Privacy Policy

1. If You Are a Website Visitor

What we collect. Pages you view, approximate location derived from IP address, browser and device type, and referring site. If you fill in a contact or booking form, we collect the name, email, phone number, and business details you enter.

Why. To operate and improve the site, respond to enquiries, and understand where our traffic comes from.

2. If You Are a Client

What we collect. Your business name and address, contact names, email addresses and phone numbers, billing information, and the operational materials you provide during onboarding — call scripts, FAQ content, hours, pricing, escalation contacts, and any calendar or CRM access you grant.

Payment information. Payments are processed by Whop, our payment provider. We do not store your full card number. Whop's handling of your payment data is governed by its own privacy policy.

Why. To configure and operate the service, bill you, provide support, and communicate about your account.

3. If You Are a Caller

This is the most important section for most people reading this policy.

What happens on the call. When you phone a business that uses our service, your call may be answered by an automated system. The system identifies itself as automated and discloses that the call is recorded. If you do not wish to continue, you may hang up and contact the business by another method.

What we collect. Audio of the call, a written transcript, your phone number, the time and duration of the call, and any information you provide during the conversation — for example your name, callback number, address, or the reason for your call.

Why. To answer the call, take a message, book an appointment where offered, and deliver a record of the call to the business you contacted.

Who this information belongs to. The business you called decides what happens to this information. We process it on their behalf and under their instructions. If you want your call recording or details deleted, or want to know how they will be used, contact that business directly. We will support them in responding to your request. If you contact us and we can identify the relevant business, we will forward your request to them.

What we do not do. We do not sell caller information. We do not use it to market to you. We do not use it to build advertising profiles.

4. Automated Decision-Making

Our system uses artificial intelligence to understand speech and generate responses. It does not make decisions that produce legal or similarly significant effects about you. Any substantive decision about your enquiry is made by the business you called.

5. How We Share Information

We share information with:

• Service providers who help us operate — telephony carriers, speech recognition and AI vendors, hosting providers, and our payment processor. Each is bound to use the information only to provide services to us. A current list of our subprocessors is available on request.
• The business you called, if you are a caller.
• Legal authorities, where required by law, court order, or valid legal process.
• A successor, in connection with a merger, acquisition, or sale of assets, subject to this policy.

We do not sell personal information.

6. Where Information Is Processed

We are based in Canada. Some of our service providers process information on servers located outside Canada, including in the United States. Information stored in another country may be accessible to that country's courts and law enforcement under its laws.

7. How Long We Keep Information

• Call recordings and transcripts: 30 days by default, unless the business that received the call has instructed us otherwise.
• Call summaries and messages: for the duration of our agreement with the business, then deleted or returned.
• Client account and billing records: for the duration of the relationship and afterwards as required by tax and accounting law.
• Website enquiry data: 12 months.

8. Security

We use commercially reasonable safeguards including encryption in transit, access controls, and limits on which of our personnel can access call data. No system is completely secure, and we cannot guarantee absolute security.

9. Your Rights

Under Canadian privacy law (PIPEDA) you may request access to the personal information we hold about you, ask us to correct inaccuracies, and withdraw consent where applicable. Depending on where you live, you may have additional rights — for example to deletion, to a copy of your data in portable form, or to object to certain processing.

To make a request, contact us using the details in Section 12. We will respond within thirty (30) days or tell you if we need more time.

If you are a caller, please note the routing described in Section 3 — for information collected during a call to a business, that business is the right place to direct your request, and we will help them fulfil it.

If you are not satisfied with our response, you may complain to the Office of the Privacy Commissioner of Canada.

10. Children

Our service is not directed at children and we do not knowingly collect information from children. If you believe a child's information has been collected, contact us and we will delete it.

11. Changes to This Policy

We may update this policy. We will change the "Last updated" date above and, for material changes affecting clients, give notice by email.

12. Contact

Privacy inquiries: hello@firstring.com