Privacy Policy
1. Who we are
AgentRinger ("AgentRinger," "we," "us," or "our") operates the website agentringer.com and the AgentRinger power-dialing platform (the "Service"). This Privacy Policy describes how we collect, use, disclose, and protect information when you visit our website or use our Service, and it forms part of our Terms & Conditions.
For purposes of applicable data-protection law, the data controller is AgentRinger (operator of agentringer.com), reachable at [email protected].
2. Information we collect
| Category | What it includes | Why we collect it |
|---|---|---|
| Account information | Name, email address, mobile number, password (stored only as a cryptographic hash), company/team name. | To create and secure your account, authenticate you, and provide the Service. |
| Your lead data | Contacts you upload or create: names, addresses, phone numbers, notes, statuses, dispositions, call history tied to those contacts. | Solely to operate the Service for you. This is your business data. We claim no ownership of it. |
| Call metadata & recordings | Phone numbers dialed, timestamps, duration, disposition codes, carrier cost data, and — where you enable recording — call audio (both sides) for destinations in one-party-consent jurisdictions. Recording is automatically disabled for destinations in all-party-consent states, with notice in the dialer; each recording is SHA-256 hashed at capture. Transcripts may be generated by automated speech recognition — they are AI-generated drafts and the audio is the authoritative record. | To meter usage against your plan, provide analytics, and support compliance with telemarketing laws. |
| Billing information | Payment card details are collected and stored by our payment processor (Stripe). We retain only the last four digits and card brand for display. | We never see or store full card numbers. |
| Support conversations | Messages exchanged with Belle (our AI assistant), including transcripts you optionally request by email. | To answer questions and improve support quality. Consent is opt-in and revocable. |
| Website analytics | Standard, anonymized traffic data via Google Analytics (pages viewed, approximate geography, device type). | To understand site traffic and improve the website. |
| Log data | IP address, browser type, access times — retained in security logs. | Fraud prevention, rate limiting, and security auditing. |
3. What we NEVER do
- We never sell, rent, license, or share your lead lists or contact data with any third party, for any reason, other than the sub-processors listed in Section 6 who help us operate the Service under contract.
- We never use your farm area, lead data, or calling patterns to prospect for ourselves, for our affiliates, or for any other customer.
- We never build cross-user profiles. Your behavioral data powers your analytics only. It is never aggregated into products sold to others.
- We never read the content of your calls beyond what is technically required to connect and (optionally) record them at your direction.
- We never keep charging you after cancellation. No ghost billing.
4. How we use information
- Provide the Service: authenticate you, route your calls, meter minutes, render dashboards and reports.
- Billing: calculate plan fees, overages, and addon charges through Stripe; issue invoices and receipts.
- Support: respond to tickets, deliver chat transcripts on request, troubleshoot issues.
- Product improvement: analyze aggregate, de-identified usage patterns to fix bugs and prioritize features.
- Compliance: maintain audit logs of consent, DNC flags, and calling-window enforcement to help you meet TCPA/state requirements.
- Communication: service announcements, security notices, and — only with opt-in consent — marketing updates. Every marketing email includes unsubscribe.
5. AI features and your data
Some optional features use third-party AI processing:
- Belle (support chat): questions you type may be processed by Google's Gemini API solely to generate an answer. Chat content is not used by Google to train its models under our commercial terms, and we send only the question text plus a fixed system prompt — not your lead data.
- Smart Restore / note enrichment (if offered): free-text notes may be processed by AI to suggest pipeline stages. Processing occurs per-job at your explicit request and is never used to train models.
We do not send your lead contact records to any AI provider. AI features operate on support questions or note text only, at your initiation.
6. Sub-processors (who touches your data, and why)
| Provider | Purpose | Data involved |
|---|---|---|
| Contabo (VPS hosting) | Servers running the Service | All Service data (encrypted storage, EU/US datacenters) |
| Telnyx | Telephony carrier | Call routing metadata, audio during active calls |
| Stripe | Payment processing | Billing details, card tokens |
| Cloudflare | DNS, CDN, bot protection, Access authentication | Traffic metadata, IP addresses |
| Google (Gemini API) | Belle AI responses | Support question text only |
| Brevo | Transactional email | Your email address, transcript copies on request |
| Google Analytics | Website analytics | Anonymized traffic data |
All sub-processors are bound by commercial terms restricting use of your data to providing their service to us. A current list is available on request.
7. Data retention & deletion
- While active: your data is retained as long as your account exists.
- On cancellation: you are prompted (and assisted) to export everything — leads, call logs, recordings, notes. Certified exports are provided before cancellation completes.
- After cancellation: your account enters a 90-day grace period, after which lead data, call records, and account data are permanently purged from production systems. Backups roll off within 90 additional days. Only aggregated, de-identified statistics that cannot be traced to you survive (e.g., total platform dials in a month).
- Earlier deletion: request deletion anytime at [email protected]. We will confirm completion in writing. Legal-hold exceptions (e.g., an ongoing billing dispute) will be disclosed to you.
8. Data security
- Passwords stored as scrypt hashes — never plaintext, never reversible.
- All traffic encrypted in transit (TLS/HTTPS via Cloudflare).
- Sessions are HttpOnly cookies with server-side revocation; logout invalidates immediately.
- Rate limiting and bot protection on all authentication endpoints.
- Least-privilege database access; audit logging of administrative actions.
- Nightly encrypted backups with off-site retention.
No system is perfectly secure, and we don't pretend ours is. If a breach affects your data, we will notify affected users and regulators as required by applicable law, promptly and in plain language.
9. Your rights
Depending on your jurisdiction (including California under CCPA/CPRA, the EEA/UK under GDPR, and other U.S. state laws), you may have some or all of the following rights regarding personal information we hold about you (note: rights over your imported leads rest with you as their controller — we process them on your behalf):
- Access — request a copy of personal data we hold about you.
- Correction — fix inaccurate data.
- Deletion — request deletion of your personal data (subject to legal holds).
- Portability — receive your data in a machine-readable format (we already provide full exports).
- Opt-out of marketing — unsubscribe links in every email, or email us directly.
- Non-discrimination — exercising these rights never degrades your service.
To exercise any right, email [email protected]. We respond within 30 days. California residents may also use the "Do Not Sell My Personal Information" mechanism — though as stated above, we do not sell personal information, so there is nothing to opt out of; this notice is provided for completeness.
10. Cookies & tracking
We use strictly necessary cookies (session authentication) and Google Analytics cookies (traffic analytics). We do not use advertising cookies, cross-site trackers, or fingerprinting. You can block Analytics cookies in your browser without affecting Service functionality.
11. Children's privacy
The Service is not directed to anyone under 18, and real-estate licensure requirements mean users must be adults. We do not knowingly collect data from minors. If you believe a minor has provided data, contact us and we will delete it.
12. Changes to this policy
Material changes will be announced by email to account holders at least 14 days before taking effect, and the version date at the top of this page will change. Non-material updates may be posted without notice. The version history is available on request.
13. Contact — and disputes
Privacy questions, requests, or complaints: [email protected]. We commit to acknowledging within 2 business days and resolving within 30.
If you have an unresolved concern, you may also escalate to your state attorney general or, for EU/UK residents, your local data-protection authority — though we'd appreciate the chance to fix it first.