Privacy Policy

1. Who is responsible for your data

CallerSift is a product of Ringpixel LLC. Ringpixel LLC is the data controller for account data: the information you give us when you sign up, run a workspace, and pay for the service.

For the caller phone numbers your systems send to the service for scoring, you (our customer) are the controller and Ringpixel is a processor acting on your instructions. Section 6 covers that data in detail.

2. What we collect

• Account data: your name, email address, workspace name, team membership, and role assignments.
• Caller phone numbers: the numbers your call tracker posts to your lookup URL. Each one is scored to produce a verdict, and the screened call is recorded in your workspace's lookup log: the number, the verdict, the reason, and whether it answered live or from cache.
• Usage data: dashboard activity, lookup volumes, API key usage, and technical logs (IP addresses, timestamps, user agents) kept for security and debugging.
• Billing data: invoices, top-ups, balance ledger entries, and the outcome of payments. Card numbers go directly to Stripe; we never see or store full card details.
• Support data: the content of tickets you open, so we can answer them.

3. How we use it

• Run the service: authenticate you, score lookups, show your dashboard, and keep verdict history.
• Bill you: charge top-ups and auto-recharges through Stripe and keep the required financial records.
• Communicate: transactional email such as receipts, balance alerts, and support replies.
• Protect the service: detect abuse, enforce the Acceptable Use Policy, and secure accounts.
• Comply with law: keep records we are legally required to keep and respond to lawful requests.

4. Who processes data for us

We use a small set of service providers, each receiving only what its job requires. The current list, with what each receives, is on the Subprocessors page.

• Stripe processes payments and stores card details.
• Licensed telecommunications data providers perform the phone number lookups that power verdicts.
• A cloud infrastructure provider hosts the service and its databases.
• An email delivery provider sends transactional mail.

5. No sale of personal data

We do not sell personal data, and we do not share it for cross-context behavioral advertising. Data goes to the processors above so they can provide their service to us, and nowhere else, except where the law requires disclosure.

6. Caller data: your responsibilities as controller

The caller numbers you send us belong to your callers, and you decide to send them. You are responsible for having a lawful basis to collect and process those numbers, for any notices your callers are owed, and for complying with telemarketing and privacy laws that apply to your traffic.

On our side, caller numbers are used for exactly two things: running the lookup and keeping your workspace's own lookup log. Verdicts are reusable for one day so repeat callers do not trigger new lookups, and the shared verdict store keys numbers by one-way hash, never in plain text. We never use your callers' numbers for marketing, profiling, or any purpose of our own, and they are never shared across workspaces in readable form.

7. Data retention

• Account and workspace data: kept while your account exists. Nothing is deleted when a plan ends; delete requests go through support.
• Lookup logs: kept as your workspace's screening history, one row per screened call with the caller number, verdict, reason, and source, so you can review decisions and reconcile against your tracker. Ask support to purge them at any time.
• Verdict cache: a number's verdict is reusable for one day; the shared verdict store holds one-way hashes of numbers, never plain text.
• Billing records: kept as long as tax and accounting law requires.
• Technical and security logs: kept for a limited period and then rotated out.

8. Security

• Secrets at rest are encrypted with AES-256-GCM.
• All traffic to and from the service runs over TLS.
• API keys are shown once at creation and stored hashed; lookups are scoped per workspace.
• Access to production systems is restricted to the people who operate the service.

9. Your rights

Depending on where you live, you may have rights to access, correct, export, or delete your personal data, or to object to certain processing. To exercise any of these, open a support ticket at app.callersift.com/help from your account. We verify requests against the account they concern and answer within the timelines the applicable law sets.

10. Children

The service is a business tool and is not directed at children. We do not knowingly collect personal data from anyone under 16. If you believe a child has given us personal data, open a support ticket and we will delete it.

11. Changes to this policy

We may update this policy as the service or the law changes. For material changes we will notify you by email or in the dashboard before the change takes effect. The effective date at the top of this page always shows the current version.

12. Contact

Privacy questions and rights requests go through a support ticket at app.callersift.com/help. Ringpixel LLC is the controller for account data.