Privacy Policy

Effective Date: February 12, 2026

1. INTRODUCTION

1.1 About First Ring AI. First Ring AI ("First Ring AI," "we," "us," or "our") operates the website

firstring.ai and provides AI-powered voice agent services for businesses. Our services include

handling inbound and outbound telephone calls, taking orders, booking appointments,

answering frequently asked questions, routing calls, and sending follow-up communications via

SMS and email to customers of the businesses we serve.

1.2 Purpose of This Policy. This Privacy Policy describes how First Ring AI collects, uses,

shares, and protects personal information when you visit our website, use our services, or

interact with our AI voice agents. This policy applies to information collected through our

website, voice agents, and related services.

1.3 Acceptance. By using our services or providing information to us, you acknowledge that you

have read and understood this Privacy Policy and agree to our collection, use, and disclosure of

your information as described herein. If you do not agree with this Privacy Policy, you should not

use our services.

1.4 Business and Consumer Relationships. First Ring AI provides services to business

customers ("Business Customers" or "Clients") who deploy our AI voice agents to communicate

with their own customers, clients, and contacts ("End Users"). When End Users interact with our

AI voice agents deployed by Business Customers, First Ring AI acts as a service provider to the

Business Customer. This Privacy Policy describes our practices regarding both Business

Customer data and End User data.

2. INFORMATION WE COLLECT

We collect several categories of information when you use our services or interact with our AI

voice agents.

2.1 Personal Information. We collect personal information that you provide directly to us or that

is provided during interactions with our AI voice agents, including:

2.1.1 Contact Information: Full name, email address, telephone number, and business address.

2.1.2 Business Information: Business name, business type or industry, business contact

information, and other information about the businesses we serve or that use our services.

2.1.3 Account Information: Username, password, and account preferences for Business

Customers who create accounts to access our platform.

2.2 Call and Communication Data. When you interact with our AI voice agents or when our

services facilitate communications, we collect:

2.2.1 Call Recordings: Audio recordings of telephone conversations between End Users and our

AI voice agents. These recordings are made for quality assurance, training, service

improvement, dispute resolution, and to fulfill the purposes for which the call was initiated.

2.2.2 Call Transcripts: Text transcriptions of telephone conversations generated from call

recordings.

2.2.3 Call Metadata: Date, time, duration, caller phone number, called phone number, call

outcome, and other technical information about telephone calls.

2.2.4 SMS Messages: Text messages sent and received through our services, including

message content, sender and recipient phone numbers, and message timestamps.

2.2.5 Email Messages: Emails sent through our services, including email content, sender and

recipient email addresses, subject lines, and send times.

2.2.6 Transaction Information: Order details, appointment information, service requests, and

other information collected during interactions with our AI voice agents for the purpose of

fulfilling business transactions.

2.3 Payment Information. When Business Customers subscribe to our services or when End

Users make payments through our AI voice agents, we collect payment information including:

2.3.1 Billing Information: Billing address, billing contact name, and billing email address.

2.3.2 Payment Card Information: Payment card information is collected and processed by our

third-party payment processor, Stripe, Inc. We do not store complete payment card numbers on

our servers. We may store the last four digits of payment card numbers, card type, and

expiration date for reference purposes.

2.3.3 Transaction Details: Transaction amounts, transaction dates, payment status, and related

transaction information.

2.4 Usage Data. We automatically collect certain information when you access our website or

use our services, including:

2.4.1 Device Information: IP address, browser type and version, operating system, device type,

device identifiers, and mobile network information.

2.4.2 Log Information: Pages visited, date and time of visits, time spent on pages, referring

website addresses, clickstream data, and other website usage information.

2.4.3 Service Usage Information: Features used, actions taken within our platform, error reports,

performance data, and other information about how you interact with our services.

2.5 Cookies and Tracking Technologies. We use cookies, web beacons, pixel tags, and similar

tracking technologies to collect information about your browsing activities. This includes:

2.5.1 Session Cookies: Temporary cookies that expire when you close your browser, used to

maintain your session and enable certain features.

