This Privacy Policy (“Policy”) explains how RUU Technologies Pvt. Ltd. and our affiliates (“RUU”, “we”, “us”, or “our”) collect, use, disclose, and protect personal data of individuals who access or use our websites, voice calling platform, application programming interfaces (APIs), mobile or desktop applications, or any other online products and services that link to this Policy (collectively, the “Services”), or otherwise interact with us.

By using the Services or otherwise engaging with RUU, you acknowledge that you have read this Policy and understand how we process your personal data, as described below, to the extent permitted by applicable law.

1. Definitions and Scope

1.1 Definitions

For the purposes of this Policy:

• “Personal Data” means any information that relates to an identified or identifiable natural person, such as a name, email address, phone number, billing information, IP address, or voice recording.

• “Processing” means any operation performed on Personal Data, whether or not by automated means, such as collection, recording, organization, structuring, storage, adaptation, retrieval, use, disclosure, erasure, or destruction.

• “Controller” means the entity that determines the purposes and means of the processing of Personal Data.

• “Processor” means a third party that processes Personal Data on behalf of a Controller.

• “RUU Platform Data” means data generated through the use of our AI voice calling platform, including call metadata, call recordings, transcripts, and AI-generated outputs.

Other capitalized terms not defined in this Policy may have the meanings given to them in our Terms of Service.

1.2 Scope

This Policy applies where RUU acts as a Controller of Personal Data, including when we provide Services directly to individual customers or business customers and determine the purposes and means of processing their Personal Data.

When we process Personal Data strictly on behalf of a business customer, in accordance with their written instructions (for example, when we process call data or customer lists under a services agreement), we act as a Processor and our use of Personal Data is governed by the applicable data processing agreement with that customer. In such cases, the customer’s privacy policy will apply to their end users.

This Policy does not apply to:

• Websites, services, or applications that do not link to this Policy.

• Third-party websites, services, or applications that you access via links from our Services.

2. Categories of Personal Data We Collect

We collect Personal Data about you from three primary sources: (a) information you provide directly, (b) information we collect automatically when you use the Services, and (c) information we obtain from third parties.

2.1 Personal Data You Provide to Us

Depending on how you interact with us, we may collect the following categories of Personal Data:

• Account and Contact Information. When you create an account, subscribe to a plan, or otherwise interact with us, we may collect your name, company name, job title, email address, phone number, billing address, country, account credentials, and communication preferences.

• Customer Content and Service Data. When you use our voice calling Services, you may provide or generate content such as call recordings, call transcripts, prompts, instructions, notes, tags, and other content or materials that you upload or send to or through the Services.

• Call and Audio Data. When you use our AI voice calling features, we may collect audio recordings of calls, synthesized audio output, voice prompts, background audio, and associated technical metadata (e.g., sampling rate, latency metrics, model configuration). If you choose to provide reference audio or voice samples for voice configuration or cloning, those recordings and derived representations may also constitute Personal Data.

• Profile and Usage Information. You may choose to provide information about how you use the Services, such as use cases, industries, preferred languages or accents, and other preferences that help us configure or personalize your experience.

• Communications and Support. When you contact us (for example, via email, chat, support ticket, or social media), we collect the content of your communications, your contact details, and any other information you choose to provide. When you respond to surveys, participate in beta programs, or give feedback, we collect your responses and associated information.

• Marketing and Newsletter Subscriptions. If you sign up to receive marketing communications, newsletters, product updates, or event invitations, we collect your email address and any related subscription preferences.

• Payment and Billing Information. If you purchase a paid subscription or add-on, our payment processors collect payment card details, bank account information, or other payment information. We may receive limited billing and transaction information, such as billing addresses, partial card information, transaction dates, and subscription details.

• Verification Information. Where permitted by law and where necessary for certain features or higher-risk uses, we may ask you to provide identity verification information, such as date of birth, government-issued identification, business registration documents, or proof of address.

