Trust & security

Your customers' data, treated the way you'd treat it yourself.

A short, plain-language overview of how Bubo handles data. For the full legal detail, see our Privacy Policy.

Hosted in the EU. Nowhere else.

Every call, transcript, and reservation your business handles through Bubo is stored and processed on servers within the European Union — never transferred outside it without an approved legal safeguard.

How calls are handled

The short version of what happens to a call, from a data perspective.

Only what's needed to help your customer

Bubo processes call audio and business information only to answer the call — take a booking, an order, or answer a question. Nothing more.

A small number of trusted subprocessors

Speech-to-text, text-to-speech, and language processing are handled by a small set of vetted providers, bound by data processing agreements — never used to train third-party AI models.

Encrypted in transit, access-controlled at rest

Standard technical safeguards apply throughout — encryption in transit, restricted access, and regular review of every subprocessor we use.

Compliance

Built around the regulatory framework your business already operates under.

GDPRFull compliance, EU-first by design
EU AI ActAligned with current transparency requirements
EU data residencyNo transfers outside the EU/EEA

Data retention & deletion

Demo request & enquiry data Up to 24 months, or on request
Call recordings & transcripts Set by your business, per your needs
Financial & invoicing records 7 years (Dutch statutory requirement)

Want something deleted sooner? Just ask — see the full process in our Privacy Policy.

Bubo never guesses.

If a caller asks something outside what your business has provided, Bubo doesn't invent an answer — it notes the question and flags it to you, every time.

Questions

Do you record and store calls?

Call audio is processed to understand and respond to the caller. Whether recordings are retained — and for how long — is a setting your business controls, described in our Privacy Policy.

Who can access my customers' data?

Only your business (as the data controller) and Tuva Euro B.V.'s vetted subprocessors who help deliver the Service — never sold, never shared for marketing.

What happens if there's a data breach?

We follow GDPR's mandatory breach notification requirements — affected businesses are informed without undue delay, along with the relevant details and remediation steps.

Is my data used to train AI models?

No. Call content is never used to train third-party general-purpose AI models.

Can I request my data be deleted?

Yes, at any time — contact us and we'll process the request in line with the retention and deletion terms in our Privacy Policy.

Read the full detail: Privacy Policy · Terms & Conditions · Impressum

Still have questions

Happy to walk through it on a call.

Book a demo and we'll answer anything about how Bubo handles your business's data, alongside showing you how it works.

Book your demo