2.5.2 Persistent Cookies: Cookies that remain on your device for a specified period or until you

delete them, used to remember your preferences and enhance your experience.

2.5.3 Analytics Cookies: Cookies used to collect information about website traffic and usage

patterns to help us improve our services.

2.5.4 Third-Party Cookies: Cookies placed by third-party service providers to provide analytics,

advertising, or other services on our behalf.

2.6 Information from Third Parties. We may receive information about you from third-party

sources, including:

2.6.1 Business Customers: Information provided by Business Customers about their End Users

to enable service delivery.

2.6.2 Service Providers: Information from our service providers who assist us in delivering our

services.

2.6.3 Public Sources: Information from publicly available sources that helps us verify information

or enhance our services.

3. HOW WE USE YOUR INFORMATION

We use the information we collect for various business and operational purposes.

3.1 Provide and Maintain Services. We use your information to:

3.1.1 Deliver our AI voice agent services to Business Customers and End Users.

3.1.2 Process and fulfill transactions, orders, and appointments made through our AI voice

agents.

3.1.3 Route calls appropriately and connect callers with the correct departments or personnel.

3.1.4 Answer questions and provide information requested during calls or other interactions.

3.1.5 Send appointment reminders, order confirmations, and other service-related

communications.

3.1.6 Provide customer support and respond to inquiries.

3.1.7 Maintain, monitor, and improve the functionality and performance of our services.

3.2 Process Transactions and Billing. We use your information to:

3.2.1 Process payments and subscriptions for Business Customers.

3.2.2 Facilitate payment transactions made through our AI voice agents.

3.2.3 Generate invoices and billing statements.

3.2.4 Prevent fraud and unauthorized transactions.

3.2.5 Resolve billing disputes and payment issues.

3.3 Improve AI Performance and Accuracy. We use your information to:

3.3.1 Train and improve our artificial intelligence and machine learning models.

3.3.2 Analyze call recordings and transcripts to enhance voice recognition accuracy.

3.3.3 Develop new features and capabilities for our AI voice agents.

3.3.4 Test and refine natural language processing algorithms.

3.3.5 Identify and correct errors or limitations in our AI systems.

3.4 Send Service Communications. We use your information to:

3.4.1 Send transactional communications such as order confirmations, appointment reminders,

and service updates.

3.4.2 Provide notifications about account status, service changes, or technical issues.

3.4.3 Respond to your requests, questions, or feedback.

3.4.4 Send administrative messages regarding our services or this Privacy Policy.

3.5 Send Marketing Communications. With your consent where required by law, we use your

information to:

3.5.1 Send promotional materials about our services, features, and special offers.

3.5.2 Provide information about products or services that may interest you.

3.5.3 Invite you to participate in surveys, research, or feedback opportunities.

3.5.4 Send newsletters and other marketing communications about First Ring AI.

3.6 Comply with Legal Obligations. We use your information to:

3.6.1 Comply with applicable laws, regulations, and legal processes.

3.6.2 Respond to lawful requests from government authorities and law enforcement.

3.6.3 Enforce our terms of service and other agreements.

3.6.4 Protect our rights, property, and safety, and the rights, property, and safety of our users

and others.

3.6.5 Prevent, detect, and investigate fraud, security incidents, or illegal activities.

3.7 Business Operations. We use your information to:

3.7.1 Analyze trends and usage patterns to improve our business operations.

3.7.2 Conduct research and development activities.

3.7.3 Perform data analysis, audits, and quality assurance.

3.7.4 Plan and execute business strategies.

4. HOW WE SHARE YOUR INFORMATION

We share your information with third parties only as described in this Privacy Policy.

4.1 Service Providers. We share information with third-party service providers who perform

services on our behalf:

4.1.1 Stripe: We use Stripe, Inc. as our payment processor. Payment card information is

transmitted directly to Stripe and processed in accordance with Stripe's privacy policy and

security standards. Stripe receives billing information and transaction details necessary to

process payments. For more information, visit stripe.com/privacy.

