Privacy Policy

Privacy Policy

DRING YAPAY ZEKA VE BÜYÜK VERİ TEKNOLOJİ HİZMETLERİ ANONİM ŞİRKETİ (“Dring AI”)
Last Updated: March 9, 2026

1. Introduction

Dring AI (“we,” “us,” or “our”) operates an Agentic AI Call Center platform that provides AI-powered voice and chat agents for businesses. This Privacy Policy explains how we collect, use, store, share, and protect personal data when you interact with our services, including through the WhatsApp Business Platform, Meta APIs, and other communication channels.

This policy applies to:

• Visitors of our website (dring.ai)
• End users who interact with AI agents deployed by our business clients (“End Users”)
• Business clients who use our platform (“Clients”)
• Users of our WhatsApp Business API integrations

By using our services or interacting with an AI agent powered by Dring AI, you acknowledge the practices described in this Privacy Policy.

2. Data We Collect

2.1 Data Collected via Website

• Name, email address, phone number (provided through contact forms)
• Browser type, IP address, cookies, and usage analytics

2.2 Data Collected via WhatsApp Business API & Meta Platform

When End Users communicate with AI agents deployed through the WhatsApp Business Platform, we may process the following data on behalf of our Clients:

• Phone number (WhatsApp user identifier)
• Message content (text messages sent to and received from the AI agent)
• Message metadata (timestamps, delivery/read status, message type)
• Media files (images, documents, or voice messages shared during the conversation, if applicable)
• WhatsApp profile name (as provided by the WhatsApp platform)

2.3 Data Collected via Voice AI Agents

When End Users interact with voice-based AI agents, we may process:

• Phone number (caller/callee identifier)
• Call recordings and transcriptions (for quality assurance and service delivery)
• Call metadata (duration, timestamps, call disposition)
• Sentiment and conversation analytics (derived from call content)

2.4 Data Collected from Business Clients

• Business contact information (name, email, phone, company name)
• CRM and integration data necessary for agent operation
• Usage and billing data

3. How We Use Your Data

We process personal data for the following purposes:

• Service Delivery: To operate AI agents that handle customer interactions on behalf of our Clients via WhatsApp, voice calls, and other channels
• Conversation Processing: To process and respond to messages and calls in real-time using AI models
• Post-Call/Post-Chat Analysis: To generate structured analytics (e.g., call summaries, sentiment scores, resolution status) for Client dashboards
• Quality Assurance: To monitor, evaluate, and improve AI agent performance
• Platform Improvement: To improve our AI models, accuracy, and service quality (using anonymized and aggregated data only)
• Client Reporting: To provide Clients with analytics dashboards containing aggregated interaction data
• Compliance: To comply with legal obligations and respond to lawful requests
• Communication: To contact Clients regarding service updates, billing, and support

We do not use WhatsApp message content or End User data for advertising purposes.

4. Legal Basis for Processing

We process personal data based on:

• Legitimate interest: To provide and improve our AI agent services
• Contractual necessity: To fulfill our obligations to business Clients
• Consent: Where required, particularly for direct marketing communications
• Legal obligation: To comply with applicable laws and regulations

5. Data Sharing & Third-Party Service Providers

To deliver our AI-powered voice and chat agent services, we work with carefully selected third-party service providers across several categories. Data shared with these providers is limited to what is strictly necessary for service operation and is governed by data processing agreements (DPAs).

Meta Platforms & WhatsApp. We use Meta’s WhatsApp Business API infrastructure to enable messaging between End Users and AI agents. Data shared includes messages, phone numbers, and message metadata as required by the platform.

AI & Large Language Model Providers. Conversation content is processed in real-time by large language model providers (e.g., OpenAI GPT-5.2, Anthropic Claude, Google Gemini, Mistral AI, Cohere) to power our conversational AI agents. All processing is subject to provider-specific data processing agreements and no provider retains conversation data beyond the processing session.

Speech-to-Text (STT) Services. Audio from voice interactions is processed by speech recognition providers (e.g., Deepgram, Google Cloud Speech-to-Text, AssemblyAI, Microsoft Azure Speech Services, Amazon Transcribe) to generate real-time transcriptions. Audio data is transmitted securely and is not stored by providers beyond the processing session.

