Privacy Policy

    Last updated: 12 September 2025
    Effective date: 19 December 2025

    Who we are

    Tangi5 Strategic Innovation Labs LLP (LLPIN ACK‑9545), trading as “TringTring” or “TringTring.ai” (“we”, “us”, “our”), operates the website https://tringtring.ai (the “Website”) and our orchestration platform and related services (the “Services”).

    • Registered office: 3, Vora Industrial Estate, Navghar, Vasai Road E. Dist. Palghar, Maharashtra – 401202, India.

    • Privacy contact: privacy@tringtring.ai

    • EU/UK Article 27 representative: Not appointed at this time. If this changes, we will update this Policy.

    Our role

    • We act as an independent controller for Website operations, account administration, billing, marketing, security/abuse prevention, and when we decide the purposes and means of processing.

    • We act as a processor for Customer Data that business customers submit to or generate in our Services (e.g., audio, transcripts, prompts, call/message metadata and content) in order to orchestrate processing across TTS, STT, LLMs, diallers/telephony, Meta platforms (e.g., WhatsApp), and other channels. That processing is governed by our Data Processing Agreement (DPA), which will prevail where there is any inconsistency with this Policy.

    This Policy addresses our activities as controller. Your DPA governs our processor role.


    Plain‑English summary

    • We collect Account, Billing, Usage/Log, and (if you choose) Support/Diagnostic data as controller.

    • We process Customer Data on your instructions to provide the orchestration you configure across your chosen integrations.

    • We use industry‑standard safeguards and support compliant international transfers (e.g., SCCs and equivalent mechanisms).

    • You have privacy rights (access, correction, deletion, objection, portability, consent withdrawal) depending on where you live.

    • We operate a cookie banner; non‑essential cookies require consent where the law says so. We honour recognised opt‑out signals where required.

    • We do not sell personal information.


    Key definitions

    • Customer: A business that contracts with us to use the Services.

    • Customer Data: Any data a Customer (or its end users) submits to or generates in the Services, including audio, transcripts, prompts, numbers, call/message content and metadata, and outputs from models or channels.

    • Service Data: Personal data we process as controller to run our business (e.g., account records, logs, billing).

    • Integrations/Channels: Third‑party providers you enable (e.g., TTS/STT/LLM vendors, diallers/telephony carriers, Meta/WhatsApp, email/SMS gateways, analytics/monitoring tools).

    • Learner: A person under the relevant age threshold in their country (we use the term “learner” for minors).


    What we collect as controller

    1) Data you provide

    • Account & profile: name, business email, phone, company, role.

    • Credentials (hashed), API keys generated within the Service.

    • Billing: billing contact, address, tax IDs, payment tokens via our payment processor.

    • Support: tickets, diagnostic logs or sample payloads you voluntarily provide.

    • Marketing preferences/consents.

    2) Data collected automatically

    • Usage/telemetry: features used, timestamps, device/browser type, IP address, error codes.

    • Website analytics (only with consent where required).

    • Security signals: failed logins, abuse/fraud patterns.

    3) Data from others

    • Integrations you connect (e.g., diallers, TTS/STT/LLMs, WhatsApp).

    • Partners/affiliates (if you sign up via a partner).

    • Public/third‑party sources where lawful.


    What we process on your behalf

    When you run calls or messaging through our Services, we process Customer Data (e.g., audio streams, transcripts, call recordings, call/SMS/WhatsApp metadata, prompts, model inputs/outputs) only on your documented instructions, for the purpose of providing, maintaining, and securing the Services and the integrations you enable.
    Your responsibilities include ensuring you have a lawful basis, providing any required notices/consents (e.g., call‑recording disclosures, marketing consent, WhatsApp templates), and configuring providers’ retention and training settings appropriately. Where feasible, we request that sub‑processors disable model training and minimise retention for Customer Data.


    How we use Service Data

    PurposeExamplesLegal basis (GDPR/UK GDPR)
    Provide and secure the Servicesaccount set‑up, authentication, uptime, incident response, fraud/abuse preventionContract (Art. 6(1)(b)); Legitimate interests (security) (Art. 6(1)(f))
    Billing & account administrationinvoicing, subscription management, tax/audit complianceContract; Legal obligation (Art. 6(1)(c))
    Product improvementaggregated/de‑identified analytics, quality assurance, telemetryLegitimate interests (improving Services) (Art. 6(1)(f))
    Marketing (B2B)service and feature updates; you can opt out at any timeConsent where required by ePrivacy/PECR; otherwise Legitimate interests
    Compliance & enforcementrecord‑keeping, responding to lawful requests, defending claimsLegal obligation; Legitimate interests

    Automated decision‑making
    We do not make solely automated decisions producing legal or similarly significant effects about individuals. Limited profiling may be used for security/quality, subject to safeguards and the right to object where applicable.


    Cookies & similar technologies

    We use cookies and similar technologies (including SDKs, pixels and local storage) to operate the Website, remember preferences, measure performance and—only where permitted—for marketing. Non‑essential cookies require prior consent in many jurisdictions. You may change your choices at any time via Cookie Settings on our site or via your browser. Where required by law, we also recognise Global Privacy Control (GPC) and other supported universal opt‑out signals.


    International data transfers

    We are based in India and use infrastructure and providers in multiple countries. Where we transfer personal data from regions with transfer rules (e.g., EEA/UK/Switzerland) to countries without an adequacy decision, we rely on appropriate safeguards such as Standard Contractual Clauses (and UK equivalents) together with supplementary measures and transfer assessments as needed.


