Privacy Policy
Version 1.0 · Effective 20 October 2026
The short version: we only use your data to run Ringlane. We do not sell it, we do not use it for ads, and Google data is only used to show and book your calendar and email inside Ringlane. Your data is hosted in the EU.
- 1. Who we are
- 2. Scope and our role
- 3. What we process
- 4. Purposes and legal bases
- 5. Google user data
- 6. Storage in your browser
- 7. Who receives data
- 8. How long we keep data
- 9. Security
- 10. Your rights
- 11. Children
- 12. Changes
1. Who we are
Ringlane is a service of Wellens BV, trading as Small Steps Big Impact ("SSBI", "we", "us"). Registered office: Heirbaan 96, 3620 Lanaken, Belgium. Office: Corda Campus Hal A, Kempische Steenweg 303, 3500 Hasselt, Belgium. Registered with the Belgian Crossroads Bank for Enterprises under number 0789.681.057 (VAT BE0789.681.057).
For any question about privacy, email senne.wellens@smallstepsbigimpact.io or write to the office address above. We have not appointed a data protection officer.
2. Scope and our role
This policy covers personal data of visitors of ringlane.ai and of people who use Ringlane at app.ringlane.ai ("users"), for their account and their use of the service. For this data, SSBI is the controller.
Workspaces in Ringlane contain data that our customers bring in, such as leads, contact persons, call notes, tasks and appointments ("Customer Data"). For Customer Data, the customer that owns the workspace is the controller and SSBI acts as processor under article 28 GDPR, following the data processing terms in our Terms of Use. If you were contacted by a company that uses Ringlane and want to exercise your rights, please contact that company. We will help them handle your request.
3. What we process
- Website visitors. ringlane.ai uses no cookies, no analytics and no tracking. Our hosting provider processes technical data (IP address, browser, requested page and time) in server logs to deliver and protect the website.
- Account data. Your name, email address, profile picture and Google account identifier when you sign in with Google, or your email address when you sign in with an email link. Your language preference.
- Workspace data about you. The workspaces you belong to, your role, and the invitations you sent or received.
- Usage and security data. IP address, browser and device type, sign-in times and session information. Actions taken by platform administrators are recorded in an administration log.
- Connections. If you connect Google Calendar, Gmail or Attio: an encrypted connection token and the email address of the connected account. See section 5.
- Communication. The messages you send us, for example for support.
4. Purposes and legal bases
| Purpose | Legal basis (GDPR) |
|---|---|
| Providing Ringlane and your account, including the connections you switch on | Performance of a contract, art. 6(1)(b) |
| Securing the service, preventing abuse and investigating incidents | Legitimate interest, art. 6(1)(f) |
| Informing you about the service, changes and the end of the beta | Performance of a contract and legitimate interest |
| Accounting and other legal obligations | Legal obligation, art. 6(1)(c) |
We do not sell personal data, we do not use it for advertising and we do not make decisions about you that are based solely on automated processing.
5. Google user data
Ringlane offers optional connections with Google. This section explains which Google user data Ringlane accesses, how it is used, stored and shared, and how you can remove it.
Sign in with Google
When you sign in with Google, we receive your name, email address and profile picture (scopes openid, email and profile). We use them only to create and identify your account.
Google Calendar
Only when you connect Google Calendar (scope calendar.events), Ringlane:
- reads events in your primary calendar to show your appointments and free time inside Ringlane;
- creates or updates an event when you book or move an appointment with a lead, including a Google Meet link when you ask for one.
Gmail
Only when you connect Gmail (scopes gmail.modify and gmail.settings.basic), Ringlane:
- lists and reads the email threads you exchanged with a lead's email address, to show that conversation on the lead;
- sends the emails you write in Ringlane from your own Gmail address;
- reads your Gmail signatures and sender names, so you can add your signature to an email.
Ringlane does not delete your emails, does not change labels and does not change your Gmail settings.
