract-specific privacy terms (including DPA details, subprocessor schedules, and transfer mechanisms), enterprise customers can also contact their account team or reach us via /contact-us.