Privacy Policy · Ringlyx

Ringlyx is a service of Nuraveda ("we", "us"), a sole proprietorship of Tejas Karan Agrawal based in Toronto, Ontario, Canada. This policy explains what personal information we collect, why, who helps us handle it, and the choices you have. We are subject to Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).

1. Who is responsible

Nuraveda is accountable for the personal information described here. Our Privacy Officer is Tejas Karan Agrawal, the owner, and can be reached at [email protected]. Questions, access requests and complaints all go to that address.

2. What this policy covers

This policy covers two groups of people:

Visitors and sign-ups: people who use ringlyx.site, sign in, and explore the sample workspace.
Callers: people who phone a business that uses Ringlyx. Section 9 explains how that works.

It does not cover the businesses' own websites or phone systems.

3. What we collect

When you sign in and set up your profile:

Account: your email address. If you sign in with Google, we receive your Google name and email address, and nothing else.
Details you give us: your name, phone number, business name, city, and the kind of business you run.
Your consent: a record, with the date and time, that you agreed we may call you.
Contact form, only if you use it: your name, email address, your message, and your phone number only if you add it and tick the box saying we may call you. We use it to reply to you, and keep it in our own contact list (see "Our sales notes") until you ask us to delete it. To limit abuse we also keep your email address, with nothing else, for 2 days, to count how many messages are sent.
Our sales notes: when you sign up we add you to our own contact list so we can follow up. It holds the details you gave us, where you are with us (for example "called" or "subscribed"), and short notes about our conversations with you, such as when we called and what you asked for. Only Nuraveda staff can see it, and it is deleted when you delete your account.
Demo calls, only if you start one: the "Try the agent" page lets you talk to a demo agent for a made-up business. If you start a call, your browser sends your voice to our voice provider, ElevenLabs, live, so the AI can answer. We do not keep a recording of the audio. We keep the written transcript, and which account started the call, for up to 30 days, and ElevenLabs keeps the transcript for up to 30 days too. Please do not say anything you would not want in a transcript. We count how many demo calls each account starts so we can limit them to a few a day.

Collected automatically:

Technical data: your IP address, browser type and request logs, kept by our hosting and security providers so the site works and stays safe.
Browser storage: a sign-in token and your light or dark theme choice are saved in your browser so you stay signed in. We do not use advertising cookies or trackers. Our network provider may set security cookies.
Analytics, only if you accept: the first time you visit, a banner asks whether we may use Google Analytics, loaded through Google Tag Manager. If you click Accept, Google sets cookies (`_ga` and `_ga_` followed by letters and numbers) and we see which pages you view, roughly where you are (city level, worked out from your IP address, which Google Analytics does not store), your browser and device type, how you reached us, and a few actions such as starting to sign in. It never sees your name, email address or phone number. We have switched off Google Signals and ad personalisation, and we keep analytics data for 2 months. If you click "No thanks", or your browser sends a Global Privacy Control or Do Not Track signal, analytics is never loaded. You can change your choice at any time with "Analytics settings" in the footer.

We do not collect payment card details ourselves. When payment is offered, it is handled by our payment provider (section 6).

4. Why we use it

To let you sign in and use the sample workspace, and to show you sample data that suits your type of business.
To call you about setting up Ringlyx for your business, because you agreed to that when you signed up.
To answer your questions and requests.
To keep the service secure and prevent abuse.
To meet legal obligations.

We do not sell your personal information. We do not send marketing emails or texts without your separate consent.

5. Consent, and stopping contact

You consent to being called when you tick the box on the sign-up form. You can withdraw that at any time with one click on the Account page of your workspace, by emailing us, or by telling us on a call. When you do, we stop calling and keep your phone number on our internal do-not-call list so that we honour it. Withdrawing consent does not stop you from using the sample workspace.

6. Who we share it with

We use trusted service providers to run Ringlyx. They may only use your information to provide their service to us.

Supabase: our database and sign-in. Our data is stored in Canada (AWS Canada Central).
Cloudflare: website hosting and network security.
Google: sign-in, only if you choose "Continue with Google", and website analytics, only if you accept them (processed in the United States).
Resend: sending sign-in, alert and service emails (processed in the United States).
Stripe: taking payment for a subscription, on Stripe's own page. Your card details go to Stripe and never reach us; we keep only a customer reference, which plan you chose and whether it is active (processed in Canada and the United States).
Twilio and ElevenLabs: telephone and AI voice services for the phone lines we run for businesses (section 9). ElevenLabs also runs the demo calls described in section 3 (processed in the United States).
FastAPI Cloud: hosting for our servers.

We may also disclose information if the law requires it, to protect our rights or safety, or in a business sale, subject to this policy.

7. Information that leaves Canada

Our main database is in Canada, but some of our providers may process information in the United States or elsewhere. While it is in another country, it can be accessed by that country's courts, law enforcement and national security authorities under its laws. We remain responsible for your information, and we choose providers that commit to protecting it.

8. How long we keep it

We keep your account and profile while your account is active. If you ask us to delete your account, we delete your profile and sign-in details, apart from the short note described in section 5 and anything we must keep by law. We keep technical logs only as long as needed for security and troubleshooting. Technical copies of phone-call events, and the transcripts of demo calls, are deleted after 30 days.

9. If you call a business that uses Ringlyx

When you call a business that uses Ringlyx, our AI front desk answers for that business. It says it is an AI, tells you the call is recorded so the business can follow up, and answers honestly if you ask whether you are talking to a person.

What is handled: your phone number, what you say, a transcript and short summary, and details you give such as your name and a callback number.
Who is accountable: the business is responsible for what it does with its callers' information. Nuraveda handles it as the business's service provider, on its instructions, to take messages and alert the business.
Providers: telephone and AI voice services are provided by Twilio and ElevenLabs.
Retention: call content is kept as agreed with the business. Our default is 13 months, after which the transcript, summary, caller's name and phone number are removed automatically; we keep only the time, length and outcome of the call for the business's records.
Your rights: to see or correct your call information, or to ask for it to be deleted, contact the business or write to us and we will pass it on.

We ourselves do not use call content to train AI models.

10. How we protect it

We use encryption in transit, access controls and per-customer data separation, and we limit who can see personal information. No system is perfectly secure. If a breach creates a real risk of significant harm to you, we will notify you and the Privacy Commissioner of Canada as the law requires, and we keep a record of every breach.

11. Your choices and rights

You can ask us to:

tell you what personal information we hold about you and how we use it;
correct information that is wrong;
delete your account and information;
withdraw your consent to be contacted.

We respond within 30 days. If you are not satisfied, tell us first. You may also complain to the Office of the Privacy Commissioner of Canada at priv.gc.ca.

12. Children

Ringlyx is a business service and is not meant for anyone under 18. We do not knowingly collect information from children.

13. Changes to this policy

We may update this policy. We will post the new version here with its date, and tell you about important changes by email or when you next sign in.

14. Contact us

Privacy Officer: Tejas Karan Agrawal, Nuraveda (sole proprietorship), Toronto, Ontario, Canada. Email: [email protected].