Privacy Policy

1. Who is responsible for your data

callersift is a product of Ringpixel LLC. Ringpixel LLC is the data controller for account data: the information you give us when you sign up, run a workspace, and pay for the service.

For the caller phone numbers your systems send to the service for scoring, you (our customer) are the controller and Ringpixel is a processor acting on your instructions. Section 6 covers that data in detail.

2. What we collect

• Account data: your name, email address, workspace name, team membership, and role assignments.
• Caller phone numbers: the numbers your call tracker posts to your lookup URL. They are processed transiently to run the lookup and produce a verdict. Lookup logs keep only a masked form (the last four digits), the line type, the verdict, and whether it was a cache hit.
• Usage data: dashboard activity, lookup volumes, API key usage, and technical logs (IP addresses, timestamps, user agents) kept for security and debugging.
• Billing data: your plan, invoices, top-ups, balance ledger entries, and the outcome of payments. Card numbers go directly to Stripe; we never see or store full card details.
• Support data: the content of tickets you open, so we can answer them.

3. How we use it

• Run the service: authenticate you, score lookups, show your dashboard, and keep verdict history.
• Bill you: charge subscriptions and top-ups through Stripe and keep the required financial records.
• Communicate: transactional email such as receipts, balance alerts, trial reminders, and support replies.
• Protect the service: detect abuse, enforce the Acceptable Use Policy, and secure accounts.
• Comply with law: keep records we are legally required to keep and respond to lawful requests.

4. Who processes data for us

We use a small set of service providers, each receiving only what its job requires. The current list, with what each receives, is on the Subprocessors page.

• Stripe processes payments and stores card details.
• Twilio performs the phone number lookups that power verdicts.
• A cloud infrastructure provider hosts the service and its databases.
• An email delivery provider sends transactional mail.

5. No sale of personal data

We do not sell personal data, and we do not share it for cross-context behavioral advertising. Data goes to the processors above so they can provide their service to us, and nowhere else, except where the law requires disclosure.

6. Caller data: your responsibilities as controller

The caller numbers you send us belong to your callers, and you decide to send them. You are responsible for having a lawful basis to collect and process those numbers, for any notices your callers are owed, and for complying with telemarketing and privacy laws that apply to your traffic.

On our side: full numbers are used only to run the lookup, verdicts cache per number for one day, and stored lookup logs carry only the masked number. We do not use your callers' numbers for any purpose of our own.

7. Data retention

• Account and workspace data: kept while your account exists. Nothing is deleted when a plan ends; delete requests go through support.
• Full caller numbers: transient, held only long enough to run the lookup and the one-day verdict cache.
• Masked lookup logs: kept as workspace history so you can review screening decisions.
• Billing records: kept as long as tax and accounting law requires.
• Technical and security logs: kept for a limited period and then rotated out.

8. Security

• Secrets at rest, including your Twilio credentials, are encrypted with AES-256-GCM.
• All traffic to and from the service runs over TLS.
• API keys are shown once at creation and stored hashed; lookups are scoped per workspace.
• Access to production systems is restricted to the people who operate the service.

9. Your rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal data, or to object to certain processing. To exercise any of these, open a support ticket at app.callersift.com/help from your account. We verify requests against the account they concern and answer within the timelines the applicable law sets.

10. Children

The service is a business tool and is not directed at children. We do not knowingly collect personal data from anyone under 16. If you believe a child has given us personal data, open a support ticket and we will delete it.

11. Changes to this policy

We may update this policy as the service or the law changes. For material changes we will notify you by email or in the dashboard before the change takes effect. The effective date at the top of this page always shows the current version.

12. Contact

Privacy questions and rights requests go through a support ticket at app.callersift.com/help. Ringpixel LLC is the controller for account data.