Privacy Policy

Effective: December 8, 2024 · Last updated: September 5, 2025

1. Introduction

This policy explains how Verbu ApS ("we", "us", "our") collects, uses, stores, and protects personal data when you use our AI-driven call-handling platform (the "Service"). By accessing or using the Service, you agree to this Privacy Policy and the Terms of Service.

We are committed to protecting your privacy and complying with applicable data protection laws, including the EU General Data Protection Regulation (GDPR).

Verbu ApS is a Danish private limited company registered under CVR number 45855309.

2. Who We Are

For most processing activities, the customer acts as the Data Controller and Verbu acts as the Data Processor. For certain website and marketing activities, Verbu acts as the Data Controller.

3. Data We Process

Customer Account Data

Name, email, phone number
Company name, address, billing information
Login credentials and account preferences

Service Usage Data

Call data: audio recordings, transcriptions, caller ID, call metadata
Conversation content: information provided during calls
AI-generated responses and interaction logs
User activity within the dashboard

Website & Marketing Data

IP address, browser type, device information
Pages visited, referral sources, cookies and tracking pixels
Newsletter subscriptions and marketing preferences

4. Purposes of Processing

Personal data is processed to:

Deliver and operate the AI call-handling platform
Manage accounts and provide customer support
Analyse and improve service performance and security
Provide AI model training using anonymised or pseudonymised data
Send service updates and notifications
Conduct marketing communications (with consent)
Comply with legal obligations

5. Legal Bases for Processing

Processing is based on:

Performance of a contract – to deliver requested Services
Legitimate interests – to improve the platform, prevent fraud, and protect business interests
Consent – for optional features, marketing, or call recording where legally required
Legal obligation – to comply with laws and regulations

6. Data Retention

Personal data is retained only as long as necessary for stated purposes or as required by law.

7. Sharing of Data

Information may be shared with:

Authorised sub-processors for hosting, telephony, AI processing, and related services
Regulatory or legal authorities when required by law
Affiliates and partners in connection with joint services or business transactions
Third parties with explicit consent

We do not sell personal data.

8. International Data Transfers

Information may be transferred to and processed in countries outside the EU/EEA. Adequate protection is ensured through:

EU Commission Adequacy Decisions
Standard Contractual Clauses (SCCs) with supplementary safeguards such as encryption and pseudonymisation

9. Your Rights Under GDPR

You have the right to:

Access your personal data
Rectify inaccurate or incomplete data
Erase your personal data ("right to be forgotten")
Restrict processing in certain cases
Object to processing based on legitimate interests
Receive data portability in machine-readable format
Withdraw consent at any time
Lodge a complaint with a supervisory authority (Datatilsynet in Denmark)

To exercise these rights, contact legal@verbu.com.

10. Security Measures

Technical and organisational measures include:

Encryption at rest and in transit
Role-based access controls
Regular security audits and penetration testing
Data minimisation and pseudonymisation where possible
Incident response procedures

11. Cookies and Tracking

Our website uses cookies to improve functionality, analyse traffic, and personalise content. You can manage cookie preferences in your browser settings.

12. Changes to This Policy

This policy may be updated periodically. Material changes will be communicated via email or prominent website notice.

Contact

Verbu ApS Nymarksvej 57, 5800 Nyborg, Denmark Email: legal@verbu.com Phone: +45 52 51 52 30 CVR: DK45855309