Privacy policy

Last updated: 7 November 2026

This policy covers agentring cloud (the hosted service at agentring.io) and the agentring app for Android, published on Google Play by TONVI TECH. agentring is open-source software that lets your AI agent message and call your phone. This page explains, in plain words, what we keep, what we don't, and who else touches your data.

Short version: we don't record calls, we don't sell data, and we don't use it for ads. We keep what the service needs to work, and we delete it when you delete your account.

Who we are

The controller of the personal data described here is TONVI TECH SL, NIF B-19780394, Calle Puerta del Mar 18, 5th floor, 29005 Málaga, Spain ("we"). Contact for anything about your data: info@agentring.io.

What we store

Each account gets its own isolated space (a "tenant") on our server, with its own database. Your data is not mixed with other users' data.

Data	Why
Account email, sign-in times and the language you signed in with	To sign you in (with a magic link or with Google) and to contact you about your account, for example when you are close to a plan limit.
Paired phones: the device name you give it, platform, app version, its push token (FCM), a per-device signing secret, when it was paired, last seen and revoked	To deliver calls and messages to the right phone and let you remove a phone.
Messages between your agent and you: text, time, which phone replied, read status	So your agent can send you messages and read your replies.
Call metadata: the short reason your agent gives for calling, direction, priority, which phones rang, when it rang, was answered and ended, who ended it and why	To ring your phone, show the call, handle missed calls and count call minutes.
Event log: a record of the events above (message sent, call answered, …)	So the app and your agent can catch up on what they missed while offline.
Your API key and usage counters (call seconds this month, messages today, number of phones)	To authenticate your agent and apply your plan's limits.
Billing status: your plan, Stripe customer and subscription IDs	To know which plan you are on. We never see or store your card number.
Waitlist email and what you signed up for (iOS, early access)	To email you once when it's ready. Only if you join the waitlist.
Technical logs: IP address, time, request path, errors, and short excerpts of what is said in calls handled by the hosted voice AI (up to 200 characters per turn)	To keep the service secure and fix problems. Logs are rotated and overwritten automatically and kept for at most 30 days.

What we don't store

Call audio is not recorded. It is streamed live between your phone and the voice AI, and is gone when the call ends.
Call transcripts are not kept in your account. When the hosted voice AI handles a call, the transcript is sent to your agent (the MCP client that placed the call). Apart from the short log excerpts above, we don't keep it; what happens to it next depends on your agent.
No contacts, no location, no photos or files from your phone.

The Android app

Permissions. The app asks for notifications (to show messages and incoming calls), the microphone (only during a call), the system calling features (to ring like a phone call, also over the lock screen), Bluetooth (to use your headset in a call) and to be exempt from battery optimisation (so calls still ring when the phone is idle). You can refuse or revoke any of them in Android's settings; some features then stop working.
QR pairing. Pairing codes are read with Google's on-device code scanner from Google Play services. The app itself has no camera access and receives only the text of the code.
What it keeps on the phone: the pairing with your server (server address, device ID and signing secret, encrypted with a key from Android's keystore) and a cache of your recent messages, so the thread shows instantly. Both live in the app's private storage; uninstalling the app removes them.
No analytics, ads or tracking SDKs. The only third-party service in the app is Firebase Cloud Messaging, which wakes the phone for calls and messages.
Your own server. The app can also be paired with an agentring server you run yourself. Then your data goes to that server, not to us, and you (not TONVI TECH) are responsible for it. The app sends nothing to us in that case.

Who else processes your data

We use a few service providers to run agentring cloud. They act on our instructions and only get what they need to do their part.