4.1.2 Twilio: We use Twilio Inc. for telephony services and SMS messaging. Twilio receives

phone numbers, call audio, call metadata, SMS message content, and related

telecommunications data necessary to facilitate voice calls and text messaging. For more

information, visit twilio.com/legal/privacy.

4.1.3 Retell AI: We use Retell AI for voice agent technology and artificial intelligence

capabilities. Retell AI receives call recordings, call transcripts, and related data necessary to

provide AI voice agent functionality. For more information about Retell AI's data practices,

please contact us.

4.1.4 SendGrid: We use SendGrid, a Twilio company, for email delivery services. SendGrid

receives email addresses, email content, and related data necessary to send transactional and

marketing emails. For more information, visit sendgrid.com/policies/privacy.

4.2 Business Customers. When End Users interact with AI voice agents deployed by Business

Customers, we share relevant information with those Business Customers, including call

recordings, transcripts, transaction details, appointment information, and other data collected

during interactions. Business Customers use this information to fulfill their obligations to End

Users and operate their businesses.

4.3 Legal Requirements. We may disclose your information when we believe in good faith that

disclosure is necessary to:

4.3.1 Comply with applicable laws, regulations, legal processes, or governmental requests.

4.3.2 Enforce our Terms of Service or other agreements.

4.3.3 Protect the rights, property, or safety of First Ring AI, our users, or the public.

4.3.4 Detect, prevent, or address fraud, security issues, or technical problems.

4.3.5 Respond to claims that content violates the rights of third parties.

4.4 Business Transfers. If First Ring AI is involved in a merger, acquisition, sale of assets,

bankruptcy, or similar business transaction, your information may be transferred or disclosed as

part of that transaction. We will provide notice if your information becomes subject to a different

privacy policy as a result of such a transaction.

4.5 Consent. We may share your information with third parties when you have provided explicit

consent for such sharing.

4.6 Aggregated and De-Identified Data. We may share aggregated, anonymized, or de-identified

information that cannot reasonably be used to identify you. This includes statistical data, usage

trends, and other information that does not contain personal identifiers.

4.7 No Sale of Personal Information. We do not sell your personal information to third parties for

monetary consideration. We do not share your personal information with third parties for their

own direct marketing purposes without your explicit consent.

5. DATA RETENTION

We retain your information for as long as necessary to fulfill the purposes described in this

Privacy Policy and to comply with our legal obligations.

5.1 Retention Periods. Our retention periods vary based on the type of information and the

purposes for which we use it:

5.1.1 Account Information: We retain account information for Business Customers for the

duration of the business relationship and for a reasonable period thereafter as necessary for

customer service, legal compliance, and business operations.

5.1.2 Call Recordings and Transcripts: We typically retain call recordings and transcripts for

twelve to twenty-four months, unless a longer retention period is required by law, necessary for

legal proceedings, or specifically requested by Business Customers.

5.1.3 Transaction Data: We retain transaction information, order details, and appointment

records for accounting, tax, and legal compliance purposes, typically for a period of seven years

or as required by applicable law.

5.1.4 Communications: We retain SMS and email communications for a period necessary to

provide services and fulfill legal obligations, typically twelve to twenty-four months.

5.1.5 Usage Data: We retain usage data, log files, and analytics information for twelve to

twenty-four months or as necessary for security, troubleshooting, and service improvement

purposes.

5.2 Deletion Upon Request. You may request deletion of your personal information as described

in Section 7 of this Privacy Policy. Upon receiving a verified deletion request, we will delete your

personal information from our active systems, except to the extent retention is necessary for:

5.2.1 Completing transactions or providing services you have requested.

5.2.2 Detecting and preventing security incidents or illegal activities.

5.2.3 Complying with legal obligations, including tax, accounting, and regulatory requirements.

5.2.4 Enforcing agreements and resolving disputes.

5.2.5 Internal uses reasonably aligned with your expectations based on your relationship with

us.

5.3 Archived and Backup Data. Deleted information may remain in archived or backup systems

for a limited period of time. We will securely delete this information in accordance with our data

retention and deletion policies.

6. DATA SECURITY

We implement reasonable technical, administrative, and physical security measures designed to

protect your information from unauthorized access, use, disclosure, alteration, and destruction.

