1. Overview
CallFay Tech Ltd. (incorporated in Hong Kong SAR, China; hereinafter "CallFay®", "we", "us", or "our") values your privacy. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you access or use any CallFay® products and services through callfay.ai and its subdomains, including MuyuAI Smart Customer Service, CallFay® Studio, CallFay® GEO, and CallFay® Reach.
By using our services, you agree to the practices described in this policy.
2. Information Collection
We may collect the following types of information:
- Account information: Name, email address, phone number, company name
- Usage data: How you interact with our services, feature usage patterns
- Device information: IP address, browser type, operating system, unique device identifiers
- Business data: Store information, customer conversation records (for AI service optimization)
- Payment information: Payment account, transaction time and amount (processed by third-party payment providers)
3. Information Use
We use the collected information to:
- Provide, maintain, and improve our services
- Optimize product features and user experience
- Train and improve AI models (with data anonymization and encryption)
- Send service notifications, updates, and security alerts
- Provide customer support
- Conduct analytics to improve service quality
- Comply with legal obligations
4. Information Sharing
We do not sell your personal information to third parties. We may share information in the following circumstances:
- With your consent: When you explicitly authorize us to share your information
- Service providers: Cloud infrastructure (Alibaba Cloud, Tencent Cloud), CDN providers, payment processors, analytics providers — all bound by strict data protection agreements
- Affiliates: Within CallFay® group companies, solely for service provision and quality improvement
- Legal requirements: When required by applicable laws, regulations, legal process, or governmental requests
- Business transactions: In connection with a merger, acquisition, or sale of assets, subject to continued privacy protection
5. Third-Party Platform Integration
When you connect third-party platforms (such as social media accounts, advertising platforms, or analytics services) through CallFay, we access certain data from those platforms based on the permissions you explicitly grant during the authorization process.
Information We May Access
- Basic account profile information (name, avatar, account ID)
- Content and posts you have published on the platform
- Analytics and performance metrics for your content
- Audience and follower statistics
- Messaging capabilities as authorized by the platform
What We Do Not Do
- We never store your third-party platform passwords
- We do not sell or share your third-party platform data with other users
- We do not post, modify, or delete content on your behalf without your explicit instruction
- We do not access data beyond the scope you have authorized
- You can revoke platform access at any time through your CallFay account settings
6. Google API Services & YouTube Data Disclosure
YouTube Data We Access
- YouTube channel information (channel name, avatar, description, subscriber count)
- Your published video list and metadata (title, description, tags, publish status)
- Video analytics data (view count, engagement rate, audience demographics)
- Playlist information (for content organization and distribution management)
- Video upload and management capabilities as authorized by you
How We Use YouTube Data
- Publish and manage YouTube video content on your behalf (only after your explicit authorization)
- Display video performance analytics to help you optimize content strategy
- Integrate and display multi-platform data dashboards within the CallFay platform
- We do NOT sell your YouTube data to any third party
- We do NOT use your YouTube data for purposes unrelated to providing our services to you
Data Storage & Retention
YouTube API data is retained only for the duration of service provision. After you revoke authorization or delete your account, we will delete all data obtained through YouTube API within 30 days. Aggregated analytics data (which does not contain personally identifiable information) may be retained longer for service improvement purposes.
Revoking Access
You can revoke CallFay's access to your YouTube account at any time by:
- Disconnecting YouTube in your CallFay account settings
- Revoking access directly through the Google Security Settings page
7. Data Security
We use industry-standard security measures to protect your information, including:
- TLS/SSL encrypted data transmission
- AES-256 encrypted data storage
- Regular security audits and penetration testing
- Role-based access controls with audit logging
- Employee security awareness training
- Comprehensive security incident response plan
8. Your Rights
You have the following rights regarding your personal information:
- Access: Request a copy of your personal information we hold
- Correction: Request correction of inaccurate information
- Deletion: Request deletion of your personal information
- Restrict processing: Request limits on how we process your information
- Data portability: Request your data in a machine-readable format
- Withdraw consent: Withdraw previously given consent at any time
- Account deletion: Request permanent deletion of your account and associated data
9. Cookies and Tracking Technologies
We use cookies and similar technologies to improve your experience, analyze service usage, and provide personalized content. Types of cookies we use:
- Essential cookies: Required for website functionality (login, security)
- Functional cookies: Remember your preferences for enhanced personalization
- Analytics cookies: Help us understand usage patterns to improve our services
You can manage cookie preferences through your browser settings. Disabling certain cookies may affect service functionality.
10. Policy Updates
We may update this Privacy Policy from time to time. Any significant changes will be communicated via email or in-service notification. We recommend reviewing this policy regularly for the latest information.
11. Contact Us
If you have any questions about this Privacy Policy, or wish to exercise your data rights, please contact us:
We will respond to your request within 15 business days.