    Disclosures

    We disclose personal data to:

    • Affiliates (for the purposes in this Policy).

    • Service providers / sub‑processors under contract, confidentiality and data‑protection terms.

    • Partners (if you sign up via a referral or marketplace).

    • Authorities/third parties where required by law or to protect rights, users or the public.

    • Prospective buyers or financing parties in connection with a corporate transaction (subject to appropriate protections).

    See our Sub‑processor List below.


    Retention

    We retain Service Data for as long as necessary to provide the Services and comply with law (e.g., tax/audit), then delete or irreversibly anonymise it. Customer Data retention is driven by your configuration and our DPA; if not specified, we retain it only as long as required to deliver the Services, troubleshoot, meet legal obligations, resolve disputes, and enforce agreements.


    Security

    We implement appropriate technical and organisational measures, including encryption in transit, access controls/least privilege, segregated environments, logging/monitoring, vulnerability management and staff training. No system is perfectly secure; please help by using strong passwords, enabling multi‑factor authentication, and limiting access appropriately.


    Learners

    Our Website and Services are not directed to learners, and we do not knowingly collect personal data from learners. If you believe we have collected data about a learner, contact privacy@tringtring.ai so we can take appropriate steps. Customers using our Services in educational contexts must ensure lawful bases, any required parental/guardian consent, and appropriate configuration to minimise data.


    Your rights

    Your rights depend on your location and the applicable law. Subject to exceptions and verification, you may have the right to access, rectify, erase, restrict, object, portability, and withdraw consent. You can contact us at privacy@tringtring.ai to exercise these rights. You may also have the right to complain to your local regulator; we would appreciate the chance to respond first.


    Marketing communications

    You may opt out of marketing emails at any time via the unsubscribe link or by emailing us. Transactional and service emails are necessary for your account.


    “Sale” / “Sharing” / Targeted advertising

    We do not sell personal information. If and when we engage in activities considered “sharing” for cross‑context behavioural advertising under specific state laws, we will provide a clear opt‑out mechanism and respect recognised signals where required.


    Changes to this Policy

    We may update this Policy from time to time. Material changes will be notified via the Website and/or email to account holders. The “Last updated” date above shows when this Policy last changed.


    Contact us

    Tangi5 Strategic Innovation Labs LLP (LLPIN ACK‑9545)
    Email: privacy@tringtring.ai
    Postal: 3, Vora Industrial Estate, Navghar, Vasai Road E. Dist. Palghar, Maharashtra – 401202, India.


    Sub‑processor List

    Scope: These entities may process Customer Data and/or Service Data to help us deliver and support the Services. Locations reflect typical regions or data‑residency options published by the providers; your configured region (where offered) and network routing may affect where processing occurs. We review security, confidentiality, and data‑protection terms with each provider and strive to minimise retention and disable model‑training on Customer Data where feasible.
    Change notifications: We may update this list. Where required by your DPA, we will give advance notice and a right to object.

    EntityProduct or ServiceLocation of ProcessingPurpose of Processing
    CloudflareAll ServicesProcessing is performed at the data centre closest to the end userContent delivery network and edge security
    Amazon Web Services (AWS)All ServicesUnited States, Europe, Asia (region as configured)Cloud infrastructure and storage
    Google Cloud Platform (GCP)All ServicesUnited States, Europe, Asia (region as configured)Cloud infrastructure and computing services
    Microsoft AzureAll ServicesUnited States, Europe, Asia (region as configured)Cloud infrastructure and computing services
    SupabaseAll ServicesUnited States, Europe, Asia (region as configured)Database management and storage
    Google WorkspaceInternal ServicesUnited States, Europe, AsiaBusiness productivity and collaboration tools (email, docs, drive)
    HashiCorp CloudInfrastructure ServicesUnited States, Europe, Asia (region as configured)Infrastructure‑as‑code and secrets management
    PlivoCustomer CommunicationUnited States, Europe, India, Singapore (region as configured)Telephony and messaging APIs; call/SMS routing and delivery
    AtlassianInternal ServicesUnited States, Europe (data‑residency options available)Project management and issue tracking (e.g., Jira, Confluence)
    GitLabDevelopment ServicesUnited States, Europe (SaaS regions)Code repository, version control and CI/CD
    RazorpayPayment ServicesIndiaPayment processing and subscription management
    ZohoInternal ServicesIndia, United States, EuropeCRM, support desk and related business operations
    Mailchimp (Intuit Mailchimp)Marketing ServicesUnited States, EuropeEmail marketing and (if enabled) transactional email
    Meta Platforms (e.g., WhatsApp Business, Messenger, Instagram)Channels / Customer CommunicationWorldwide (per Meta’s infrastructure)Customer messaging channels and delivery, subject to your configuration

    If you need a historical log of sub‑processor changes or a machine‑readable copy of this list, email privacy@tringtring.ai.


    Regional notes

    • GDPR/UK GDPR: We use applicable lawful bases, honour data subject rights, and support compliant transfers (e.g., SCCs with supplementary measures).

    • ePrivacy/PECR: We obtain consent for non‑essential cookies and provide cookie controls.

    • India (DPDP Act, 2023): We provide notice, obtain consent where required, maintain a grievance mechanism via privacy@tringtring.ai, and support rights to access/correction/erasure.

    • US state privacy laws: We provide opt‑out mechanisms where required and recognise supported universal opt‑out signals.