6.1 Encryption. We use industry-standard encryption technologies to protect data in transit and

at rest. This includes:

6.1.1 Transport Layer Security (TLS) encryption for data transmitted over networks.

6.1.2 Encryption of sensitive data stored on our servers and databases.

6.1.3 Encrypted connections for communications between our systems and third-party services.

6.2 Access Controls. We implement strict access controls to limit who can access your

information:

6.2.1 Access to personal information is restricted to employees, contractors, and service

providers who have a legitimate business need to access such information.

6.2.2 We use multi-factor authentication and strong password requirements for system access.

6.2.3 Access privileges are regularly reviewed and updated based on job responsibilities.

6.2.4 We maintain audit logs of system access and information retrieval.

6.3 Security Practices. We maintain comprehensive security practices including:

6.3.1 Regular security assessments and vulnerability testing.

6.3.2 Security monitoring and incident response procedures.

6.3.3 Employee training on data security and privacy practices.

6.3.4 Secure development practices for our software and systems.

6.3.5 Regular software updates and security patches.

6.4 Third-Party Security. We require third-party service providers to implement appropriate

security measures to protect your information and to use your information only for the purposes

for which it was disclosed.

6.5 Limitations. No security system is impenetrable, and we cannot guarantee the absolute

security of your information. You are responsible for maintaining the confidentiality of your

account credentials and for any activities that occur under your account.

7. YOUR RIGHTS

You have certain rights regarding your personal information, subject to applicable law.

7.1 Right to Access. You have the right to request access to the personal information we hold

about you. Upon receiving a verified request, we will provide you with:

7.1.1 Confirmation of whether we are processing your personal information.

7.1.2 Categories of personal information we have collected.

7.1.3 Specific pieces of personal information we have collected about you.

7.1.4 Purposes for which we collect and use your information.

7.1.5 Categories of third parties with whom we share your information.

7.2 Right to Correction. You have the right to request correction of inaccurate personal

information we hold about you. We will make reasonable efforts to correct inaccurate

information upon receiving a verified request.

7.3 Right to Deletion. You have the right to request deletion of your personal information, subject

to certain exceptions as described in Section 5.2 of this Privacy Policy. To request deletion,

contact us using the information in Section 14.

7.4 Right to Opt-Out of Marketing. You have the right to opt out of receiving marketing

communications from us. You may:

7.4.1 Click the "unsubscribe" link in marketing emails we send.

7.4.2 Reply "STOP" to marketing SMS messages.

7.4.3 Contact us directly to request removal from marketing lists.

7.4.4 Note that opting out of marketing does not affect transactional or service-related

communications.

7.5 Right to Data Portability. You have the right to request a copy of your personal information in

a portable, machine-readable format, where technically feasible.

7.6 Right to Non-Discrimination. We will not discriminate against you for exercising any of your

privacy rights, including by:

7.6.1 Denying goods or services.

7.6.2 Charging different prices or rates for goods or services.

7.6.3 Providing a different level or quality of goods or services.

7.6.4 Suggesting that you will receive a different price, rate, level, or quality of goods or

services.

7.7 Exercising Your Rights. To exercise your rights, contact us at or

using the contact information in Section 14. We may require verification of your identity before

processing your request. For security purposes, we may request additional information to verify

your identity.

7.8 Authorized Agents. You may designate an authorized agent to make requests on your

behalf. Authorized agents must provide proof of authorization, and we may require you to verify

your identity directly with us.

8. CALIFORNIA PRIVACY RIGHTS

If you are a California resident, you have additional rights under the California Consumer

Privacy Act (CCPA) and the California Privacy Rights Act (CPRA).

8.1 Categories of Personal Information Collected. During the preceding twelve months, we have

collected the following categories of personal information:

8.1.1 Identifiers: Name, email address, phone number, IP address, and other similar identifiers.

8.1.2 Commercial Information: Transaction history, order details, appointment information, and

payment information.

8.1.3 Audio and Electronic Information: Call recordings, voice data, SMS messages, and email

messages.

