RISPrivacy policy
This policy explains how OvalTurn Inc. ("OvalTurn", "we", "us") handles personal information in RIS: the iPhone and Android apps, the web app, and this website (ovalturn.com). OvalTurn Inc. is a corporation registered in Canada, at 384 Baker Hill Boulevard, Stouffville, Ontario L4A 4P4.
We follow Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and, for people in India, the Digital Personal Data Protection Act, 2023 (DPDP Act) and its rules.
Two kinds of information
Your account information. This is information about you as a user of RIS. We decide how it is used, and we are responsible for it.
Your clients' information. This is what you enter about your own clients and contacts: their names, contact details, notes and so on. You decide what to record and why. We store and process it only to run RIS for you. You are responsible for having a lawful reason to record it, and for getting your clients' consent where the law requires it.
What we collect
About you
- Account details: your name, mobile number, email address, and your team or organization, if you join one.
- Sign-in details: the one-time codes we send by SMS or email, and the devices you are signed in on.
- Billing details: your plan, purchases and payment status. Card and bank details are handled by Apple, Google, Razorpay or Stripe. We never see or store your full card number.
- Technical details: device type, operating system, app version, a push-notification token, IP address, and error logs.
- Support messages: anything you send us when you ask for help.
About your clients
- What you enter: names, phone numbers, email addresses, dates of birth, family and professional relationships, notes, meetings, calls, tasks, and their consent status.
- Files you add: voice notes, photos and scanned documents.
Calls (Android, optional)
If you turn on call logging and give the phone permission, the app checks the numbers of calls on your phone against your client list, so it can offer to log a call with a client. Calls with numbers that don't match a client are not stored or sent to us. You can turn this off at any time in the app or in your phone's settings. On iPhone, RIS only follows calls you start from inside RIS.
How we use it
- To provide RIS: sign you in, sync your data across your devices, show warmth scores and daily nudges, and run your team's shared view.
- To bill you and to stop abuse of free trials.
- To send you service messages: sign-in codes, reminders you set, billing notices and security alerts.
- To answer support requests and fix problems.
- To keep RIS secure and to meet legal obligations.
We do not sell personal information. We do not use your clients' information for advertising, and we do not use it to train AI models.
AI features and client consent
RIS can transcribe voice notes, read scanned documents, and suggest insights about a client. These features send that client's content to our AI provider, Sarvam AI, which processes it in India. RIS runs them only for clients you have marked as having given consent. For any other client, the content stays unprocessed and you review it yourself. The results are suggestions; check them before relying on them.
Who we share it with
We share personal information only with service providers that help us run RIS. They may use it only to provide their service to us.
| Provider | What for | Where |
|---|---|---|
| DigitalOcean | Servers and the main database | India (Bengaluru) |
| Cloudflare | Storage for voice notes, photos and documents; website hosting and DNS | Asia-Pacific, and Cloudflare's global network for the website |
| Sarvam AI | Transcription, document reading and insights, for consented clients only | India |
| Google Firebase | Push notifications | Global |
| Apple and Google | App distribution and in-app purchases | Global |
| Razorpay and Stripe | Web payments (India; Canada and the US) | India; Canada and the US |
| SMS and email providers | Sign-in codes and service messages | Varies by provider |
| Zoho | Our business email, including support requests | Varies by Zoho data centre |
If you are on a team plan, your team's leads and admins can see the client records and activity that are shared with the team. We may also disclose information when the law requires it, or to protect the rights and safety of our users or the public.
Where it is stored
RIS's main database and file storage are in India. OvalTurn is a Canadian company, and some providers above process information in other countries, including Canada and the United States. Information in another country is subject to that country's laws. We choose providers that protect information to a standard comparable to this policy.
How long we keep it
- Your account and client records: for as long as your account is open.
- Edited and deleted notes: when you edit or delete a note, we keep the earlier version in an internal audit log until that client's data is erased. The log is not visible in the app.
- Erasing a client: when you erase a client, their records, files and audit history are deleted.
- Deleting your account: when you delete your account in the app, we delete your account and your client records. We keep a minimal record that the account existed, holding only scrambled (hashed) versions of your phone number and email address, never the originals, so that a returning account can't claim a second free trial.
- Billing records: invoices and payment records are kept for as long as Canadian and Indian tax laws require.
Your rights
You can ask to see the personal information we hold about you, have it corrected, have it erased, or withdraw a consent you gave us. In India you may also nominate someone to exercise these rights for you if you die or can no longer act. Most of this you can do yourself in the app; for anything else, write to our privacy officer below. We reply within 30 days.
If one of your clients asks us about their information, we will refer them to you, because you decide what is recorded about them, and we will help you respond.
If you are not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada (priv.gc.ca) or, in India, to the Data Protection Board of India.
Security
Information is encrypted in transit, and stored files are encrypted at rest. Each user's and team's data is kept apart in the database, staff access is limited and logged, and sign-in uses one-time codes. No system is perfectly secure. If a breach puts your information at risk, we will tell you and the authorities as the law requires.
Children
RIS is a professional tool for people aged 18 and over. We do not knowingly collect information from children as users.
Changes to this policy
If we make a material change, we will tell you in the app or by email before it takes effect. The date at the top shows the current version.
Contact our privacy officer
Hitendra Gohil, Director, OvalTurn Inc.
Email: privacy@ovalturn.com
Phone: +1 905 477 3617
384 Baker Hill Boulevard, Stouffville, Ontario L4A 4P4, Canada
Our privacy officer is also our grievance officer for users in India under the DPDP Act.