Ring for Me
Sign in

Privacy notice

Last updated: 14 September 2026.

Who is responsible

Ring for Me is operated by ElementX Limited, New Zealand. ElementX Limited is the controller responsible for personal information handled through this service. The New Zealand Privacy Act 2020 applies to us; other privacy laws may also apply depending on your location and our activities. This notice covers both account holders and people we call. Our postal address is Level 17, 19 Customs Street West, Auckland 1010, New Zealand (NZBN 9429030053182). Our privacy contact is based in New Zealand. Contact our Privacy Officer at privacy@ringforme.com.

What we collect and why

  • Account details, including your name, email, sign-in information and connected-agent permissions, to provide and secure your account. We also record your declared usual residence, adult confirmation, accepted terms version and the time of confirmation to manage eligibility.
  • Your requests, approved call plans, recipient phone numbers, details you authorise us to share, live call audio, transcripts and results, to prepare and carry out calls and show what happened.
  • Credit grants, usage, purchase references, amounts, currencies, tax amounts and billing country, to take payments, manage balances, resolve disputes and keep financial records.
  • Support messages, recipient reports, opt-out records and technical information such as IP addresses and request logs, to investigate problems, prevent misuse and operate the service.

We collect information from you, an agent you connect, call recipients, sign-in providers you choose, payment providers and our service infrastructure. Please share only information needed for the task. If you do not provide required account, billing or call details, we may be unable to provide the relevant feature.

Using information for your request

We use personal information needed to provide the service you request, manage payments, keep required records and protect users and call recipients. A user’s approval of a call does not replace any consent required from the recipient. Where consent is required for a call or its processing, it must be obtained. You can decline a call or ask us to stop; we do not continue if you object to the AI or transcription.

Share only information needed for a routine business enquiry. Do not include health records, identity documents, passwords or information about criminal offences. Contact our Privacy Officer if you want to withdraw consent or discuss how we use your information.

Calls and recipients

The assistant introduces itself as an AI calling on the user's behalf and says it keeps notes. Audio is processed live by our telephone and AI providers. Ordinary customer calls are not recorded as raw audio; text transcripts and summaries are retained. Calls started by our admin accounts request audio recordings for testing and review, except for Australian calls, which are not recorded as raw audio. Provider processing and retention are subject to their service terms and settings.

If we call you, your contact details came from the user or their connected agent, and may have originated from a public business listing. Your responses are used to complete their request and may appear in a transcript and summary available to that user and their authorised connected agent. You can decline the call or report a call and request an opt-out. Contact our Privacy Officer about access, correction or how we obtained your information.

Who receives information

  • Cloudflare hosts the application, database and transcript storage, and supports delivery of service emails.
  • Twilio connects telephone calls and processes call audio and status information.
  • OpenAI processes requests, call audio and text to prepare plans, conduct conversations and generate results. We disable response storage where supported; this does not mean all provider logs are immediately deleted.
  • Stripe processes top-ups, billing details, tax and payment security. Card details are entered on Stripe's hosted Checkout; our application does not receive full card numbers or security codes. See Stripe's privacy policy.
  • An AI host you choose to connect, such as ChatGPT or Claude, receives information through the permissions you grant, including call results and transcripts. Its own privacy terms also apply. You can revoke future access from Connections.

Authorised personnel may access records when needed to operate the service, support users, handle complaints or investigate abuse. We may disclose information when legally required or reasonably necessary to protect rights and safety. We do not sell your personal information.

Overseas processing and security

Our providers operate internationally, including in the United States. Call processing currently uses Twilio’s US region, even when the caller ID or recipient is in another country. Information may be processed or stored outside your country, including New Zealand and the United States; we do not promise local data residency. We use access controls and encrypted connections and storage, but no system is completely secure. Where applicable law restricts an international transfer, an appropriate legal transfer basis and safeguards are required. Contact our Privacy Officer for information about the safeguards applicable to your information.

Our service providers publish their processing terms: Cloudflare DPA, Twilio DPA and OpenAI DPA. These describe provider responsibilities and relevant transfer safeguards. Our own obligations continue when we use a provider.

Cookies and browser storage

We use cookies and browser storage for sign-in, security and application preferences. Stripe and any sign-in or connected-agent service you use may use their own cookies under their policies. Blocking essential cookies can prevent sign-in or checkout.

We use Cloudflare Web Analytics to understand page visits and loading performance so we can improve the site. See Cloudflare's explanation of Web Analytics.

We do not use advertising trackers, sell browsing profiles or share personal information for targeted advertising.

Retention, access and correction

We retain account and call records to provide your history and support the service, and retain information as needed for security, complaints and legal obligations. You can request account closure and deletion of information that is no longer required by emailing our Privacy Officer. Deletion is handled by support; it is not an instant self-service operation.

Financial records generally need to be retained for at least seven tax years. These records may retain identifiers needed for accounting and dispute resolution; they are not necessarily anonymous. We may also retain limited opt-out information to prevent further unwanted calls. Provider logs and backups may follow separate retention schedules.

You can request access to or correction of your personal information, including information in a transcript or AI-generated summary. We may verify your identity and protect other people's information when responding. For New Zealand requests, we normally decide access and correction requests within 20 working days. We follow other applicable local deadlines. Lawful extensions and exceptions may apply, and we will explain them. If we do not make a requested correction, you can ask us to attach a statement of correction.

Children

The service is for adults aged 18 or over. Do not submit children’s personal information in requests. Contact us if you believe a child has created an account or their information has been submitted so we can investigate and remove information that is not required.

Privacy concerns and complaints

The service is for adults usually resident in New Zealand or Australia. Other countries are coming soon. See our calling coverage for available destinations. We consider customer and recipient rights separately. Your applicable privacy rights depend on the law and our activities, not just the country of a telephone number.

Contact our Privacy Officer to raise a concern, make a request or challenge an account restriction. We will explain any refusal and available review routes. You can also complain to the New Zealand Privacy Commissioner. If the Australian Privacy Act applies to your complaint, you may be able to complain to the Australian OAIC. Follow the relevant regulator’s complaint process, including first raising the issue with us where required.

We will update this notice when practices change and notify account holders of material changes. Nothing in this notice limits rights you have under applicable law.