8.1.4 Internet or Network Activity: Browsing history, website usage data, and interaction with our

services.

8.1.5 Professional or Employment Information: Business name, business type, and professional

contact information.

8.2 Business and Commercial Purposes. We collect and use personal information for the

business and commercial purposes described in Section 3 of this Privacy Policy.

8.3 Categories of Third Parties. We share personal information with the categories of third

parties described in Section 4 of this Privacy Policy, including service providers, Business

Customers where applicable, and parties as required by law.

8.4 Right to Know. California residents have the right to request disclosure of:

8.4.1 Categories of personal information collected.

8.4.2 Categories of sources from which personal information is collected.

8.4.3 Business or commercial purposes for collecting personal information.

8.4.4 Categories of third parties with whom we share personal information.

8.4.5 Specific pieces of personal information collected.

8.5 Right to Delete. California residents have the right to request deletion of personal

information we have collected, subject to certain exceptions under California law.

8.6 Right to Opt-Out of Sale. We do not sell personal information as defined by the CCPA and

CPRA. We do not share personal information for cross-context behavioral advertising. If our

practices change, we will update this Privacy Policy and provide you with the right to opt out.

8.7 Right to Correct. California residents have the right to request correction of inaccurate

personal information.

8.8 Right to Limit Use of Sensitive Personal Information. To the extent we collect sensitive

personal information as defined by the CPRA, we use such information only for purposes

permitted by the CPRA and do not use or disclose it for purposes that would trigger the right to

limit.

8.9 How to Exercise California Rights. To exercise your California privacy rights, contact us at

or using the contact information in Section 14. You may also call us to

make requests by phone. We will not discriminate against you for exercising your California

privacy rights.

8.10 Verification Process. To protect your privacy and security, we will verify your identity before

processing requests to know, delete, or correct personal information. Verification procedures

may include requesting information to match against our records or using third-party verification

services.

8.11 Response Timing. We will respond to verified California consumer requests within forty-five

days of receipt. If we require additional time, we will inform you of the reason and extension

period in writing. We will deliver our response by mail or electronically, at your option.

8.12 Shine the Light Law. California Civil Code Section 1798.83 permits California residents to

request information about disclosure of personal information to third parties for direct marketing

purposes. As stated in this Privacy Policy, we do not share personal information with third

parties for their own direct marketing purposes.

9. CHILDREN'S PRIVACY

Our services are not intended for individuals under the age of eighteen.

9.1 Age Restriction. First Ring AI does not knowingly collect personal information from children

under the age of eighteen. Our services are designed for and directed to businesses and adults

aged eighteen and older.

9.2 Parental Consent. We do not knowingly collect, use, or disclose personal information from

children under eighteen without verifiable parental consent, except as permitted by applicable

law.

9.3 Discovery of Children's Information. If we become aware that we have collected personal

information from a child under eighteen without appropriate consent, we will take steps to delete

such information as quickly as possible. If you believe we have collected information from a

child under eighteen, please contact us immediately at .

9.4 Parental Rights. Parents or legal guardians who believe their child has provided personal

information to us may contact us to request access to, correction of, or deletion of such

information.

10. COOKIE POLICY

We use cookies and similar tracking technologies on our website.

10.1 What Are Cookies. Cookies are small text files placed on your device when you visit a

website. Cookies allow websites to recognize your device and store information about your

preferences or actions.

10.2 Types of Cookies We Use. We use the following types of cookies:

10.2.1 Strictly Necessary Cookies: These cookies are essential for the operation of our website

and cannot be disabled. They enable basic functions such as page navigation, access to secure

areas, and authentication.

10.2.2 Performance Cookies: These cookies collect information about how visitors use our

website, such as which pages are visited most often and whether users receive error messages.

This information helps us improve website performance.

10.2.3 Functionality Cookies: These cookies allow our website to remember choices you make

(such as language preferences) and provide enhanced, personalized features.

10.2.4 Analytics Cookies: We use analytics cookies to understand how visitors interact with our

website, including metrics such as page views, session duration, and bounce rates.