How Google data is handled
- Requests to Gmail and Google Calendar run directly between your browser and Google. Email contents and calendar events are not stored on our servers.
- When you send an email or book an appointment through Ringlane, Ringlane saves a record of that activity on the lead in your workspace (date and time, and for emails the subject and the text you wrote) so your team can see the history.
- To keep a connection working, our server stores a Google refresh token, encrypted with AES-256-GCM using a key that only our server holds and bound to your account. It is used only to obtain short-lived access tokens for you.
Sharing and limits
- We do not share Google user data with third parties, except with the hosting providers that run Ringlane on our behalf (section 7), or when required by law.
- We do not use Google user data for advertising, we do not sell it, and we do not use it to develop, improve or train generalised artificial intelligence or machine learning models.
- People at SSBI do not read your Google user data, unless you ask us to for support, it is needed for security, or the law requires it.
Ringlane's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Removing access
Disconnect Google Calendar or Gmail in Ringlane under Settings. We then revoke the token at Google and delete it. You can also remove Ringlane's access at any time at myaccount.google.com/permissions. Deleting your Ringlane account removes all connection tokens.
6. Storage in your browser
ringlane.ai stores nothing in your browser. The app at app.ringlane.ai stores your sign-in session, preferences such as your language, and a temporary copy of your workspace data so it opens fast. That copy is kept for at most 7 days and removed when you sign out. All of this is strictly necessary to provide the service. We use no tracking or advertising cookies.
7. Who receives data
| Recipient | Role | Location |
|---|---|---|
| Supabase, Inc. | Database and authentication | Frankfurt, Germany |
| Vercel, Inc. | Hosting of ringlane.ai and the app, server functions | Server functions in Frankfurt, Germany; pages delivered through a global network |
| Google (Google Ireland Ltd and Google LLC) | Sign in with Google, and Calendar and Gmail when you connect them. The app loads its typeface from Google Fonts, so your browser connects to Google's servers | EU and United States |
| jsDelivr and SheetJS | Deliver two code libraries the app needs (the sign-in client and the spreadsheet import). Your browser connects to their servers | Global networks |
| Attio Ltd | Only when a workspace connects Attio. Data is sent at the instruction of that workspace | See Attio's privacy policy |
| Our accountant and public authorities | Only where the law requires it | Belgium |
Some of these providers are based in the United States. Transfers outside the European Economic Area rely on the EU-US Data Privacy Framework where the provider is certified, and otherwise on the standard contractual clauses approved by the European Commission.
8. How long we keep data
- Account data: as long as your account exists. You can delete your account yourself in Ringlane under Profile. It is removed immediately; backups are overwritten within 7 days.
- Customer Data: as long as the workspace exists, or as the customer decides.
- Sign-in and server logs: up to 7 days.
- Platform administration log: 2 years, to account for administrative actions.
- Invitations: removed 30 days after they expire.
- Connection tokens: until you disconnect or delete your account.
- Copy in your browser: at most 7 days, and removed when you sign out.
9. Security
Data is encrypted in transit (TLS, with HSTS) and at rest. Every workspace is separated at database level with row-level security, so members only see their own workspace. Sessions are checked on every request and access tokens expire after 15 minutes. Connection tokens are encrypted per user. Ringlane's administration tool shows only management data, such as accounts and workspace names, never the content of workspaces such as leads and notes. Direct database access is limited to SSBI and used only for operations, security, or support you ask for.
10. Your rights
You have the right to access, rectify and erase your personal data, to restrict or object to its processing, to data portability, and to withdraw consent where processing relies on consent. Email senne.wellens@smallstepsbigimpact.io. We reply within one month. We may ask you to confirm your identity first.
You can also lodge a complaint with the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit), Drukpersstraat 35, 1000 Brussels, gegevensbeschermingsautoriteit.be.
11. Children
Ringlane is a business tool and is not intended for anyone under 16.
12. Changes
We may update this policy when Ringlane changes. We announce important changes in the app or by email before they take effect. The version and date at the top always show the current version.