You may choose not to provide certain Personal Data; however, this may limit your ability to use certain features of the Services.

2.2 Personal Data We Collect Automatically

When you use the Services, we automatically collect certain information about your device and your interaction with the Services, which may include Personal Data:

• Log and Usage Information. We collect information about your activity on the Services, such as access dates and times, pages or screens viewed, features used, session duration, referring and exit URLs, and the actions you take (for example, initiating calls, updating settings, or creating agents).

• Device and Technical Information. We collect information about the device and software you use to access the Services, such as IP address, browser type and version, operating system, device identifiers, mobile network information, and application version.

• Location Information. We may derive an approximate location from your IP address (such as city, state, and country). We do not collect precise GPS location without your consent.

• Cookies and Similar Technologies. We use cookies, pixels, tags, SDKs, and similar technologies to collect information about how you use and interact with our Services, for analytics, personalization, security, and advertising purposes. For more details, see Section 7 (Cookies and Similar Technologies).

• Call Performance Metrics. In the context of AI voice calls, we may collect timing data, connection quality metrics, latency statistics, error logs, and related diagnostic information to monitor and improve call quality and platform reliability.

2.3 Personal Data We Receive from Third Parties

We may obtain Personal Data about you from third-party sources, subject to applicable law and any agreements with such third parties, including:

• Business Customers and Partners. If you are an end user of a business customer, your employer or service provider may provide us with your contact details, role, internal identifiers, or other information necessary to enable your access to the Services.

• Telephony and Communications Providers. We may receive call metadata (such as call start and end times, phone numbers, routing information, and signaling data) from carriers and telephony providers that we integrate with to deliver the Services.

• Authentication and Single Sign-On Providers. If you choose to sign up or log in using a third-party login (for example, Google or Microsoft), we receive limited account information from those providers, such as your name, email address, and profile picture.

• Payment Processors. Our payment processors may share limited billing information with us as necessary to complete transactions, prevent fraud, and maintain your subscription.

• Marketing, Analytics, and Lead Generation Providers. We may receive business contact details, role information, and inferred interests from marketing vendors, customer data platforms, and public sources to identify potential customers and personalize marketing communications.

• Publicly Available Sources. We may collect information about companies and business contacts from public websites, social media, and public databases, in compliance with applicable law.

3. Purposes and Legal Bases for Processing

We process Personal Data for the purposes set out below. Where required by applicable law (for example, in the European Economic Area, the United Kingdom, and other jurisdictions), we also identify the legal bases relied upon.

3.1 Provision and Operation of the Services

We process Personal Data to:

• Create and manage user accounts and profiles.

• Authenticate users and secure access to the Services.

• Provide, operate, and maintain the AI voice calling platform and related features.

• Process calls, audio data, and transcripts to deliver requested functionality, including live and automated calls, call routing, and AI agent responses.

• Provide customer support and respond to requests, questions, and feedback.

Legal bases (where applicable): performance of a contract; legitimate interests (to provide and administer the Services).

3.2 Voice Processing and AI Features

We process call and audio data, including reference audio you provide, to:

• Configure and operate AI voice agents.

• Generate synthetic speech or responses.

• Transcribe and analyze calls for quality, compliance, and workflow automation.

• Derive non-personal insights or metrics (for example, intent detection, sentiment classification, or outcome tagging) where enabled by the customer.

Legal bases (where applicable): performance of a contract; legitimate interests (to provide advanced AI features); consent (where required for certain voice-related processing under local law).

3.3 Personalization and Configuration

We process Personal Data to tailor aspects of the Services to you, such as:

• Remembering your preferences and settings.

• Suggesting configurations, templates, or optimizations based on your usage.

• Customizing dashboards, alerts, and content.

Legal bases (where applicable): legitimate interests (to personalize and improve the user experience); consent (where required for cookies or similar technologies).

3.4 Analytics, Service Improvement, and Research

We process Personal Data and aggregated usage data to:

• Monitor and analyze usage, performance, and trends.

