Privacy Policy

Effective Date: July 28, 2026
Last Updated: July 28, 2026

This Privacy Policy explains how CLOUND NEXUS ECOM SERVICE CO., LIMITED (“BFTools,” “we,” “us,” or “our”) collects, uses, retains, discloses, and protects personal data when you visit, install, register for, or use the BFTools website, account system, desktop applications, subscription services, customer support, and any other tools or software that BFTools may provide in the future (collectively, the “Services”).

This Policy applies across the BFTools suite of tools unless a particular tool provides a separate privacy notice, just-in-time notice, or permission disclosure. Any such supplemental notice forms part of this Policy. If a supplemental notice conflicts with this Policy, the supplemental notice controls for that tool and the specific processing activity it describes.

Please read this Policy before using the Services. Your use of the Services acknowledges that you have been informed of the practices described here. Where applicable law requires consent, we will request valid consent separately. If you do not agree and the relevant processing is necessary to provide a Service, do not register for or use that Service.

1. Scope and Our Role

BFTools generally acts as the controller, personal information handler, business, or equivalent responsible entity for the account information and order information described in this Policy.

Payment processors, app stores, operating system providers, third-party websites, and services that you choose to connect may process information independently under their own purposes and privacy notices. BFTools does not control their independent privacy practices and makes no commitments concerning their conduct beyond those required by applicable law.

This Policy does not apply to:

files, text, configurations, or tool outputs that remain solely on your device and are never transmitted to BFTools;
independently provided third-party products, websites, plug-ins, extensions, or services; or
information about BFTools employees, applicants, contractors, or business contacts, except where applicable law requires otherwise.

2. Information We Process

We follow a data-minimization approach. As a general rule, BFTools stores only information you provide to register an account and information required to maintain transaction and order records on its servers.

2.1 Account Information

When you register, sign in, update, or close an account, we may process:

your email address;
account name, user identifier, and account status;
password-verification data protected by secure hashing or another non-reversible method;
account creation, update, and closure records; and
information necessary to verify an account, reset a password, prevent unauthorized access, and process privacy requests.

We do not store your account password in plaintext. You are responsible for safeguarding your credentials and not sharing your account.

2.2 Order Information

When you purchase, renew, refund, cancel, or use a trial, we may receive from a payment provider, app store, or authorized sales channel and retain:

an order number, transaction identifier, or processor reference;
the purchased tool, plan, license, or subscription type;
order amount, currency, tax, discount, and invoice status;
order, payment, renewal, cancellation, refund, and expiration dates;
order, subscription, trial-eligibility, and entitlement status; and
limited transaction records necessary for fulfillment, accounting, tax, audit, dispute resolution, and fraud prevention.

2.3 Payment Information

Payments are processed directly by third-party payment processors, acquiring institutions, banks, or app stores. BFTools does not collect or retain full payment-card numbers, bank-account credentials, payment passwords, CVV/CVC values, security codes, or other financial credentials that can directly authorize a payment.

A third party may provide a payment page or embedded payment component. Information you submit to that third party is governed by its privacy notice and terms. BFTools may receive limited result information needed to confirm a transaction, such as payment status, an order reference, amount, currency, and refund status, but this does not give BFTools possession of your complete payment credentials.

2.4 Local Tool Data

Unless a particular tool expressly states otherwise, files, text, configurations, project content, and outputs processed by BFTools desktop tools remain on your device. BFTools does not upload, access, or retain that content on its servers.

If a future tool introduces cloud synchronization, online processing, collaboration, remote backup, artificial intelligence, crash reporting, or another feature that requires content transmission, we will provide a tool-specific supplemental notice before the feature is enabled and obtain consent where required by law.

2.5 Information You Voluntarily Provide

If you contact us by email or another channel, we receive the communication and contact details you choose to provide. Do not include sensitive personal data, passwords, complete payment credentials, or third-party confidential information that is not necessary to resolve your request.

