When you create an account, we collect your name, email address, password (stored as a secure hash), company name, and billing information. We do not store full payment card numbers — payment processing is handled by third-party processors subject to their own privacy policies.
We automatically collect information about how you use the Service, including log data (IP address, browser type, pages visited, timestamps), call session metadata (duration, call disposition, number identifiers), SMS delivery metadata, voicemail storage data, and feature interaction data.
When you upload contact lists or other data to the Service, that data is stored on our servers to provide the core functionality of the Service. You are solely responsible for the accuracy, legality, and proper handling of any contact data you upload.
If you contact us via email or support channels, we retain records of those communications. We use cookies and similar technologies to maintain session state, authenticate users, and gather aggregate analytics.
We use collected information to:
We do not sell your personal information.
We share information with third-party vendors who assist in operating the Service (hosting, payment processing, email delivery, analytics). These vendors are bound by confidentiality agreements and are prohibited from using your data for any purpose other than providing services to us.
Voice and telecommunications services are powered by Telnyx, LLC. Call metadata, SMS routing data, and related telecommunications information may be shared with Telnyx as necessary to deliver the Service.
We may disclose your information when required by law or valid legal process, in connection with a business transfer (merger, acquisition, or sale of assets), or with your express written consent.
We retain account data for as long as your account is active and for a reasonable period thereafter as needed to comply with legal obligations and resolve disputes.
Contact list data, call logs, SMS records, and voicemail recordings are retained for the duration of your subscription plus 90 days after account closure, after which they are permanently deleted. You may request early deletion by contacting us at legal@bffsoftware.com.
We implement reasonable technical and organizational measures to protect your data, including encryption in transit (TLS), hashed password storage (bcrypt), and role-based access controls. However, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security of your information.
If you use the Service to contact individuals, you are solely responsible for ensuring that all individuals in your contact lists have provided appropriate consent to be contacted, as required by applicable law, including:
You must ensure your contact lists have been properly scrubbed against the National Do Not Call Registry and any applicable state DNC registries. We do not monitor the content of your calls or messages or the composition of your contact lists for legal compliance.
The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If you believe we have inadvertently collected information from a minor, please contact us at legal@bffsoftware.com and we will promptly delete it.
The Service may contain links to third-party websites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review the privacy policies of any third-party services you access through the Service.
Depending on your jurisdiction, you may have rights regarding your personal data, including the right to access, correct, or request deletion of your information. To exercise any of these rights, contact us at legal@bffsoftware.com. We will respond to verified requests within a reasonable timeframe as required by applicable law.
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the new policy on our website or via email to the address associated with your account. Your continued use of the Service after the effective date of any change constitutes your acceptance of the updated policy.
For questions about this Privacy Policy or our data practices, contact: