Privacy policy
This is a short, honest description of what Ringspine does with data, checked against the code that runs today rather than aspiration. It is not a legal filing and it does not cover every situation a lawyer would want covered — a formal data processing agreement and subprocessor list is planned but does not exist yet.
What Ringspine is
Ringspine places automated voice calls on behalf of a business (the "customer") to a person or company the customer asks it to call (the "callee"). If you gave a business your phone number and they used Ringspine to call you, this policy is about that call.
What we record, and why
Every call is recorded and transcribed so the customer who placed it can read back what was said, and so Ringspine can produce a summary. Every call opens with a spoken disclosure — a disclosure is always spoken, and no customer can configure it away. Its exact wording can be customised by the customer, and the customer is responsible for what it says; by default it states plainly that the person is speaking with an AI assistant and that the call is being recorded.
We hold, for a call: the audio recording, the transcript, a summary, and information the system extracted from the conversation (for example, whether the person seemed interested, what objections came up, or a time to call back).
How long we keep it
- Call audio is held for up to 14 days, then deleted. This is a property of our calling provider's plan, not something we control directly — if that changes, this number needs re-checking.
- Transcripts, summaries and extracted signals are kept for 90 days. After that, an automated job removes the conversation content: the recording's transcript, its summary, and what was inferred from it. We keep a record that a call happened — its length, the route it took, its price, and which account it was billed to — because accounting law requires that record, and it does not identify the person we called.
- You can request a copy of a call recording within 7 days of the call. There is no automatic download for this yet — an operator fetches the recording by hand from our calling provider inside that window. We deliberately leave slack against the 14-day deletion above so a request has time to be actioned.
If Ringspine called you
You did not sign up for Ringspine and you have no account with us. The business that called you is our customer: they decide who is called and why, and they are responsible for having a lawful basis for the call. If you have any question or request about a call you received — including asking us to delete what we hold about it — write to info@ringspine.com and we will act on it. Where the request is something only the business that called you can answer (for example, why they called, or what they intend to do with anything you told them), we will pass your request to them and ask them to respond to you directly.
We cannot verify who you are — nothing we hold about the person a call was placed to lets us confirm that you are that person. What we hold is: the phone number and any name or other detail the business supplied to us before the call, and whatever the recording, transcript, summary and extracted signals from the call itself happen to reveal. Because of that:
- We honour a request to delete what we hold about a call to your number without asking you to prove your identity. The cost of getting this wrong is a transcript we didn't need to keep, which is a small and recoverable mistake.
- We do not act on a request to see or export what we hold about a call without routing it through the business that called you first, since handing call content to someone who merely claims to be the callee would be a data breach if we are wrong, and we have no way to check.
If you are our customer (you have a Ringspine account)
From your dashboard at /dashboard/privacy you can download a copy of everything we hold
about your organization — your profile, your calls, call events, usage records, and credit
transactions (we never include vendor cost figures or your API key values in that export).
You can also ask us to delete your account entirely; an operator carries this out by hand,
which includes redacting every call your organization placed. If you have a credit balance
at that point, we settle it with you first — see the billing section of our terms.
What we do not do
- We do not process your data only in the European Union. Some of what this service depends on runs outside it.
- We do not promise that closing your account or deleting a call reaches every copy a vendor we depend on holds — we can only act on data we ourselves control.
- We do not publish a formal list of who we depend on to run this service, and we do not offer a data processing agreement yet (not built). What we hold about a call is what this document already describes: the number and any detail the business gave us beforehand, and the recording, transcript, summary and extracted signals from the call itself — we do not sell it, and we do not go further than what is written here.
Cookies and tracking
The public pages of this site — the homepage, this page, and the terms of service — do not run any analytics or session-recording tool. Those tools are mounted only inside the signed-in dashboard, once you are already our customer and using the product.
Contact
Questions, requests, or anything else about this policy: info@ringspine.com.
Changes to this policy
We may update this policy as the product changes. Because every claim in it is meant to match what the code actually does, a change here should track a change in behaviour, not run ahead of it.