2.6 Information We Do Not Intentionally Seek

Absent a tool-specific notice and an appropriate legal basis, we do not intentionally seek precise location, biometric, health, racial or ethnic, religious or philosophical belief, political opinion, trade-union membership, sex-life or sexual-orientation, government-identifier, child, or other sensitive or special-category information.

3. Sources of Information

We may obtain information from:

you, when you register, configure an account, make a purchase, or contact us;
payment providers, app stores, or authorized sales channels that return order results;
a lawful corporate reorganization, merger, acquisition, or asset transfer; and
other sources permitted by law, in which case we will provide any additional notice required by applicable law.

4. Purposes of Processing

We may process information to:

create, authenticate, maintain, secure, and close accounts;
provide, activate, update, and verify software licenses, trials, subscriptions, and entitlements;
process orders, renewals, cancellations, refunds, invoices, taxes, and accounting matters;
send verification codes, password resets, transaction receipts, service-change notices, security alerts, and other necessary service communications;
answer inquiries, manage complaints, and troubleshoot account or order issues;
detect and prevent fraud, abuse, unauthorized access, repeat-trial abuse, license circumvention, malicious attacks, and other unlawful or contract-violating activity;
maintain, exercise, or defend legal claims and enforce applicable terms and license agreements;
comply with accounting, tax, sanctions, court, regulatory, and other legal obligations; and
conduct internal audit, risk control, and business-continuity activities that are lawful and compatible with the original purpose.

Unless we provide additional notice and have a valid legal basis, we do not use account or order information to profile you for third-party advertising or make decisions based solely on automated processing that produce legal or similarly significant effects.

5. Legal Bases

Depending on your location and the processing activity, we rely on one or more of the following legal bases:

Contractual necessity or pre-contractual steps: to register an account, deliver a license, manage a subscription, fulfill an order, and provide support;
Legal obligation: to comply with financial, tax, audit, regulatory, judicial, and statutory retention requirements;
Legitimate interests or reasonable business purposes: to secure the Services, prevent fraud, protect accounts, maintain operations, resolve disputes, and improve reliability, provided those interests do not improperly override your rights and interests;
Consent: where required by law or where processing relates to an optional feature; you may withdraw consent without affecting processing lawfully completed before withdrawal; and
Other bases recognized by law: including protecting vital interests or establishing, exercising, or defending legal claims.

If information is necessary to perform a contract or comply with law and you decline to provide it, we may be unable to create an account, process an order, or provide the relevant Service.

6. Disclosure and Recipients

We do not sell personal information or share it for cross-context behavioral advertising. We disclose limited information only when necessary and lawful, including to:

Service providers and processors: vendors providing cloud hosting, account authentication, email delivery, customer support, security, financial audit, subscription management, or infrastructure services;
Payment and sales channels: payment processors, app stores, banks, tax, or invoicing providers to reconcile orders, handle refunds or disputes, or meet legal requirements;
Professional advisers: legal, compliance, audit, insurance, and financial advisers bound by confidentiality duties;
Affiliates and transaction participants: in the evaluation or completion of a reorganization, financing, merger, acquisition, bankruptcy, asset sale, or business transfer, subject to lawful protection of the information;
Government and law-enforcement authorities: to comply with applicable law, valid legal process, court order, or regulatory demand, or to protect the rights, safety, and property of BFTools, users, or the public; and
Other recipients at your direction or with your consent.

We require providers processing information on our behalf to act under contract and instructions and to use appropriate confidentiality and security measures. Where lawful, we reserve the right to scrutinize, narrow, challenge, or reject demands that are overbroad, invalid, or unlawful.

7. International Transfers

BFTools is registered in Singapore. Account and order information may be processed in Singapore or other countries where our providers operate. Privacy protections in those locations may differ from those in your jurisdiction.

Where required by applicable law, we use recognized transfer mechanisms and safeguards, which may include adequacy decisions, standard contractual clauses, United Kingdom international-transfer mechanisms, contractual protections, certifications, security assessments, separate consent, or other lawful methods. You may contact us to request information about applicable safeguards, subject to redaction of trade secrets, security information, and third-party confidential information.

