Legal
Sub-processors
Every third party that touches customer data on Ringfully's behalf, what reaches each of them, and where it is held.
Last updated July 31, 2026.
Draft — not yet in force. Ringfully does not yet have an incorporated legal entity, so the party, address and governing law below read [TBD]. This document is published for review and does not bind anyone until those are filled in and it has been through a lawyer.
Split into what is live and what is only built, because a list that implied caller speech was already being sent to a language model would be as misleading as one that left it out.
1In use today
Two companies handle customer data as part of running the service. Neither is optional and neither can be switched off for one customer.
| Twilio | The telephone network itself — calls, messages, numbers, queueing.Call and message content, call audio, recording audio, voicemail audio and its machine transcription, phone numbers, agent identities.United States and Twilio's global infrastructure; no region is pinned for us · Live |
|---|---|
| Amazon Web Services | Servers, database, secrets, logging, outbound email.Everything in the product database — accounts, call records, message text, contacts, voicemail transcripts, session records including IP addresses.US East (Northern Virginia), United States · Live |
2Built, but not receiving data
These are in the software and activate only when a corresponding key is configured. They are listed because the code path exists, and because you should know what turning a feature on would mean before you ask for it.
| Stripe | Subscription billing and payment.Billing contact name and email, subscription identifiers. Card details go to Stripe directly and never reach us.United States · Built, not yet activated — no live Stripe account |
|---|---|
| Anthropic | The AI assistant block in a call flow, where an organization uses one.What a caller says, converted to text, plus the last few turns of that conversation.United States · Off by default — activates only for an organization that asks for it |
| Sentry | Error reporting.Error messages and stack traces, tagged with request, call and organization identifiers. Configured to exclude request bodies and IP addresses.United States · Off unless configured |
Anthropic is the one worth reading twice. If an organization enables the AI assistant block in a call flow, what the caller says is transcribed and sent to Anthropic to generate a reply. Every caller is told they are speaking to an automated assistant before they say anything — see the AI page.
3Everything is in the United States
There is no Canadian region and no European region. Our database, our servers, our logs and our error reports are all in the United States, and Twilio does not pin a region for us.
If you are a Canadian business, this is a cross-border transfer of personal information about your staff and the people who call you, and Quebec’s Law 25 expects you to have assessed it before making it. The privacy policy says the same thing in more detail.
4What we deliberately do not use
No analytics, anywhere. No Google Analytics, no Segment, no PostHog, no Mixpanel, no advertising pixel — not on this website and not in the product. There is nothing watching you use it.
No third-party fonts, scripts or embeds on this site. Typefaces are served from our own domain. Nothing on ringfully.com makes a request to another company.
No data broker, no enrichment service, no advertising network. Customer data is never sold, rented or shared for anyone else’s purposes.
5Changes to this list
We will update this page before a new sub-processor starts handling customer data, and tell customers directly. If you object to one, tell us — for something optional we will discuss alternatives, and for something structural like Twilio the honest answer may be that Ringfully is not the right fit.
6Questions
Write to [TBD].