Empower is Ringover's artificial intelligence service that automatically transcribes, analyzes, translates, and summarizes phone calls and meetings. Since these features directly process the voices and conversations of your employees and customers, it is essential to understand how this information is governed by the General Data Protection Regulation (GDPR).
How Empower & Ringover use your data
Here are the key rules regarding data processing, security, and AI learning applied by Ringover:
1. Roles and Responsibilities (Data Controller vs. Data Processor)
Under the GDPR framework in Europe, the Client acts as the Data Controller and Ringover operates as the Data Processor. This means it is up to the client to determine the purposes for using Empower. The client must ensure that they have obtained all necessary consents to process personal data and images (including voice) of their interlocutors via our AI services.
2. How Empower uses your data (Learning and AI Performance Monitoring)
A frequent question concerns the use of data for AI learning. To guarantee the quality, reliability, and compliance of the AI, Ringover continuously monitors and evaluates the performance of its algorithms.
To this end, Ringover may access certain Client data to correct errors, investigate malfunctions, eliminate biases, and improve the system. However, Ringover respects its users' choice: the Client has the right to object (Opt-out).
It is possible to exercise an opt-out choice preventing this access directly from the Dashboard. Note that refusing this monitoring may limit Ringover's ability to correct AI performance issues. Furthermore, Ringover claims no ownership rights over the AI-generated content of its clients.
3. Data retention period
GDPR mandates that data should not be kept indefinitely.
With Empower, call transcriptions, knowledge bases, and voicemails are kept according to the duration defined by the account Administrator directly on the Dashboard. Upon termination of the contract, the client has a 30-day period to retrieve their data before it is permanently deleted from the Ringover ecosystem.
Europe
North America
4. Security, Hosting, and International Transfers
To protect this sensitive data, Ringover applies strict technical and organizational security measures:
Hosting in France: All data centers hosting the data necessary for the services are located in France (Tier 3 Datacenters certified ISO 27001).
USA & Canada:
All data is stored in the United States: all your data is hosted in data centers located in the United States of America. We use AWS, Datapacket, and Telehouse America as data hosting providers.
Environment Segregation: Production and development environments are strictly separated to prevent any data corruption.
Regulated Subprocessing: Empower relies on subprocessors for certain AI-related tasks (for example OpenAI, Microsoft Azure, or Google Cloud). When these data transfers occur outside the European Economic Area (EEA), they are legally governed by the European Commission's Standard Contractual Clauses (SCC) to ensure an adequate level of protection.
For more information:
To further explore these points and consult Ringover's official legal documents from which this information is taken, you can visit the following source links:
Ringover's Data Processing Agreement (DPA): It exhaustively details security measures, the list of subprocessors (including for AI), and retention periods. Available at: https://www.ringover.com/data-processing-agreement
General Terms and Conditions (GTC): Refer specifically to Appendix 6 (Specific Conditions for AI Features) to understand how data powers AI performance and the associated responsibilities. Accessible via: https://www.ringover.com/terms