8. Retention

We retain information only for as long as needed for the purposes described in this Policy, contract performance, dispute resolution, agreement enforcement, and legal, tax, accounting, or audit requirements. Retention depends on the information and applicable obligations:

account information is generally retained until account closure or termination of the Services, then deleted or anonymized within a reasonable technical processing period;
order, refund, invoice, tax, and accounting records may be retained for the period required by applicable law after the transaction;
information concerning a refund, chargeback, fraud matter, complaint, investigation, or litigation may be retained until the matter and any applicable limitation period end; and
information in backups is isolated and deleted according to established backup-rotation schedules unless continued retention is legally required.

When no lawful business or legal need remains, we take reasonable steps to delete, anonymize, or securely dispose of information. Account deletion does not necessarily require simultaneous deletion of order records that we must retain by law, and it does not affect processing lawfully completed before deletion.

9. Security

We use reasonable technical and organizational measures appropriate to the nature and risk of the information, which may include access controls, least-privilege permissions, encryption in transit, secure password hashing, logging and anomaly monitoring, vendor management, backups, and incident-response procedures.

No transmission, software, or storage system is guaranteed to be completely secure. To the maximum extent permitted by applicable law, BFTools does not warrant absolute security against attacks, third-party conduct, compromised devices, disclosure of user credentials, or events beyond its reasonable control. If an incident requires notification, we will assess, respond to, and notify regulators and affected individuals as required by applicable law.

10. Your Choices and Rights

Depending on applicable law, you may have some or all of the following rights:

to know or confirm whether we process your personal data;
to access or receive a copy of personal data;
to correct inaccurate, incomplete, or outdated information;
to request deletion, anonymization, or restriction of processing;
to object, where applicable, to processing based on legitimate interests, direct marketing, or particular purposes;
to withdraw consent;
to receive data in a structured, commonly used, machine-readable format and request transfer where applicable;
to opt out of sale, sharing, or targeted advertising and to limit use of sensitive personal information;
to receive information about automated decision-making and request human review where applicable;
to complain to a competent data-protection authority;
to use an authorized agent to make a request;
to appeal our refusal of a privacy request; and
to be free from unlawful discrimination or retaliation for exercising privacy rights.

These rights are not absolute. To protect accounts, transaction records, and other users, we may verify your identity or an agent’s authority. Where permitted by law, we may deny a request that cannot be verified, is manifestly unfounded, repetitive, excessive, affects others’ rights, compromises security, interferes with legal obligations, or falls within a statutory exception, and we will provide the applicable reason.

You may update certain information in the account features or submit a request using the email address in Section 17. We will respond within the period required by applicable law. We do not charge for privacy requests except where the law permits.

11. Regional Disclosures

11.1 European Economic Area, United Kingdom, and Switzerland

Where applicable, you may have rights of access, correction, erasure, restriction, objection, portability, withdrawal of consent, and complaint to your local supervisory authority. Our principal legal bases for account and order processing are contract performance, legal obligations, and legitimate interests in secure and lawful operation of the Services.

You have the right to object at any time to processing for direct marketing. BFTools does not currently make decisions based solely on automated processing that produce legal or similarly significant effects.

If applicable law requires BFTools to appoint an EEA or UK representative, we will publish that representative’s details in the Services or an update to this Policy.

11.2 Singapore

To the extent the Personal Data Protection Act 2012 applies, you may request access to and correction of personal data under our control and may withdraw consent on reasonable notice. Withdrawal may prevent us from continuing Services that depend on the information. BFTools will use reasonable security arrangements, limit retention, and manage overseas transfers and notifiable breaches in accordance with applicable requirements.

11.3 United States

Under California and other applicable U.S. state privacy laws, you may have rights to know, access, correct, delete, obtain portability, opt out of sale or sharing, opt out of targeted advertising or certain profiling, appeal, and receive services without unlawful discrimination.

