1. Who we are
This policy is issued by Renggo Labs OÜ, a private limited company registered in Estonia (registry code 17327722), Liivalaia tn 26-32, Kesklinna linnaosa, 10118 Tallinn, Harju maakond, Estonia ("Renggo", "we", "us"). We are the controller of the personal data described here.
For any question about this policy or your personal data, write to support@renggo.com.
2. What this policy covers
This policy covers personal data of people who visit our website, fill in a form on it, write to us, apply for a job with us, or deal with us on behalf of a business that is, or may become, our customer.
It does not cover the conversations our customers' AI agents handle with their own callers and customers. For that data we act as a processor on our customer's behalf; see Data we process for our customers below.
3. The data we collect
Data you give us through our forms. Depending on the form:
- demo request: your name, work email, company, country, the channels you are interested in and your message;
- sales form: the same, plus your role, phone number, expected monthly volume and timeline (role, phone, volume, timeline and message are optional);
- "Get notified" form: your work email and the product you want to hear about.
Data in emails and calls. What you write or tell us when you contact us directly, for example at support@renggo.com.
Job applications. What you send us when you apply for a role; see Job applicants.
Customer account and contract data. If your organisation becomes a customer: the names, work emails and roles of the people who use or manage the account, billing and contract details, and our correspondence.
Technical data. When you load a page, our hosting provider records standard server logs: IP address, browser and device type, the page requested, the referring page and the time. When you send a form, we use your IP address for a short time to limit repeated submissions (at most five per minute).
We do not ask for special categories of personal data. Please do not include them in forms or messages.
5. Why we use your data and our legal bases
We use personal data only for the purposes below, each with a legal basis under Article 6(1) of the General Data Protection Regulation (GDPR):
| Purpose | Legal basis |
|---|---|
| Answering your request, arranging a demo and preparing an offer | Steps at your request before entering into a contract (Art. 6(1)(b)) or, where you act for an organisation, our legitimate interest in answering business enquiries (Art. 6(1)(f)) |
| Assessing job applications and contacting applicants about the role | Steps at your request before entering into a contract (Art. 6(1)(b)); keeping an application for future roles only with your consent (Art. 6(1)(a)) |
| Providing the services, managing the account, billing and support | Performance of a contract (Art. 6(1)(b)) or our legitimate interest in managing the relationship with the customer you represent (Art. 6(1)(f)) |
| Emailing you when a product you asked about launches | Your consent (Art. 6(1)(a)), which you can withdraw at any time |
| Keeping the website secure, preventing abuse of our forms and fixing errors | Our legitimate interest in a secure, working website (Art. 6(1)(f)) |
| Keeping accounting records and meeting other legal duties | Legal obligation (Art. 6(1)(c)) |
| Establishing, exercising or defending legal claims | Our legitimate interest (Art. 6(1)(f)) |
Where we rely on legitimate interest, we have balanced it against your interests and rights; you can object at any time (see Your rights). We do not sell personal data, and we do not use it for automated decisions that have legal or similarly significant effects on you.
6. How long we keep data
- Enquiries and related correspondence: up to 24 months after our last contact, unless they lead to a contract.
- Job applications: up to 6 months after the role is filled, or longer only with your consent.
- Customer account and contract data: for the duration of the contract and up to 3 years after it ends, to handle questions and claims.
- Accounting documents: 7 years from the end of the financial year, as Estonian accounting law requires.
- "Get notified" requests: until we have sent the launch email or you withdraw your consent.
- Server logs: for a short period set by our hosting provider, normally no more than 30 days.
- The form rate limit: a few minutes, in memory only.
When the period ends, we delete the data or anonymise it.
7. Who receives your data
Your data is seen only by the people at Renggo who need it. We share it with service providers who process it for us under contract and our instructions, mainly website hosting and email delivery; the current list is on our Sub-processors page. We may also share data with professional advisers bound by confidentiality, and with authorities or courts when the law requires it.
8. International transfers
We are based in the European Union. Some of our service providers process data outside the European Economic Area (EEA). In that case we make sure the transfer is protected: either the country has an adequacy decision of the European Commission, or we use the European Commission's Standard Contractual Clauses (SCCs), with additional measures where needed. You can ask us for a copy of the relevant safeguards.
9. Your rights
Under the GDPR you have the right to:
- access the personal data we hold about you and receive a copy;
- have inaccurate data corrected;
- have data erased when we no longer need it or have no legal basis for it;
- restrict our use of it in certain cases;
- receive data you gave us in a portable format;
- object to our use of it based on legitimate interest, including at any time to direct marketing;
- withdraw your consent at any time, without affecting what we did before.
To use these rights, write to support@renggo.com. We answer within one month. We may ask you to confirm your identity first.
You also have the right to complain to a data protection supervisory authority. Our lead authority is the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon), www.aki.ee. You can also contact the authority where you live or work.
10. Data we process for our customers
Our customers use the Renggo platform to run AI agents that answer their own customers by phone, website chat, Telegram, WhatsApp and email. For the conversations, recordings and contact details processed in that way, the customer is the controller and Renggo acts as a processor under our Data processing agreement.
If you spoke or wrote to a business that uses Renggo and want to know how your data is used or want to exercise your rights, please contact that business. If you contact us, we will pass your request on to them.
11. Job applicants
If you apply for a role at Renggo, for example by writing to recruitment@renggo.com, we handle your data as follows.
- What we collect: what you send us (your name, contact details, your note and any CV or links) and notes from our conversations with you.
- Purpose: assessing your application and contacting you about the role.
- Legal basis: steps at your request before entering into a contract (Art. 6(1)(b) GDPR).
- Retention: up to 6 months after the role is filled. We keep it longer only if you agree, so we can contact you about future roles.
- Recipients: our email provider (Google Workspace), as listed on our Sub-processors page.
- Your rights: the same rights and the same contact as in the rest of this policy; see Your rights.
12. Security
We protect personal data with appropriate technical and organisational measures, including encrypted connections, access limited to the people who need it, and role-based access to our systems. No system is perfectly secure; if a breach affects your data and puts your rights at risk, we will tell you as the law requires.
13. Children
Our website and services are meant for businesses and are not directed at children. We do not knowingly collect children's personal data.
14. Changes to this policy
We may update this policy when our services or the law change. We publish the new version on this page with a new date and, for significant changes, tell customers directly.
15. Contact
Renggo Labs OÜ, a private limited company registered in Estonia (registry code 17327722), Liivalaia tn 26-32, Kesklinna linnaosa, 10118 Tallinn, Harju maakond, Estonia. Email: support@renggo.com.