Privacy Policy

1. Introduction

One Infinity Labs, Inc. (“Company,” “we,” “us,” or “our”), a Delaware corporation, operates the Ringyo AI platform available at www.ringyo.ai (the “Service”). This Privacy Policy describes how we collect, use, disclose, and protect information when you use our Service, including our AI voice agents, chat widgets, appointment booking tools, and related services.

By using the Service, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree, please do not use the Service.

2. Information We Collect

2.1 Information You Provide

• Account Information: Name, email address, password, and business details when you create an account.
• Business Configuration: Business name, phone numbers, operating hours, service descriptions, and AI agent configuration settings.
• Payment Information: Billing details processed through our payment providers (Stripe and Polar). We do not store full credit card numbers on our servers.
• Communications: Messages, support tickets, and feedback you send to us.

2.2 Information Collected Automatically

• Voice Call Data: Call recordings, transcripts, call duration, and metadata when AI voice agents handle calls on your behalf. Callers are informed that calls may be recorded.
• Chat Data: Chat transcripts and conversation logs from the AI chat widget interactions.
• Usage Data: Pages visited, features used, click patterns, credit consumption, and session information.
• Device and Browser Information: IP address, browser type, operating system, device identifiers, and referral URLs.
• Cookies and Similar Technologies: See our Cookie Policy for details.

2.3 Information from Third Parties

• Authentication Provider (Clerk): Profile information from your sign-in method, including social login data.
• Telephony Provider (Twilio): Call metadata, phone number information, and call quality metrics.

3. How We Use Your Information

We use collected information to:

• Provide, maintain, and improve the Service
• Process AI voice calls and chat interactions on your behalf
• Manage appointments and customer interactions
• Process payments and manage subscriptions
• Send service-related notifications and updates
• Provide customer support
• Analyze usage patterns to improve AI agent performance and Service features
• Detect, prevent, and address technical issues and abuse
• Comply with legal obligations

4. Third-Party Services

We use the following third-party services that may process your data:

• Clerk — Authentication and user management. Clerk processes your login credentials, session tokens, and profile data. Clerk Privacy Policy
• Convex — Database and backend infrastructure. Stores application data including business configurations, agent settings, and conversation logs. Convex Privacy Policy
• Twilio — Voice call handling and telephony services. Processes call audio, phone numbers, and call metadata. Twilio Privacy Policy
• Stripe & Polar — Payment processing. Handles billing information, subscription management, and transaction records. Stripe Privacy Policy
• AI/LLM Providers — AI model providers process conversation data to generate responses. Data is processed in accordance with their respective data processing agreements.

5. Data Retention

We retain your information as follows:

• Account Data: Retained for as long as your account is active and for 30 days following account deletion.
• Voice Call Recordings & Transcripts: Retained for 90 days unless you configure a different retention period or request earlier deletion.
• Chat Logs: Retained for 90 days unless you configure a different retention period.
• Payment Records: Retained as required by applicable tax and financial regulations (typically 7 years).
• Usage Analytics: Aggregated and anonymized data may be retained indefinitely.

6. Data Sharing and Disclosure

We do not sell your personal information. We may share information in the following circumstances:

• Service Providers: With third-party vendors who assist in operating the Service (as listed in Section 4).
• Legal Requirements: When required by law, subpoena, or other legal process.
• Business Transfers: In connection with a merger, acquisition, or sale of assets.
• Protection: To protect the rights, property, or safety of One Infinity Labs, Inc., our users, or others.
• With Your Consent: When you have given explicit consent to share specific information.

7. Data Security

We implement industry-standard security measures to protect your information, including:

• Encryption of data in transit (TLS/SSL) and at rest
• Secure authentication through Clerk with support for multi-factor authentication
• Regular security assessments and monitoring
• Access controls limiting employee access to personal data

While we strive to protect your data, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security.

8. Your Rights Under GDPR

If you are located in the European Economic Area (EEA) or the United Kingdom, you have the following rights under the General Data Protection Regulation (GDPR):

• Right of Access: Request a copy of the personal data we hold about you.
• Right to Rectification: Request correction of inaccurate or incomplete data.
• Right to Erasure: Request deletion of your personal data (“right to be forgotten”).
• Right to Restriction: Request restriction of processing of your personal data.
• Right to Data Portability: Receive your data in a structured, commonly used format.
• Right to Object: Object to processing based on legitimate interests.
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent.

To exercise these rights, contact us at legal@ringyo.ai. We will respond within 30 days.

9. Your Rights Under CCPA

If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with the following rights:

• Right to Know: Request disclosure of the categories and specific pieces of personal information we have collected.
• Right to Delete: Request deletion of personal information we have collected.
• Right to Opt-Out: Opt out of the sale of personal information. Note: We do not sell personal information.
• Right to Non-Discrimination: We will not discriminate against you for exercising your CCPA rights.

To exercise these rights, contact us at legal@ringyo.ai or call us. We will verify your identity and respond within 45 days.

10. Children's Privacy

The Service is not directed to children under the age of 13 (or 16 in the EEA). We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal information, we will take steps to delete such information. If you believe a child has provided us with personal data, please contact us at support@ringyo.ai.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence, including the United States. These countries may have data protection laws that differ from your jurisdiction. We take appropriate safeguards to ensure your data is protected in accordance with this Privacy Policy, including standard contractual clauses where applicable.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the “Last updated” date. We encourage you to review this page periodically. Your continued use of the Service after changes constitutes acceptance of the updated Privacy Policy.

13. Contact Us

If you have questions or concerns about this Privacy Policy or our data practices, please contact us:

• Email: legal@ringyo.ai
• Support: support@ringyo.ai
• Address: One Infinity Labs, Inc., 16192 Coastal Highway, Lewes, Sussex County, Delaware 19958, United States