Draft for review — not yet reviewed by counsel.

Legal

Privacy Policy

Effective: October 25, 2026

This policy explains what Ringkit collects, why we collect it, and the control you have over it. It covers our customers — the businesses using Ringkit — and the people who call them.

1. What we collect

We collect what we need to answer, route and summarize your calls:

  • Account information — your name, business name, email, phone number and billing details. Card numbers are handled by our payment processor; we don't store them.
  • Your business brief — what we gather from your website and the tools you connect, such as your calendar or CRM, to describe your services, service area, rates and how calls should be handled.
  • Call audio — recordings of calls to and from your Ringkit numbers.
  • Transcripts and summaries — text generated from each call, plus the tasks and proposals drawn from it.
  • Caller phone numbers and call details — the caller's number, the time and length of the call, and how it was routed.
  • Usage data — how you use the dashboard and API, including logs of API requests.

2. How we use it

  • Deliver the service — connect, route and record calls, and run the AI that triages them.
  • Brief reps — give the bot, your team and any Ringkit rep who takes a call the context in your brief.
  • Produce summaries — transcribe calls and turn them into summaries, tasks and proposals.
  • Billing — measure minutes and numbers, send invoices and prevent fraud.
  • Support and safety — help you when you contact us, fix problems, and detect abuse such as robocalling.

3. What we don't do

Your business brief, call recordings and summaries are encrypted at rest and in transit, and never used to train models for anyone else.

  • We never train models for other customers on your data.
  • We never sell your data or your callers' data, and we don't share it for advertising.
  • We use AI model providers only under terms that bar them from training on your data.

4. Callers' data

People who call your business aren't Ringkit customers, but we handle their information with the same care.

  • Every call starts with a consent notice telling the caller the call is recorded and transcribed.
  • Callers' recordings, transcripts and numbers follow the retention settings on the business's account (see Retention).
  • A caller can ask us to delete their recordings and transcripts by emailing privacy@ringkit.ai with the number they called from and the business they called. We'll verify the request, let the business know, and delete the data unless the law requires us to keep it.

Because you own the relationship with your callers, you're responsible for any notices your own privacy policy requires.

5. Retention

  • Call recordings — kept 90 days by default. You can shorten or lengthen this in your account settings, or delete any recording at any time.
  • Transcripts and summaries — kept until you delete them.
  • Account and billing records — kept while your account is open, and afterward for as long as tax and accounting law requires.
  • When you close your account — we delete your recordings, transcripts, summaries and brief, except records we must keep by law. Copies in backups are removed as those backups expire.

6. Subprocessors

We rely on a small set of service providers to run Ringkit. By category:

  • Telecom carriers — to connect calls and provide phone numbers.
  • Cloud hosting — to run our software and store data.
  • AI model providers — to transcribe and triage calls and draft summaries, under terms that bar them from training on your data.
  • Business tools — payment processing, email delivery and customer support.

Each provider gets only the data it needs for its job. We'll publish a named subprocessor list and notify customers before adding new ones.

7. Security measures

We encrypt data in transit and at rest, limit who can see it, and log access. Reps see only your brief and the live call. The details are on our Security page.

8. Your rights

  • Export — download your call history, recordings, transcripts and summaries from the dashboard or through the API.
  • Delete — delete individual calls, or your whole account, at any time.
  • Access and correction — ask what we hold about you, and have it corrected.

Depending on where you live — for example, under the California Consumer Privacy Act — you may have additional rights. We won't treat you differently for using them. Email privacy@ringkit.ai and we'll respond within the time the law requires.

9. Children

Ringkit is a business service and isn't meant for anyone under 18. We don't knowingly collect personal information from children. If a child's information reaches us through a call, a parent or guardian can ask us to delete it at privacy@ringkit.ai.

10. Contact

Questions or requests about your data: privacy@ringkit.ai. If we make a material change to this policy, we'll email account owners before it takes effect, and the effective date above will change.