Privacy Policy

Ringa ("we", "us", "our") is committed to protecting your privacy. This policy explains what data we collect, how we use it, and your rights.

1. Data We Collect

When you sign up and use Ringa, we collect:

• Account data — business name, email address, timezone, emergency contact number
• Google Calendar access — OAuth refresh token to read/write calendar events on your behalf
• Call data — transcripts, summaries, duration, and caller phone numbers for calls handled by your AI receptionist
• Payment data — processed by Stripe; we store only your Stripe customer and subscription IDs, never your card details
• Customer data — names, phone numbers, and addresses collected from your callers during appointment booking

2. How We Use Your Data

• To operate and deliver the Ringa service
• To book appointments and send SMS confirmations to your customers
• To display call transcripts in your client portal
• To send you service-related emails (account setup, billing)
• To improve the accuracy and reliability of our AI receptionist

3. Data Sharing

We do not sell your data. We share data only with the third-party services required to operate Ringa:

• Twilio — for phone number provisioning and SMS delivery
• Vapi — for AI voice call handling and transcription
• Google — for calendar integration
• Stripe — for payment processing
• Neon — for secure database storage

4. Call Recordings & Transcripts

Calls handled by your Ringa AI receptionist may be transcribed. Transcripts are stored securely and are only accessible to you through your client portal. Callers are not explicitly notified of transcription — you are responsible for complying with any local laws regarding call recording disclosure in your jurisdiction.

5. Data Retention

We retain your data for as long as your account is active. If you cancel, we retain your data for 30 days before permanent deletion, in case you wish to reactivate. You can request earlier deletion by emailing us.

6. Security

All data is transmitted over HTTPS. Database credentials and API keys are stored as environment variables and never committed to source code. Google OAuth tokens are stored encrypted at rest in our database.

7. Your Rights

You have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Withdraw Google Calendar access at any time via your Google account settings

To exercise these rights, email hello@getringa.ca.

8. Cookies

Ringa does not use tracking cookies. We use no third-party analytics or advertising scripts.

9. Children

Ringa is a business service not intended for use by anyone under 18.

10. Changes

We may update this policy from time to time. We'll notify you by email before material changes take effect.

11. Contact

Questions about this policy? Email us at hello@getringa.ca.