Privacy policy
Last updated October 2, 2026
This policy explains what personal information Decamount Technologies Private Limited ("we") handles in RingMarshal, why, and the choices people have. It covers two groups: the businesses that use RingMarshal and their team members, and the customers of those businesses who call, text or book with them.
Businesses and their team members
- What we collect: names, work email addresses, passwords (stored only as secure hashes), business details, phone numbers, settings, and billing information. Card details are collected and stored by Stripe, not by us.
- Why: to provide and secure the service, bill for it, send account and alert emails, and give support.
- Sign-in records: we keep IP addresses and device information of sign-ins and important actions in an audit log, for security.
Customers of the businesses
When you call, text or message a business that uses RingMarshal, we process your information on that business's behalf: the business decides how it's used, and you can also contact them directly.
- What: your phone number, name, service address, the messages and call transcripts of your conversation with the business, call recordings where the business turned recording on (the call announces it), photos, voice notes or files you send, and your appointments.
- Why: to reply to your call, answer your questions, book, confirm, remind and change appointments, and let the business's team follow up.
- AI: an AI assistant reads your messages to answer you and is identified as an assistant. Your conversations are not used to train AI models.
- Stopping messages: reply STOP to texts or WhatsApp messages and we stop immediately on that channel (you can ask to stop all channels). We only send messages about your own call or booking — never marketing.
Who we share information with
We don't sell personal information or share it for advertising. We use these service providers, only to run the service:
- Twilio — phone calls, text messages, WhatsApp, speech recognition and voice.
- Meta (WhatsApp) — for businesses that connect WhatsApp.
- Stripe — payments and invoices for businesses.
- AI model providers (for example Google, Anthropic, OpenAI or Groq, depending on configuration) — to generate the assistant's replies and transcribe voice notes, under terms that don't allow training on the data.
- OpenStreetMap geocoding — to turn a shared location into an address.
- Google Calendar — only for businesses that connect their calendar.
- Our hosting and email providers.
We may disclose information when the law requires it, or to protect people's safety.
How long we keep it
- Call recordings: 90 days by default; transcripts: 1 year; photos and files: 2 years. Each business can shorten these.
- Records of consent and opt-out requests are kept as long as the law requires, so we keep honouring them.
- When a business closes its account, its data is deleted within 90 days, except records we must keep (such as invoices).
Security
Data is encrypted in transit; names, phone numbers, messages, recordings and files are also encrypted at rest. Access is limited to the business's own team and, for support and security, to authorised staff, and is logged.
Your choices and rights
Depending on where you live (for example California), you may have rights to know, access, correct or delete your personal information. Customers of a business can ask that business, or us; we'll pass the request on and help them answer it. Businesses can contact us directly. We won't treat you differently for using these rights.
Changes
We'll update this page when our practices change and show the date at the top; important changes are announced to businesses by email.