Hetzner Online GmbH (Germany, EU) hosts our servers, where the data above is stored.
Sign in with Google (Google) is optional. If you use it, Google tells us your Google account's email address, name and profile picture, only to create your account or sign you in. We keep just the email (the same account as with a magic link for that email); the name and picture are not stored. We ask for nothing else: no access to your Gmail, contacts, Drive or anything in your Google account. Google handles your sign-in under Google's privacy policy.
Google Firebase Cloud Messaging (Google) delivers the notifications that wake your phone. A push carries the event it is about, which can include a message's text or the reason for a call. Pushes are signed so the app can tell they're genuine, but they are not end-to-end encrypted, so Google can technically read them.
xAI (Grok Voice, USA) is the voice AI on calls handled by the hosted service. During those calls, the call audio and the context your agent gives it (why it's calling, what to ask) are streamed to xAI in real time so it can listen and speak. We use xAI's paid API and have not allowed xAI to use this data to train its models. If we change voice provider, we will update this list first.
Stripe (Stripe Payments Europe Ltd, Ireland) processes payments for paid plans. Your card details go straight to Stripe and are handled under Stripe's privacy policy.
Namecheap Private Email (Namecheap, Inc., USA) sends sign-in links and account emails, and receives what you write to info@agentring.io.
OpenPanel is the open-source web analytics tool we use to count visits to this website. We run it ourselves, on our own servers: the data is not sent to OpenPanel's company or to any other third party. It is cookieless, does not track you across other websites and is not linked to your account. See Cookies and analytics.

Call audio itself travels through our own media server (LiveKit, run by us on Hetzner); it does not go through a telephone carrier.

Google, xAI and Namecheap may process data outside the European Economic Area, mainly in the USA. Those transfers rely on the EU–US Data Privacy Framework where the provider is certified, and otherwise on the European Commission's Standard Contractual Clauses.

What we don't do

We don't sell or rent your data.
We don't use it for advertising, and we don't run ad trackers.
We don't read your messages or call metadata, except when you ask us to help with a problem, or when the law requires it.

Cookies and analytics

The website uses only cookies it needs: one to keep you signed in to the dashboard (30 days) and one that remembers your language (1 year). No advertising or cross-site tracking cookies. Stripe sets its own cookies on its checkout and billing pages.

To know which pages are useful and where visitors come from, the public pages of this website (not the dashboard) use OpenPanel, run by us on our own servers. It sets no cookies and stores nothing on your device. It records the pages you view, the clicks on a few buttons (such as "Get started" or "GitHub"), the referring website, your browser, operating system and device type, and your approximate location (country and city) derived from your IP address. Visits are grouped with an anonymous identifier computed from your IP address and browser, which changes every day; your IP address itself is not stored. We use this only to improve the website, never for advertising, and we don't combine it with your account. Our legal basis is our legitimate interest in measuring and improving the website (Article 6(1)(f) GDPR); you can object by writing to us, or by blocking scripts from agentring.io/assets/op1.js in your browser.

How long we keep it

Messages, call metadata and paired phones stay in your account until you delete them or delete your account.
When you delete your account, your tenant and everything in it is deleted at once. Technical logs and any backup copies are overwritten within 30 days.
Free accounts that haven't been used for 12 months may be closed and deleted, after we email you first.
We keep billing records (invoices, payment status) for as long as Spanish tax and accounting law requires (up to 6 years), even after the account is deleted.
Waitlist emails are deleted once we've sent the announcement you signed up for, or earlier if you ask.

Your rights

You can ask us for a copy of your data, to correct it, to delete it, to restrict or object to its processing, or to receive it in a portable format. You can remove paired phones from the dashboard at any time, and delete your account from the dashboard or by email. Write to info@agentring.io and we'll answer within one month. You can also complain to the Spanish data protection authority (AEPD) or the one where you live.

The legal bases we rely on are: performing our contract with you (running the service), our legitimate interest in keeping it secure, your consent for the waitlist, and legal obligations for billing records.

Your agent and the voice AI

On a call, the voice AI acts on what it hears and can pass requests to your agent. Your agent, and any tools you connect to it, are under your control, not ours: what they do with transcripts and messages is up to how you set them up.

Security

All traffic between the app, your agent and our servers is encrypted (HTTPS and secure WebSockets). Each phone signs its requests with its own secret, API keys are shown once and can be rotated, and each account's data lives in its own database.

Children

agentring is not meant for anyone under 16, and we don't knowingly collect their data.

Changes

If we change this policy in a way that matters, we'll email account holders before the change takes effect. The date at the top shows the latest version.