1. Introduction

Toingg provides AI-powered voice and text communication services, including automated callback agents, conversational memory, scheduling, outbound/inbound calling, and omnichannel messaging (the “Services”). This Privacy Policy describes how we collect, use, disclose, and protect personal information when you or your business accesses or uses the Services. This Policy complies with TCPA, TSR, FCC AI-Generated Voice Rules, CCPA/CPRA, applicable U.S. state privacy laws, and GDPR principles.

2. Information We Collect

• 2.1. User-Provided Information: Contact details, business info, consent records.
• 2.2. Voice & Text Interaction Data: Call audio, transcriptions, AI-generated responses, logs, conversation memory. Default retention 180 days.
• 2.3. CRM & Third-Party Integrations: Lead info, activity logs from connected CRMs (HubSpot, Salesforce etc).
• 2.4. Automatically Collected Technical Data: IP address, device IDs, usage patterns for optimization and security.

3. How We Use Information

• Service Delivery: Handling calls, messages, AI workflows.
• Compliance: Managing consent, TCPA/FCC logs.
• Security & Monitoring: Detecting abuse, improving quality.
• Product Improvement: Aggregated non-identifiable data.

4. Legal Basis

Depending on the region, processing occurs under contractual necessity, legitimate interests, user consent, or legal compliance.

5. Sharing of Information

• 5.1. Service Providers: Carriers (Twilio, Plivo), cloud providers.
• 5.2. Enterprise Customers: Access to own logs/analytics.
• 5.3. Legal Compliance: TCPA enforcement, legal orders.

6. AI-Specific Disclosures

• 6.1. AI-Generated Voice Calls: Treated as artificial/prerecorded calls under TCPA with mandatory disclosure.
• 6.2. Human Impersonation Prohibited: Cannot impersonate real people or hide AI usage where disallowed.
• 6.3. Automated Decision-Making: System may make routing decisions.

7. Data Storage & Residency

U.S. Customers: Hosted in U.S. datacenters by default.

8. Data Retention

Default 180 days for logs/transcripts. Consent logs up to 4 years.

9. Your Rights (CCPA/CPRA Compliant)

Access, correction, deletion, opt-out rights. Contact: privacy@toingg.com

10. Security Measures

AES-256 encryption, TLS 1.2+, RBAC, activity logging.

11. Children’s Privacy

Not intended for children under 13.

12. International Transfers

Standard contractual clauses used for transfers outside U.S.

13. Changes to Policy

Updates for legal changes will be notified.

14. Contact Information

• PGAGI Consultancy Pvt. Ltd., operating as Toingg
• Email: contact@toingg.com
• Website: https://toingg.com
• For legal requests: compliance@toingg.com