Version 2026-10-30 · in force from 30 October 2026
Privacy Policy
01Two kinds of data
ZNZ Systems Ltd is the controller of the data about the people who use Ringmaster: you and your teammates. For the data about your audience, the people your company emails, your company is the controller and ZNZ is its processor. We process audience data only to run Ringmaster for your company and only on its instructions.
02What we collect about Ringmaster users
Your email address and name, and records of when you sign in. If you sign in with Google, the name and email Google shares with us.
Your company's name, website and postal address, who accepted these terms and when, and your teammates' roles.
Billing details. Stripe collects your card and billing address; we keep only what Stripe tells us about your subscription and invoices, never your card number.
An audit log of changes made in your organization, by people and by the agents they connect, and technical logs that keep Ringmaster secure and working.
Ringmaster sets only the cookies that keep you signed in. It sets no advertising or analytics cookies.
03What we process for your company
The profiles, events, consent choices and suppressions your company sends us, the emails it designs, and the delivery, open, click, bounce and complaint records of each email Ringmaster sends.
A person who receives your company's email can unsubscribe from the link in it or manage their choices on the preference page. Requests to see or erase their data go to your company, which can erase them from Ringmaster through the API.
04Why we use it
To provide Ringmaster under our contract with your company: to sign you in, run your organization, send its email and bill for it.
In our legitimate interests: to keep Ringmaster secure, to stop spam and abuse of the sending service our customers share, and to improve the service.
To meet legal duties, such as keeping invoices and tax records. We email you about your account and changes to these policies. We do not sell personal data or use it for advertising.
05Who else handles it
Amazon Web Services hosts Ringmaster and its database in the European Union (Frankfurt). Resend, which delivers through Amazon SES, sends the email. Stripe takes payments. Google handles Google sign-in when you choose it. Each acts under a contract that protects the data.
Where data leaves the UK or the European Economic Area, such as to Resend and Stripe in the United States, the transfer relies on the UK International Data Transfer Agreement or the EU Standard Contractual Clauses, or an adequacy decision.
The AI agents you connect to Ringmaster act for you with your permissions. What their providers do with the data they read is governed by your agreement with those providers.
06How long we keep it
Account and organization data for as long as your company has an organization in Ringmaster. When your company asks us to delete it, we do within 30 days. Invoices and records we must keep by law, for six years.
Engine run records for 90 days, and the stored answers to repeated API requests for 7 days. A profile your company erases is removed at once, with its events and sends.
07Security
Data is encrypted in transit. Each organization's data is kept apart in the database by row-level security, which every query passes through. Secrets Ringmaster must read back, such as webhook signing secrets, are encrypted at rest. Access to production is limited to the ZNZ staff who run it.
08Your rights
You can ask for a copy of your personal data, or ask us to correct, erase, restrict or stop using it, or to hand it to you in a portable form. Write to us and we answer within a month.
If you are unhappy with how we handle your data, you can complain to the UK Information Commissioner's Office (ico.org.uk) or the authority where you live. We would like the chance to fix it first.
ZNZ Systems Ltd, Magnolia House, 11 Spring Villa Road, Edgware HA8 7EB, United Kingdom. Questions: hello@rngmstr.dev.