• Diagnose and fix errors, bugs, and security incidents.

• Develop, train, test, and improve our models, algorithms, and Services.

• Conduct internal research and quality assurance.

Where feasible, we use de-identified or aggregated data for these purposes.

Legal bases (where applicable): legitimate interests (to understand, maintain, and improve our Services); consent (where required for analytics cookies or certain training uses).

3.5 Training and Improving AI Models

Subject to your settings and applicable law, we may use certain Customer Content, call data, and usage data to train, fine-tune, and improve our AI models and related systems in order to enhance accuracy, latency, naturalness, and feature quality.

We design our training processes to limit the use of directly identifiable signals where feasible and to reduce the risk of re-identification in model outputs. You may be able to opt out of certain training uses of your data where required by law or offered in your account settings or agreement.

Legal bases (where applicable): legitimate interests (to improve our AI capabilities and Services); consent (where required under local law for specific training uses).

3.6 Marketing and Communications

We process Personal Data to:

• Send you transactional messages, administrative notices, and service-related communications (for example, about changes to terms, security alerts, or subscription updates).

• Send you marketing communications about RUU features, offers, events, and content, in accordance with your preferences and applicable law.

• Measure the effectiveness of our marketing campaigns and understand who engages with our communications.

Legal bases (where applicable): legitimate interests (to promote our Services and communicate with customers); consent (where required for electronic marketing).

You may opt out of marketing communications at any time, as described in Section 8.

3.7 Security, Fraud Prevention, and Compliance

We process Personal Data to:

• Detect, investigate, and prevent fraud, abuse, misuse, unauthorized access, or other harmful activity.

• Protect the security and integrity of the Services, our infrastructure, and our users.

• Enforce our Terms of Service and other agreements.

• Comply with legal and regulatory obligations, including responding to lawful requests and legal processes.

Legal bases (where applicable): legitimate interests (to protect our business, users, and Services); compliance with legal obligations.

3.8 Corporate Transactions

We may process Personal Data in connection with a merger, acquisition, financing, reorganization, sale of assets, insolvency, or similar corporate event, and related due diligence.

Legal bases (where applicable): legitimate interests (to plan, execute, and complete corporate transactions); compliance with legal obligations.

3.9 With Your Consent

We may process Personal Data for any other purpose for which we provide notice and obtain your consent when required. Where we rely on your consent, you may withdraw it at any time as described in Section 8, without affecting the lawfulness of processing before withdrawal.

4. How We Share Personal Data

We do not sell Personal Data in the conventional sense of selling customer lists for money. We may share Personal Data with the following categories of recipients, for the purposes described above and in accordance with applicable law.

4.1 Service Providers and Processors

We engage third-party service providers to perform functions on our behalf, such as:

• Cloud hosting and infrastructure providers.

• Telephony and communications carriers.

• Data storage, backup, and security providers.

• Payment processors and billing providers.

• Analytics, monitoring, and logging providers.

• Customer support tools and ticketing platforms.

• Marketing, email delivery, and CRM platforms.

These service providers are authorized to use Personal Data only as necessary to provide services to us and are bound by contract to protect Personal Data.

4.2 Business Customers and End Users

If you use the Services as an end user of a business customer, we may share certain Personal Data and usage information with that customer (for example, call logs, transcripts, and configuration details) in accordance with our agreement with them and their instructions.

Where you choose to share content, call recordings, or configuration templates with other users within your organization or workspace, we will make that information available as configured by your account or workspace administrator.

4.3 Professional Advisors

We may share Personal Data with our professional advisors, such as lawyers, auditors, accountants, and consultants, where necessary to obtain advice or protect our legal, financial, and business interests.

4.4 Legal and Safety Obligations

We may disclose Personal Data if we believe in good faith that such disclosure is reasonably necessary to:

• Comply with applicable laws, regulations, legal processes, or governmental requests.

