Effective Date: December 8 2024
Last Updated: September 5 2025
1. Introduction
This Privacy Policy explains how Verbu ApS (“Verbu”, “we”, “us”, “our”) collects, uses, stores, and protects your personal data when you use our AI-driven call-handling and business insight platform (the “Service”). By accessing or using the Service, you agree to this Privacy Policy and our Terms of Service
We are committed to protecting your privacy and complying with applicable data protection laws, including the EU General Data Protection Regulation (GDPR).
If you have questions about this Privacy Policy or our data practices, contact us at:
Email: legal@verbu.com
Verbu ApS is a Danish private limited company registered under CVR number 45855309.
2. Who We Are
For most processing activities, you (our customer) act as the Data Controller and Verbu acts as the Data Processor.
For certain website and marketing activities, Verbu acts as the Data Controller.
3. Data We Process
Depending on your relationship with us (customer, user, caller), we may process the following categories of personal data:
a) Customer Account Data (Controller role – Verbu as Data Controller)
- Name, email, phone number
- Company name, address, billing information
- Login Credentials, account preferences.
b) Service Usage Data (Processor role – Verbu as Data Processor)
- Call data: audio recordings, transcriptions, caller ID, call metadata (time, duration, routing)
- Conversation content: information provided during calls (may include incidental personal data)
- AI-generated responses and interaction logs
- User activity within our dashboard
c) Website & Marketing Data
- IP address, browser type, device information
- Pages visited, referral sources, cookies and tracking pixels
- Newsletter subscriptions and marketing preferences
4. Purposes of Processing
We process personal data for the following purposes:
- Delivering and operating our AI call-handling platform
- Managing your account and providing customer support
- Analysing and improving service performance and security
- Providing training and tuning of AI models (using anonymised or pseudonymised data)
- Sending service updates and important notifications
- Marketing and promotional communications (if you have consented)
- Compliance with legal obligations
5. Legal Bases for Processing
We process your personal data based on one or more of the following legal bases:
- Performance of a contract (GDPR Art. 6(1)(b)) – to deliver the Services you requested
- Legitimate interests (GDPR Art. 6(1)(f)) – to improve our platform, prevent fraud, and protect our business
- Consent (GDPR Art. 6(1)(a)) – for optional features, marketing communications, or call recording where required by law
- Legal obligation (GDPR Art. 6(1)(c)) – to comply with laws and regulations
6. Data Retention
We retain personal data only as long as necessary for the purposes stated above or as required by law:
7. Sharing of Data
We may share your information under the following circumstances:
- Authorised Sub-processors for hosting, telephony, AI processing, and related services, payment processing, customer support or other services on our behalf.
- Regulatory or legal authorities when required by law
- Affiliates and partners: With our affiliates or trusted business partners in connection with joint services, mergers acquisitions or other business transactions.
- Third parties with your explicit consent
We never sell your data.
8. International Data Transfers
Your information may be transferred to and processed in countries other than your own. Where personal data is transferred outside the EU/EEA, we ensure adequate protection through:
- EU Commission Adequacy Decisions; or
- Standard Contractual Clauses (SCCs) with supplementary safeguards (e.g., encryption, pseudonymisation)
9. Your Rights Under GDPR
You have the right to:
- Access your personal data
- Rectify inaccurate or incomplete data
- Erase your personal data (“right to be forgotten”)
- Restrict processing in certain cases
- Object to processing based on legitimate interests
- Data portability – receive a copy in a machine-readable format
- Withdraw consent at any time (for consent-based processing)
- Lodge a complaint with a supervisory authority (in Denmark: Datatilsynet)
To exercise these rights, email us at legal@verbu.com.
10. Security Measures
We implement technical and organisational measures to protect personal data, including:
- Encryption at rest and in transit
- Role-based access controls
- Regular security audits and penetration testing
- Data minimisation and pseudonymisation where possible
- Incident response procedures
11. Cookies and Tracking
Our website uses cookies to improve functionality, analyse traffic, and personalise content.
12. Changes to This Policy
We may update this Privacy Policy from time to time.
If we make material changes, we will notify you via email or prominent notice on our website.
Contact Details:
Verbu ApS
lega@verbu.com
