Privacy Policy

This Privacy Policy explains how RingBack ("we", "us") handles information when a business owner uses the RingBack service. RingBack is designed to help small businesses respond to missed calls with an automatic text message and manage the resulting conversations.

• Account information: email address, password (stored hashed by our authentication provider), business name, owner name, business type and address you provide during onboarding.
• Phone and messaging data: business phone number, missed-call metadata, and the SMS conversations sent and received through the service.
• Customer contact data: phone numbers of people who call your business and the messages they exchange with you through RingBack.
• Usage and technical data: log data, IP address, browser and device information used to keep the service secure and reliable.

• To provide the RingBack service — sending automatic replies to missed callers and storing the conversations.
• To authenticate users and protect accounts.
• To display leads, statuses and reporting inside the dashboard.
• To improve the reliability, safety and quality of the service.
• To communicate with account holders about their account or the service.

Account and application data is stored in a secure, access-controlled database. Access is restricted to authorised systems and personnel who need it to operate the service. Each business's data is separated so that one business cannot access another business's records.

Missed-call metadata and SMS messages sent or received through RingBack are processed to deliver the service, display the conversation to the business owner, and generate lead and dashboard information. Messages may be transmitted through a telephony or messaging provider (see Subprocessors below).

We use a small number of third-party service providers to run RingBack. The primary providers we intend to use are:

• Supabase — authentication and database hosting.
• Stripe (when paid subscriptions begin) — payment processing.
• Twilio (when telephony integration is enabled) — SMS and phone number connectivity.

These providers process data on our behalf under their own terms and security practices.

We retain account and conversation data for as long as your account remains active or as needed to provide the service. On account closure, we will delete or anonymise personal data within a reasonable period, unless we are required to retain it for legal, tax or dispute-resolution reasons.

Depending on your location, you may have rights to access, correct, delete or export personal data we hold about you, and to object to or restrict certain processing. You can exercise these rights by contacting us using the details below.

For privacy questions or requests, contact: privacy@ringback.io.