• Protect the rights, property, or safety of RUU, our users, or the public.

• Detect and resolve security or technical issues.

• Enforce our agreements, policies, and terms of service.

4.5 Corporate Transactions

In the event of, or preparation for, a corporate transaction such as a merger, sale of company assets, financing, acquisition, reorganization, or bankruptcy, Personal Data may be disclosed to potential or actual counterparties and their advisors, subject to appropriate confidentiality protections.

4.6 With Your Direction or Consent

We may share Personal Data with third parties when you direct us to do so or with your consent, such as when you:

• Integrate the Services with a third-party product or service.

• Use an integration or plugin built by a third party.

• Participate in a co-hosted event or joint marketing initiative.

5. International Data Transfers

RUU is headquartered in India and may process and store Personal Data in India and in other countries where we or our service providers operate data centers or infrastructure. These locations may have data protection laws that are different from those in your country of residence.

When we transfer Personal Data internationally, we take appropriate measures to help ensure that the transfer complies with applicable data protection laws and that your Personal Data remains protected, including by:

• Using standard contractual clauses or other approved transfer mechanisms where required by law.

• Requiring recipients to implement appropriate technical and organizational security measures.

• Transferring Personal Data only to countries that provide an adequate level of protection under applicable law, where relevant, or relying on your explicit consent when necessary.

By using the Services or providing Personal Data to us, you understand that your Personal Data may be transferred to and processed in countries outside of your country of residence, subject to these protections.

6. Data Retention

We retain Personal Data for as long as reasonably necessary to fulfill the purposes for which it was collected, including to provide the Services, comply with our legal and contractual obligations, resolve disputes, enforce our agreements, and pursue legitimate business interests.

The specific retention period depends on factors such as:

• The nature of the data and the purposes for which it is processed.

• The length of our relationship with you or the relevant business customer.

• Applicable legal, regulatory, tax, and accounting requirements.

• The existence of actual or potential disputes or investigations.

Call recordings and transcripts processed through the Services may, by default, be retained for a period defined in your account settings or agreement (for example, a rolling retention window) and then deleted, anonymized, or aggregated, unless a longer retention period is required or permitted by law or explicitly configured by the customer.

When we no longer need Personal Data for the purposes described in this Policy, we will take reasonable steps to delete, anonymize, or aggregate it.

7. Cookies and Similar Technologies

We use cookies and similar technologies to operate, secure, and improve our Services, as well as to support analytics and, where applicable, marketing activities.

7.1 Types of Cookies We Use

• Strictly Necessary Cookies. These cookies are essential for the operation of the Services and enable core functionality such as authentication, security, and load balancing. You cannot opt out of these cookies via our cookie banner because the Services cannot function without them.

• Performance and Analytics Cookies. These cookies collect information about how visitors use the Services, such as which pages are visited most often and how users move around the site. We use this information to improve performance, understand usage, and enhance user experience. Where required by law, we will obtain your consent before using analytics cookies.

• Functional Cookies. These cookies allow the Services to remember your choices (such as language preference or region) and provide enhanced, more personalized features.

• Advertising and Targeting Cookies. Where we engage in online advertising, these cookies may be used to deliver more relevant ads, measure the effectiveness of campaigns, and limit how often you see a particular ad. They may be set by us or by third-party advertising partners.

7.2 Your Cookie Choices

Depending on your location and applicable law, you may have the right to:

• Manage cookies through our cookie banner or preference center, where available.

• Configure your browser to block or delete cookies, or to alert you when cookies are set. If you disable cookies, some features of the Services may not function properly.

• Opt out of certain third-party analytics or advertising cookies by using the tools and settings provided by those third parties.

For example, many browsers offer tools to limit or block cookies, and some analytics and advertising providers offer their own opt-out mechanisms. Your choices may be device- and browser-specific.