Text-to-Speech (TTS) Services. AI-generated text responses are converted to natural speech using voice synthesis providers (e.g., ElevenLabs, Google Cloud Text-to-Speech, Amazon Polly, Microsoft Azure Speech Services, PlayHT, Cartesia AI, LMNT) to deliver a human-like voice experience.

Cloud Infrastructure & Hosting. All data is hosted on secure, enterprise-grade cloud infrastructure with encryption at rest and in transit. We use a combination of global and regional providers (e.g., Amazon Web Services, Google Cloud Platform, Microsoft Azure, Hetzner, DigitalOcean, Vercel) to ensure reliability, performance, and data residency compliance.

Telecommunications & Voice Infrastructure. Voice calls are routed through licensed telecommunications providers, including both global carriers (e.g., Telnyx, Twilio, Vonage) and local Turkish operators (e.g., Netgsm, Turkcell, Superonline), to ensure high-quality connectivity and local number availability.

Data Storage & Retrieval. We use industry-standard database and caching technologies (e.g., PostgreSQL, Redis, Pinecone, Weaviate) for secure data storage, session management, and AI knowledge retrieval. All stored data is encrypted and subject to tenant isolation.

Analytics & Monitoring. Aggregated and anonymized data is processed through analytics tools (e.g., Metabase, Google Analytics, Sentry) to power Client dashboards, monitor platform health, and improve service quality. No personally identifiable End User data is shared with analytics providers.

Business Clients. We share analytics, conversation summaries, and dashboard data with our business Clients who deploy AI agents through our platform. Clients are the data controllers for their End Users’ interactions.

We do not sell personal data to third parties. The specific providers we engage may change over time as we optimize our technology stack, but all providers are subject to equivalent data protection standards and contractual safeguards.

6. International Data Transfers

Some of our third-party service providers are located outside of Turkey and the European Economic Area (EEA), including in the United States, Canada, and other jurisdictions. When personal data is transferred internationally, we ensure appropriate safeguards are in place, including:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• Data Processing Agreements with all sub-processors
• Compliance with Turkish KVKK requirements for cross-border data transfers
• Encryption of data in transit and at rest

Where possible, we prioritize data processing within Turkey and the European Union to minimize cross-border transfers.

7. Data Retention

Clients may request earlier deletion of their End Users’ data at any time.

8. Data Security

We implement appropriate technical and organizational measures to protect personal data, including:

• Encryption at rest and in transit (TLS 1.2+)
• Tenant isolation: each Client’s data is logically separated and cannot be accessed by other Clients
• Access controls and role-based permissions
• Regular security assessments
• Secure API authentication for all integrations
• Automated threat detection and monitoring

9. Your Rights

Under applicable data protection laws (including GDPR and Turkish KVKK Law No. 6698), you have the following rights:

• Right of Access: Request a copy of your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your personal data
• Right to Restriction: Request limitation of data processing
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Where processing is based on consent, withdraw at any time
• Right to Lodge a Complaint: File a complaint with the Turkish Personal Data Protection Authority (KVKK) or your local supervisory authority

To exercise any of these rights, please contact us at the address provided in Section 12.

10. WhatsApp Business Platform & Meta Specific Provisions

As a Meta WhatsApp Tech Provider, we adhere to the following:

• We process WhatsApp user data strictly in accordance with Meta’s Platform Terms and WhatsApp Business Policy
• We do not use WhatsApp data to build or augment user profiles for advertising
• We do not share WhatsApp user data with third parties except as necessary to provide the service or as required by law
• We act as a data processor on behalf of our business Clients, who are the data controllers for their End Users’ interactions
• Message templates and business-initiated messages comply with WhatsApp’s messaging policies
• We maintain appropriate data security measures as required by Meta’s data protection requirements

11. Cookies

Our website uses cookies to:

• Ensure basic functionality and performance
• Analyze website traffic and usage patterns
• Remember your preferences

You can manage cookie preferences through your browser settings. Disabling cookies may affect website functionality but will not affect AI agent services.

12. Contact Information

For questions about this Privacy Policy, data protection inquiries, or to exercise your rights:

Dring Teknoloji A.Ş.
Data Protection Contact: [email protected]
General Contact: [email protected]
Website: https://dring.ai

For KVKK-related requests, you may also contact us via registered mail or through the Turkish e-Government (e-Devlet) system.

13. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through our website. We encourage you to review this policy periodically.

Effective Date: March 9, 2026
Version: 2.0