Security and privacy
Your customers' calls are not ours to keep.
We handle conversations with your customers, so the honest answer to what we do with them matters more than a badge.
We do not store call recordings
Ringar does not store call recordings. What you get is the written transcript of the conversation. Live call audio passes through our telephony and voice providers so the call can be connected and processed, and those providers apply their own retention rules.
One business cannot see another
Separation is enforced in the database itself rather than by application code remembering to check. Every read is scoped to the business that owns it.
You decide what it knows
It answers from information you have written and can change or remove at any time. It does not learn things about your business from anywhere else.
A person stays in control
You choose what it handles alone and what must always reach someone. It does not decide to take on more than you gave it.
It does not claim things it did not do
If an action fails, the call record says so. A caller is never told something has been arranged when it has not.
Encrypted in transit and at rest
Your data is encrypted travelling to us and while stored. Access to production is limited and logged.
The details, in plain words.
Where your data is held
The database, web application and call-handling service are hosted in London, and telephony is provided from Dublin. One provider that processes live call audio has not stated where it processes it and may process data outside the UK. The full list of suppliers that process data is in the Privacy Policy.
How long we keep things
Call transcripts, summaries and outcomes are kept while your account is open, because they are your record of your own calls. We do not delete call data automatically on a fixed schedule yet. Deletion and export are handled on request: contact hello@ringar.ai. Backups may persist for a limited period until they are overwritten through normal backup cycles.
If something goes wrong
If we become aware of a personal data breach affecting customer data, we notify the affected customer without undue delay.
Who can see it
Access is limited to the people and systems that need it to provide, secure or support the service. Each business's data is kept separate in the database itself.
The written commitments are set out in the Privacy Policy and the Data Processing Schedule, which is Schedule 1 of our Terms.
What we are not going to claim.
Plenty of companies our size put certification logos on this page before they hold them. We are not going to do that.
We are building towards recognised standards, and the decisions we make now are made with that in mind. When we hold a certification we will say so here, with the date and the scope. Until then, ask us anything and we will answer it plainly.
Bring us your security questions.
If you need something specific answered before you can buy, ask. A straight answer is quicker than a questionnaire.