8. Your Rights and Choices

Depending on your location and applicable law, you may have certain rights with respect to your Personal Data. These may include the rights to:

• Access. Request confirmation of whether we process your Personal Data and, where applicable, obtain a copy of your Personal Data.

• Rectification. Request that we correct inaccurate or incomplete Personal Data about you.

• Deletion. Request that we delete your Personal Data in certain circumstances, for example, where it is no longer necessary for the purposes for which it was collected, subject to applicable exemptions.

• Restriction. Request that we restrict the processing of your Personal Data in certain circumstances.

• Objection. Object to certain processing activities, including where we rely on legitimate interests or perform profiling or direct marketing.

• Portability. Request to receive your Personal Data in a structured, commonly used, and machine-readable format and to have that data transmitted to another controller, where technically feasible.

• Withdraw Consent. Where processing is based on your consent, withdraw that consent at any time, without affecting the lawfulness of processing based on consent before withdrawal.

You can exercise many of these rights by logging into your account and using the available settings (for example, updating your profile information, changing notification preferences, or managing retention settings). For other requests, you may contact us using the details in Section 12.

We may need to verify your identity before responding to your request and may deny or limit requests where permitted or required by law, for example, if fulfilling the request would adversely affect the rights and freedoms of others, interfere with legal obligations, or reveal trade secrets.

Where available under local law, you may also have the right to lodge a complaint with a supervisory or data protection authority in your country of residence, place of work, or where you believe a violation has occurred.

8.1 Marketing Communications

You may opt out of receiving marketing emails from us by following the unsubscribe instructions included in such emails or by adjusting your communication preferences in your account settings. Even if you opt out of marketing communications, we may still send you non-promotional messages related to your account or use of the Services, such as security alerts and service announcements.

8.2 Do Not Track and Global Privacy Controls

Our Services may not respond to all browser-based “Do Not Track” signals. Where required by applicable law, we will honor browser or device-based opt-out signals (such as Global Privacy Control) for certain types of data processing, such as targeted advertising or sale of Personal Data, to the extent we engage in those activities and have a legal obligation to do so.

9. Third-Party Services and Links

The Services may contain links to or integrations with third-party websites, applications, and services that are not operated or controlled by RUU. This Policy does not apply to such third-party properties.

We are not responsible for the privacy, security, or content of third-party websites or services. We encourage you to review the privacy policies of any third-party services that you access or integrate with our Services.

10. Security

We implement reasonable and appropriate technical and organizational measures designed to protect Personal Data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access.

These measures may include access controls, encryption in transit and at rest where appropriate, network and application level security, logging and monitoring, regular backups, and internal policies and training.

However, no method of transmission over the internet or electronic storage is completely secure. Accordingly, while we strive to protect Personal Data, we cannot guarantee its absolute security. If you have reason to believe that your account or interaction with us is no longer secure, please contact us immediately using the details in Section 12.

11. Children’s Privacy

Our Services are intended for use by businesses and individuals aged 18 or older. We do not knowingly collect Personal Data from children under the age of 18.

If we learn that we have collected Personal Data from a child under 18 without appropriate consent or authorization, we will take reasonable steps to delete such information as soon as practicable. If you believe that a child under 18 has provided us with Personal Data, please contact us using the details in Section 12.

12. Contact Us

If you have any questions or concerns about this Policy, our privacy practices, or your rights, or if you wish to exercise your rights under applicable law, you may contact us at:

RUU 
Attn: Privacy / Data Protection
Email: privacy@ruu.savoir.ltd (or another designated privacy email)

Depending on your location, you may also have the right to lodge a complaint with your local data protection authority.

13. Changes to This Policy

We may update this Policy from time to time to reflect changes to our practices, technologies, legal requirements, or other factors. When we do so, we will revise the “Last updated” date at the top of this Policy.

If we make material changes, we will provide additional notice as required by applicable law, which may include posting a prominent notice on our website or sending you an email notification. Your continued use of the Services after the effective date of the revised Policy constitutes your acceptance of the updated Policy.