BFTools does not sell personal information or share it for cross-context behavioral advertising. Based on the current server-side processing scope, the principal categories processed in the preceding twelve months are identifiers, such as email and account identifiers, and commercial information, such as order and subscription records. The sources and purposes are described in Sections 2 through 6. We do not knowingly sell or share the personal information of users under 16.

11.4 Mainland China

Where the Personal Information Protection Law of the People’s Republic of China applies, BFTools will follow the principles of lawfulness, legitimacy, necessity, good faith, openness, transparency, and minimum scope. You may have rights to consult, copy, correct, supplement, or delete personal information; request an explanation of processing rules; and, where applicable, restrict or refuse processing, withdraw consent, and request transfer.

If personal information must be transferred outside Mainland China, we will meet applicable notice, separate-consent, personal-information-protection-impact-assessment, and statutory transfer-mechanism requirements. If law requires a local representative or establishment, we will publish the relevant details in the Services or a Policy update.

11.5 Brazil, Canada, Australia, and Other Jurisdictions

Where Brazil’s LGPD, applicable Canadian federal or provincial privacy law, the Australian Privacy Act and Australian Privacy Principles, or another regional law applies, you may have rights to request access, correction, deletion, anonymization, restriction, portability, withdrawal of consent, information about recipients, objection, or complaint. We will acknowledge, verify, respond to, and provide available appeal channels for requests as required by applicable law.

12. Children and Minors

The Services are intended for adults with legal capacity and are not directed to children. A person below the age of majority or the age at which they may independently consent to data processing in their jurisdiction may use a legally available Service only with the consent and supervision of a parent or legal guardian.

We do not knowingly collect children’s personal data where prohibited, and we do not sell or share children’s data for targeted advertising. If you believe a minor has provided personal data without valid authorization, contact us. After reasonable verification, we will delete the information or take other action required by law.

13. Service Communications and Marketing

Account verification, password resets, order receipts, security alerts, and material policy or Service changes are necessary service communications and generally cannot be fully disabled while the account remains in use.

If we send optional marketing communications in the future, we will provide legally required unsubscribe methods and honor your choice. Opting out of marketing does not prevent necessary transactional, security, or service notices.

14. Third-Party Services and External Links

The Services may link to third-party websites, payment pages, app stores, plug-ins, or integrations. BFTools does not control the independent data handling, security, or content of third parties. Review their privacy notices before use. A third party’s policy or conduct does not become a BFTools commitment or warranty merely because a link appears in the Services.

15. Business Changes

If BFTools undergoes a merger, acquisition, financing, reorganization, bankruptcy, asset sale, or business transfer, account and order information may lawfully transfer as part of the transaction. We will require the recipient to handle the information under this Policy or protections no less than those required by applicable law and will provide advance notice where legally required.

16. Changes to This Policy

We may update this Policy to reflect changes in the Services, business, technology, or law. We will publish the revised version through the website, application, or another appropriate channel and identify the last-updated date. For material changes, we will provide advance notice through the application, account email, or another prominent method and obtain renewed consent where required.

Continued use after an update does not replace valid consent when applicable law requires it. If you do not accept a material change, you may stop using the relevant Service and request account closure as permitted by law.

17. Contact Us

For privacy questions, complaints, rights requests, or data-protection matters, contact:

Controller/Personal Information Handler: CLOUND NEXUS ECOM SERVICE CO., LIMITED
Place of Registration: Singapore
Data Protection and Privacy Email: service@bifang.tools

To protect your information, we may ask you to verify your identity through your account email or another reasonable method. Do not send passwords, full payment-card details, or other high-risk credentials by email.

We will review and respond to complaints. If you are dissatisfied with our response, you may complain to the competent data-protection, privacy, or consumer-protection authority in your jurisdiction.

18. Language and Mandatory Law

This Policy may be provided in multiple languages. The versions are intended to have the same meaning. If an interpretation differs, the English version controls to the extent permitted by applicable law. Every limitation, disclaimer, and description of rights is subject to mandatory applicable law. Nothing in this Policy excludes, limits, or waives a right or liability that cannot lawfully be excluded, limited, or waived.