Privacy policy for PT Halo Industri Digital.

1. Scope

This policy explains how Salestify handles personal data when someone visits the public site, creates an account, manages a workspace, connects a WhatsApp channel, or interacts with a business that uses the platform.

2. Information we collect

The categories of data we process depend on how the platform is used.

• Account and business profile data, such as name, email address, workspace name, and team membership.
• Connected integration data, such as Meta or Twilio account identifiers, WhatsApp phone details, and provider configuration needed to operate messaging.
• Customer communication data, including contact identifiers, message content, message metadata, booking details, payment references, and service selections.
• Knowledge-base and configuration data, including uploaded PDF, DOCX, and PPTX files, AI prompts, business context, handoff rules, and service catalog settings.
• Operational and security data, such as logs, device or browser metadata, error telemetry, and access records used to secure and support the service.

3. How we collect information

We collect information directly from workspace users, from customers who message businesses using Salestify, and from connected providers such as Meta, Twilio, Stripe, and selected AI vendors.

4. How we use information

We use personal data only for legitimate business and operational purposes related to delivering the service.

• Create and administer accounts, workspaces, and team access.
• Businesses using Salestify control their customer communication workflows. For customer communication data processed on behalf of a business, Salestify acts as a processor or service provider. Salestify acts as a controller for its own account, billing, security, support, and compliance records.
• Receive, store, route, and otherwise process WhatsApp message content and related metadata as needed to deliver messaging, automation workflows, analytics, bookings, payments, handoffs, and AI-assisted responses configured by the business.
• Generate AI-assisted replies, booking flows, payment links, analytics, and support workflows.
• Process payments, prevent abuse, investigate incidents, and maintain platform reliability.
• Comply with legal obligations, enforce our terms, and respond to valid requests from users or regulators.

5. AI and automation

When a workspace enables AI features, message content, business context, and knowledge documents may be processed by configured model providers to generate replies, classify requests, or execute approved tools. Those providers receive only the data needed to perform the requested function and handle that data under their own terms and policies.

6. How we share information

We do not sell personal data. We may share data with trusted service providers and integration partners when it is necessary to deliver the product.

• Messaging providers such as Meta and Twilio to send and receive WhatsApp traffic.
• When Salestify handles WhatsApp traffic through Meta services, that processing occurs to provide the messaging features requested by the business and in connection with applicable Meta platform and WhatsApp business terms. The business remains responsible for its customer communications and compliance with applicable messaging rules and law.
• AI providers such as OpenAI and Anthropic when a workspace uses AI features.
• Payment and billing providers such as Stripe when creating payment records or checkout links.
• Infrastructure, hosting, storage, monitoring, and security vendors acting on our behalf.
• Advisers, regulators, or law-enforcement authorities when required by law or to protect rights, safety, and platform integrity.

7. Data retention

We retain personal data for as long as reasonably necessary to operate the service, maintain workspace history, satisfy legal obligations, resolve disputes, and support security or fraud investigations. Retention periods vary by data type and by the instructions of the business using the platform.

8. Security

We use reasonable technical and organizational safeguards designed to protect personal data, including access controls, encryption in transit, credential protection for connected providers, and operational logging. No internet-based service can guarantee absolute security.

9. International data processing

Salestify and its providers may process data in countries other than the country where it was collected. Where required, we rely on contractual, technical, and organizational measures intended to protect transferred data.

10. Your rights and choices

Depending on applicable law, you may have rights to request access, correction, export, restriction, objection, or deletion of personal data. If you are a customer communicating with a business through WhatsApp, you should first contact that business directly because it controls the customer relationship and message workflow.

11. Data deletion requests

Instructions for requesting deletion are published on our dedicated data-deletion page.

• Use the public instructions at https://salestify.hidigi.asia/data-deletion.
• We may verify identity before acting on a request.
• Some records may be retained where required for security, fraud prevention, accounting, or legal compliance.

12. Children's privacy

Salestify is not intended for children under the age required by applicable law to use the service independently. We do not knowingly build consumer features aimed at children.

13. Changes to this policy

We may update this policy from time to time. When we make material changes, we will update the effective date on this page and may provide additional notice where appropriate.

14. Contact

Questions or privacy requests can be sent using the contact routes below.

• Privacy email: dedy.ariansyah1@gmail.com
• Support email: dedy.ariansyah1@gmail.com
• Mailing address: Jl. Belimbing 11, Cihapit, Bandung Wetan, Jawa barat, 40114