How Ringroxy handles personal data

Who is responsible?

NXT Vizion AB, reg. no. 559575-0141, Sweden, provides the Ringroxy platform. When you (the business) use Ringroxy, you are the data controller for the personal data of your callers. Ringroxy acts as the data processor on your behalf.

What data is processed?

• Voice recordings – Audio from phone calls handled by the AI agent.
• Transcriptions – Text versions of the call audio.
• AI summaries – Automated call summaries and extracted action items.
• Phone numbers – Caller and business phone numbers.
• Metadata – Call timestamps, duration, and routing information.
• Account data – Name, email, company information you provide during registration.

Why is data processed?

Data is processed solely to provide the Ringroxy service: answering calls, making bookings, generating summaries, and sending notifications. We do not sell personal data or use it for unrelated purposes.

Where is data stored?

All primary storage and processing takes place within the EU/EEA, primarily in Sweden. Sub-processors are also located within the EU/EEA or operate under Standard Contractual Clauses where required.

How long is data kept?

• Voice recordings: 30 days
• Transcriptions: 90 days
• AI summaries: anonymised after 12 months

You may choose shorter retention periods at any time.

Your rights

You own your data and can request access, correction, deletion, or export at any time. Contact us at ••••@••••••.com for any data protection enquiry.

Sub-processors

Ringroxy uses trusted sub-processors (cloud hosting, telecom, AI model providers) required to deliver the service. A full list is available in the DPA.

Data breach notification

If a personal data breach occurs, we will notify you without undue delay and assist you in meeting your notification obligations to the relevant supervisory authority within 72 hours.