Privacy policy
Last updated: [TODO: date]
agentring cloud is the hosted version of agentring, open-source software that lets your AI agent message and call your phone. This page explains, in plain words, what we keep, what we don't, and who else touches your data.
Short version: we don't record calls, we don't sell data, and we don't use it for ads. We keep what the service needs to work, and we delete it when you delete your account.
Who we are
agentring cloud is run by [TODO: legal name, address, company/tax ID] ("we"). We are the controller of the personal data described here. Contact: info@agentring.io.
What we store
Each account gets its own isolated space (a "tenant") on our server, with its own database. Your data is not mixed with other users' data.
| Data | Why |
|---|---|
| Account email and sign-in times | To sign you in with a magic link and to contact you about your account. |
| Paired phones: the device name you give it, platform, app version, its push token (FCM), a per-device signing secret, when it was paired, last seen and revoked | To deliver calls and messages to the right phone and let you remove a phone. |
| Messages between your agent and you: text, time, which phone replied, read status | So your agent can send you messages and read your replies. |
| Call metadata: the short reason your agent gives for calling, direction, priority, which phones rang, when it rang, was answered and ended, who ended it and why | To ring your phone, show the call, handle missed calls and count call minutes. |
| Event log: a record of the events above (message sent, call answered, …) | So the app and your agent can catch up on what they missed while offline. |
| Your API key and usage counters (call seconds this month, messages today, number of phones) | To authenticate your agent and apply your plan's limits. |
| Billing status: your plan, Stripe customer and subscription IDs | To know which plan you are on. We never see or store your full card number. |
| Waitlist email and what you signed up for (iOS, early access) | To email you once when it's ready. Only if you join the waitlist. |
| Technical logs: IP address, time, request path, errors | To keep the service secure and fix problems. Kept for [TODO: e.g. 14 days]. |
What we don't store
- Call audio is not recorded. It is streamed live between your phone and the voice AI, and is gone when the call ends.
- Call transcripts are not kept in your account. When the hosted voice AI handles a call, the transcript is sent to your agent (the MCP client that placed the call). What happens to it next depends on your agent. [TODO: confirm the hosted MCP server does not log transcripts]
- No contacts, no location, no files from your phone. The app asks only for notifications, the microphone (for calls) and the call-related permissions you grant during setup.
Who else processes your data
We use a few service providers to run agentring cloud. They only get what they need to do their part.
- Hosting: [TODO: provider and region] runs our servers, where the data above is stored.
- Google Firebase Cloud Messaging (FCM) delivers notifications that wake your phone. A push carries the event it is about, which can include a message's text or the reason for a call. Pushes are signed so the app can tell they're genuine, but they are not end-to-end encrypted, so Google can technically read them.
- Voice AI provider: when the hosted voice AI takes part in a call, the call audio and the context your agent gives it (why it's calling, what to ask) are streamed to [TODO: provider, e.g. Google Gemini Live / OpenAI Realtime / xAI Grok Voice / Phonic, and whether its terms allow training on the data] in real time, so it can listen and speak. We use a paid tier that does not use your data to train models [TODO: confirm].
- Stripe processes payments for paid plans. Your card details go straight to Stripe and are handled under Stripe's privacy policy.
- Email delivery: [TODO: provider] sends sign-in links and account emails.
Call audio itself travels through our own media server (LiveKit, run by us); it does not go through a telephone carrier.
Some of these providers are outside the European Economic Area. Where that applies, transfers rely on the safeguards they offer, such as the EU Standard Contractual Clauses. [TODO: confirm per provider]
What we don't do
- We don't sell or rent your data.
- We don't use it for advertising, and we don't run ad trackers.
- We don't read your messages or call metadata, except when you ask us to help with a problem, or when the law requires it.
Cookies
We use one cookie to keep you signed in to the dashboard. No advertising or cross-site tracking cookies. [TODO: list any privacy-friendly analytics here, or state there are none]
How long we keep it
- Messages, call metadata and paired phones stay in your account until you delete them or delete your account. [TODO: decide whether to expire old messages and events automatically]
- When you delete your account, your tenant and everything in it is deleted. Copies in backups are overwritten within [TODO: N days].
- We keep billing records (invoices, payment status) for as long as tax law requires, even after the account is deleted.
- Waitlist emails are deleted once we've sent the announcement you signed up for, or earlier if you ask.
Your rights
You can ask us for a copy of your data, to correct it, to delete it, or to stop processing it. You can remove paired phones from the dashboard at any time, and delete your account [TODO: from the dashboard, or by email]. If you are in the EU/EEA or the UK, you have these rights under the GDPR, and you can complain to your local data protection authority. Write to info@agentring.io and we'll answer within 30 days.
The legal bases we rely on are: performing our contract with you (running the service), our legitimate interest in keeping it secure, your consent for the waitlist, and legal obligations for billing records.
Your agent and the voice AI
On a call, the voice AI acts on what it hears and can pass requests to your agent. Your agent, and any tools you connect to it, are under your control, not ours: what they do with transcripts and messages is up to how you set them up.
Children
agentring cloud is not meant for anyone under 16, and we don't knowingly collect their data.
Changes
If we change this policy in a way that matters, we'll email you before the change takes effect. The date at the top shows the latest version.
Self-hosting
If you run agentring yourself, none of this applies to us: the data stays on your own server and in your own Firebase and voice AI accounts.