10.3 Third-Party Cookies. Third-party service providers may place cookies on your device when

you visit our website. These third parties may collect information about your online activities

over time and across different websites.

10.4 Managing Cookies. You can manage cookie preferences through your browser settings.

Most browsers allow you to:

10.4.1 View and delete cookies stored on your device.

10.4.2 Block third-party cookies.

10.4.3 Block all cookies.

10.4.4 Receive notifications when cookies are set.

10.5 Effect of Disabling Cookies. If you disable or refuse cookies, some parts of our website

may become inaccessible or may not function properly.

10.6 Other Tracking Technologies. In addition to cookies, we may use web beacons, pixel tags,

and similar technologies to collect information about website usage and email interactions.

11. THIRD-PARTY LINKS

Our website and communications may contain links to third-party websites and services.

11.1 Third-Party Websites. We are not responsible for the privacy practices or content of

third-party websites. Links to third-party websites are provided for your convenience and do not

constitute an endorsement of such websites or their content.

11.2 Third-Party Privacy Policies. When you click on a link to a third-party website, you will be

subject to that website's privacy policy and terms of service. We encourage you to read the

privacy policies of any third-party websites you visit.

11.3 Third-Party Services. Our Business Customers may integrate our services with third-party

applications and services. We are not responsible for how third-party services collect, use, or

share your information.

12. INTERNATIONAL DATA TRANSFERS

First Ring AI is based in the United States, and your information may be transferred to, stored

in, and processed in the United States and other countries.

12.1 Cross-Border Transfers. By using our services, you acknowledge that your information may

be transferred to countries that may not provide the same level of data protection as your home

country. We take appropriate measures to ensure that your information receives adequate

protection wherever it is transferred.

12.2 Legal Basis for Transfers. When we transfer personal information from the European

Economic Area, United Kingdom, or Switzerland to other countries, we do so based on

appropriate legal mechanisms, including:

12.2.1 Your explicit consent to the transfer.

12.2.2 Standard contractual clauses approved by the European Commission.

12.2.3 Other legally approved transfer mechanisms.

12.3 Data Protection Safeguards. We implement appropriate safeguards to protect your

information during international transfers, including contractual protections, security measures,

and compliance with applicable data protection laws.

13. CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time to reflect changes in our practices,

services, legal requirements, or for other operational reasons.

13.1 Notice of Changes. When we make material changes to this Privacy Policy, we will notify

you by:

13.1.1 Posting the updated Privacy Policy on our website with a new effective date.

13.1.2 Sending an email notification to the email address associated with your account, if you

are a Business Customer.

13.1.3 Providing prominent notice on our website or through our services.

13.2 Material Changes. Material changes include significant modifications to how we collect,

use, share, or protect your information, or changes that affect your rights under this Privacy

Policy.

13.3 Acceptance of Changes. Your continued use of our services after the effective date of an

updated Privacy Policy constitutes your acceptance of the changes. If you do not agree to the

updated Privacy Policy, you should discontinue use of our services.

13.4 Review of Policy. We encourage you to review this Privacy Policy periodically to stay

informed about how we protect your information.

14. CONTACT INFORMATION

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy

practices, please contact us:

First Ring AI

Email:

Website: firstring.ai

14.1 Privacy Inquiries. For privacy-related inquiries, data access requests, deletion requests, or

to exercise your privacy rights, please contact us at the email address above. Please include

"Privacy Request" in the subject line and provide sufficient detail to allow us to process your

request.

14.2 Response Time. We will respond to your inquiries and requests within a reasonable

timeframe, typically within thirty to forty-five days depending on the nature of the request and

applicable legal requirements.

14.3 Complaints. If you believe we have not adequately addressed your privacy concerns, you

have the right to lodge a complaint with a supervisory authority in your jurisdiction. For California

residents, you may contact the California Attorney General's Office. For residents of the

European Economic Area, United Kingdom, or Switzerland, you may contact your local data

protection authority.

This Privacy Policy was last updated on February 12, 2026 and is effective as of that date. By

using First Ring AI's services, you acknowledge that you have read, understood, and agree to

be bound by this Privacy Policy.