Privacy Policy

1. Introduction & Zero-Selling Commitment

At businessfy (accessible from https://businessfy.ai), we take your privacy and data security seriously. We adhere to a strict Zero Data Selling Policy. We will never sell, rent, or monetize your company’s business records, customer contact details, or financial data to third-party data brokers or advertisers.

2. Information We Collect

To operate and provide the Agentic Business OS, we collect:

• Account Information: Name, email address, and profile details provided during secure authentication and single-sign-on (SSO).
• Workspace Operations: Operational intents, custom data tables, client records, appointment calendars, and settings created within your business workspace.
• Billing Details: Payment and invoice transactions are processed through certified PCI-DSS Level 1 payment gateways (Stripe). businessfy does not collect or store full credit card numbers.
• System Telemetry: Anonymized technical metrics, session timestamps, and network request logs necessary for DDoS mitigation, edge routing, and global performance monitoring.

3. How We Use Your Information

We process data exclusively to:

• Synthesize, deploy, and maintain your custom business workspaces and tools.
• Authenticate secure access and enforce strict multi-tenant isolation.
• Process subscription billing, invoices, and payment receipts via Stripe.
• Provide dedicated customer support and critical platform alerts.
• Prevent unauthorized API access, spam, and malicious activity.

4. Infrastructure & Service Categories

We partner with globally certified infrastructure and financial partners to deliver bank-grade security:

• Global Edge Network & Security: Global edge content delivery, DDoS protection, and encrypted SSL routing.
• Encrypted Multi-Tenant Storage: Data is held in Cloudflare D1 and encrypted at rest. Every query is scoped to your account using the identity from your verified session, never a value supplied in the request; credentials for connected accounts are separately encrypted with AES-GCM before storage.
• Payment Processing: PCI-DSS Level 1 certified payment processing and billing compliance (Stripe).
• Identity & Authentication: Secure OAuth 2.0 single-sign-on protocols.

5. Data Rights and Deletion (GDPR & CCPA)

You maintain complete control over your business data at all times:

• You can export your complete workspace records in standard formats (CSV, JSON).
• You can request permanent deletion of your account and all associated workspace data.
• You can opt out of non-essential communications at any time.

To request an export or data deletion, email our privacy team at support@businessfy.ai.

6. Encryption & Security

All data transmitted to and from businessfy is encrypted using modern TLS 1.3 protocols in transit and AES-256 encryption at rest. Multi-tenant architectural boundaries ensure that your proprietary operational data is never accessible by other organizations.

7. Contact Information

For questions regarding data protection or our privacy practices, please contact:

SMART DYNAMIC SYSTEMS LTD
Registered in England and Wales, company number 16430324
Registered office: 66 Paul Street, London, England, EC2A 4NA
Trading as businessfy

Data controller: SMART DYNAMIC SYSTEMS LTD
Privacy & Support: support@businessfy.ai
Website: https://businessfy.ai