سياسة الخصوصية

تاريخ السريان: 1 أبريل 2026

1. Introduction

Golify ("we", "us", "our") is committed to protecting your privacy. This policy describes how we collect, use, store, and protect your information when you use our supply chain and business management platform. By accessing or using Golify, you agree to the practices described in this Privacy Policy.

2. Information We Collect

Account Information

  • Company name, industry, company size, country, and city
  • Preferred language and primary currency
  • Contact details, full name, and email address

Business Data

  • Supplier profiles and customer records
  • Purchase orders and sales orders
  • Container and shipment data
  • Financial transactions, invoices, and payment records
  • Inventory data and warehouse information

Financial Information

  • Bank account details
  • Payment transaction history
  • Accounting entries and financial reports data
  • Multi-currency exchange records

Documents & Media

  • Uploaded files (PDF, DOCX, images, Excel)
  • Attachment galleries and barcodes
  • Imported and exported data files

Usage Data

  • Login activity and feature usage patterns
  • Browser type, IP address, and device information

Communication Data

  • Support tickets and feedback
  • Any correspondence with our team

3. How We Use Your Information

  • Provide and maintain the Golify platform services
  • Process transactions and manage your account
  • Generate financial reports (Balance Sheet, Profit & Loss, Trial Balance, General Ledger, Cash Flow, and more)
  • Enable multi-currency payment processing and exchange rate tracking
  • Manage user roles and permissions (270+ permission settings)
  • Provide multi-language support (English, Arabic, Chinese)
  • Send service-related notifications and updates
  • Improve our platform and develop new features
  • Comply with legal obligations

4. Data Storage & Security

  • Enterprise-grade encryption for data in transit and at rest
  • Regular automated backups
  • Strict access controls with role-based permissions
  • 99.9% uptime infrastructure
  • Data stored in secure, geographically distributed data centers
  • Regular security audits and vulnerability assessments
  • Each account includes 20 GB storage; additional storage available at $20/GB

5. Data Sharing & Third Parties

We do NOT sell your personal or business data.

We may share data with:

  • Trusted infrastructure providers (hosting, CDN)
  • Payment processors for transaction handling
  • Legal authorities when required by law

All third-party providers are bound by data processing agreements. We may share anonymized, aggregated statistics for industry benchmarking purposes.

6. Your Rights

  • Access your data at any time through the platform
  • Export your data in standard formats (Excel, PDF)
  • Request correction of inaccurate information
  • Request deletion of your account and associated data
  • Withdraw consent for optional data processing
  • Port your data to another service
  • Upon account termination, data export is available for 30 days before permanent deletion

7. Cookies & Tracking

  • Essential cookies for authentication and session management
  • Preference cookies to remember your settings (language, currency, dark/light mode)
  • Analytics cookies to understand usage patterns (can be opted out)
  • We do not use advertising or third-party tracking cookies

8. Cross-Border Data Transfers

Golify is operated from the People's Republic of China. Your data is primarily stored on servers located within mainland China in compliance with the Cybersecurity Law (CSL) and Data Security Law (DSL).

  • Cross-border transfers of personal information are conducted in accordance with the PIPL Article 38, including security assessments by the Cyberspace Administration of China (CAC) where required
  • For European users, data transfers outside the EEA are protected by Standard Contractual Clauses (SCCs) approved by the European Commission
  • We obtain separate consent before transferring personal information outside of China, as required under PIPL Article 39
  • We conduct regular data transfer impact assessments for all cross-border data flows

9. Data Retention

  • Active account data is retained for the duration of your subscription
  • Financial records are retained for a minimum of 10 years in accordance with the PRC Accounting Law and Accounting Archives Management Measures
  • Tax-related records are retained for a minimum of 10 years as required by PRC tax regulations
  • Upon termination, you have 30 days to export data before permanent deletion
  • Usage logs are retained for no less than 6 months as required by the Cybersecurity Law (CSL) Article 21
  • Backup data is purged within 90 days of account deletion
  • For EU users, data is not retained longer than necessary for the purposes outlined in this policy, in compliance with GDPR Article 5(1)(e)

10. Children's Privacy

Golify is a business platform not intended for individuals under 18 years of age. We do not knowingly collect data from minors. If we become aware that we have inadvertently collected personal information from a minor, we will take steps to delete such information promptly.

11. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or applicable laws. Material changes will be communicated via email and platform notification. Continued use of the Golify platform after changes are posted constitutes your acceptance of the updated policy.

12. Regional Compliance

People's Republic of China

  • Personal Information Protection Law (PIPL) — We process personal information in accordance with PIPL principles of lawfulness, necessity, and good faith. We obtain informed consent before collecting and processing personal information
  • Cybersecurity Law (CSL) — Network operators' obligations are fulfilled including data localization, security assessments, and incident reporting to the relevant authorities
  • Data Security Law (DSL) — We classify and manage data according to its importance, and conduct regular risk assessments for data processing activities
  • We are registered with the relevant CAC authorities for cross-border data transfer where applicable

European Union / EEA

  • General Data Protection Regulation (GDPR) — For users located in the EU/EEA, we process personal data under lawful bases outlined in GDPR Article 6, including consent, contractual necessity, and legitimate interest
  • EU users have additional rights under GDPR including the right to lodge a complaint with a supervisory authority, the right to object to automated decision-making, and the right to data portability
  • We have appointed an EU representative in accordance with GDPR Article 27
  • Standard Contractual Clauses (SCCs) govern all data transfers from the EEA to China

13. Contact Us

For privacy-related inquiries, please reach out to us: