This Privacy Policy explains how SimplifyGenAI LLC, operating Verbeo AI ("Verbeo AI," "we," "us," or "our"), collects, uses, discloses, and protects personal information when you visit https://verbeo.ai (the "Site"), communicate with us, attend our events, or use the Verbeo AI voice-agent platform and related services (together, the "Services").
We handle personal information in two distinct roles:
- As a controller for our own business purposes, such as operating the Site, marketing, sales, billing, and account administration; and
- As a processor (service provider) when we process personal information on behalf of our customers in connection with their AI Agents and calls. In that role, our customer determines the purposes of processing, and our handling is governed by our agreement and Data Processing Addendum with that customer. If your information was processed because you interacted with a Verbeo AI customer's AI Agent (for example, you received a call), please direct your privacy requests to that customer; we will support them as required.
By using the Services, you acknowledge the practices described here.
1. Children
The Services are intended for business use and are not directed to children. We do not knowingly collect personal information from individuals under 16. If we learn that we have collected such information without a permitted legal basis, we will delete it.
2. Personal Information We Collect
2.1 Information you provide. When you register, contact us, or use the Services, we may collect: name, email address, phone number, company or organization name, job title, postal address, account credentials, payment and billing details, identity- and business-verification information (for telecom KYC), and the content of your communications with us, including support requests, surveys, and feedback.
2.2 Communications Data (voice and messaging). When customers use the Services to operate AI Agents, the platform may process: audio recordings of voice interactions; call transcripts and conversation summaries; call and message metadata (date, time, duration, phone numbers, delivery status); telephony and routing data (carrier and connection details); interaction logs (agent responses, user inputs, conversation flow); and the content transmitted through a call or message. We may also record or monitor limited interactions for security, quality assurance, and service improvement, with notice where required by law. For most Communications Data we act as a processor on behalf of the relevant customer.
2.3 Information collected automatically. When you use the Site or Services, we automatically collect certain technical information through cookies and similar technologies, including: IP address and general (city/region) location; device and browser type, operating system, language, and time zone; pages viewed, features used, and dates/times of activity; referring and exit URLs and clickstream data; and server logs, API request logs, error data, and diagnostic information. We do not collect precise geolocation.
2.4 Information from third parties. We may receive information from: telecom carriers and communications platforms (number validation, routing, delivery status, and related metadata); analytics and advertising partners (interaction, conversion, and campaign data); social media platforms (information you make available when interacting with our pages or using social login); business-data providers (professional and company details for sales and marketing); and payment processors (transaction and verification status).
3. How We Use Personal Information
We use personal information to: create and manage accounts and provide, maintain, support, and improve the Services; route and deliver voice and messaging communications on behalf of customers; verify identity, authenticate accounts, and prevent unauthorized access; process payments and manage billing and collections; detect, prevent, and address fraud, abuse, security incidents, and technical issues; provide analytics and insights; communicate with you about your account, security, and service updates; send marketing communications where permitted (with opt-out); operate, secure, and improve our Services, including through aggregated or de-identified analysis; comply with legal, regulatory, telecom, and tax obligations; and enforce our Terms and protect our rights and those of our customers and their End Users.
AI and model improvement. We use AI and machine-learning models to deliver the Services (for example, to process speech, generate transcripts, and power conversational responses). We do not use identifiable Customer Data or Communications Data to train general-purpose models except with appropriate consent or instruction, or where permitted by an applicable Data Processing Addendum. We may use aggregated or de-identified data, which does not identify any individual, to operate and improve the Services.
4. How We Disclose Personal Information
We may disclose personal information to:
- Service providers and sub-processors that perform functions on our behalf, such as cloud hosting, real-time media and speech processing, analytics, payment processing, customer support, and identity verification. They are contractually required to protect the information and use it only to provide services to us.
- Telecom carriers and communications platforms to route and deliver calls and messages. Some of these providers act as independent controllers for their own billing, fraud-prevention, and regulatory purposes under their own policies.
- Affiliates for purposes consistent with this Policy.
- In a business transfer such as a merger, acquisition, financing, or sale of assets, subject to confidentiality and applicable law.
- For legal and safety reasons, where we believe disclosure is reasonably necessary to comply with law or valid legal process, enforce our Terms, satisfy KYC or telecom-regulatory obligations, or protect the rights, property, or safety of Verbeo AI, our customers, End Users, or the public.
- At a customer's direction, where we act as a processor.
- As aggregated or de-identified data that does not identify you.
- With your consent, for any other purpose.
We do not sell personal information for money. We may share certain online identifiers with advertising and analytics partners through cookies, which may be considered "sharing" or a "sale" under some U.S. state laws; you can opt out via your cookie settings or a recognized opt-out signal.
5. Sub-processors
We engage sub-processors to provide the Services, in categories such as cloud infrastructure, real-time media and speech, telephony, and analytics. A current list is available on request by emailing privacy@verbeo.ai. We require sub-processors to maintain appropriate security and confidentiality protections.
6. International Transfers
We operate from the United Arab Emirates and process data in the UAE, India, and other jurisdictions where we or our sub-processors operate, including the United States and the EU/UK. Where we transfer personal information across borders (for example from the EEA, the UK, or Switzerland to a country without an adequacy decision), we use appropriate safeguards such as the European Commission's Standard Contractual Clauses, the UK International Data Transfer Agreement, or other lawful mechanisms. You may request information about these safeguards at privacy@verbeo.ai. Telecom providers that help deliver communications may also transfer data internationally under their own mechanisms.
7. Retention
We retain personal information only as long as necessary for the purposes described in this Policy, to comply with legal, tax, telecom, or accounting obligations, to resolve disputes, and to enforce our agreements. Retention periods depend on the nature of the data and the purpose of processing. Where we act as a processor, the customer determines the retention period for Communications Data. When information is no longer needed, we delete or de-identify it.
8. Security
We maintain commercially reasonable administrative, technical, and physical safeguards designed to protect personal information against unauthorized access, loss, or misuse. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. You are responsible for protecting your account credentials.
9. Your Privacy Rights
Your rights depend on where you live and the role in which we process your information. Where we act as a processor for a customer, please direct requests to that customer; we will assist them.
9.1 EU / EEA / UK (GDPR and UK GDPR). Subject to conditions, you may have the right to access, rectify, erase, restrict, or object to processing, to data portability, and to withdraw consent. You may lodge a complaint with your local supervisory authority (in the UK, the ICO).
9.2 India (Digital Personal Data Protection Act, 2023). Subject to conditions, you may have the right to access a summary of your personal data and our processing, to correction and erasure, to grievance redressal, and to nominate another person to exercise your rights. To raise a grievance, contact our Data Protection Contact at dpo@verbeo.ai.
9.3 UAE (Federal Decree-Law No. 45 of 2021 on Personal Data Protection, PDPL). Subject to conditions, you may have the right to access, correct, erase, restrict, or object to processing, to portability, and to withdraw consent.
9.4 United States (state privacy laws). Depending on your state of residence, you may have the right to know, access, correct, and delete your personal information, to obtain a copy, to opt out of "sale" or "sharing" for cross-context behavioral advertising, to limit use of sensitive personal information, and not to be discriminated against for exercising these rights. We do not sell personal information for monetary consideration.
9.5 Exercising your rights. To make a request, contact us at privacy@verbeo.ai. We will verify your identity before responding and will reply within the timeframe required by applicable law (for example, generally within 45 days under U.S. state laws, extendable where permitted, and within one month under GDPR). You may use an authorized agent where the law allows, with proof of authority. We will not discriminate against you for exercising your rights.
10. Lawful Bases (GDPR / UK GDPR)
Where GDPR or UK GDPR applies, we rely on one or more of: your consent (for example, marketing and non-essential cookies); performance of a contract (to provide the Services you request); our legitimate interests (such as securing and improving the Services, analytics, fraud prevention, and direct marketing to existing customers), balanced against your rights; and compliance with a legal obligation. Where we rely on consent, you may withdraw it at any time.
11. Automated Processing
We use AI and machine-learning to provide the Services, including processing speech, generating transcripts, and powering conversational AI. When we act as a processor, our customer controls how AI outputs are used in relation to their End Users. We do not make decisions producing legal or similarly significant effects about individuals solely by automated means without human involvement, except as configured by a customer. Questions can be sent to privacy@verbeo.ai.
12. Cookies, Tracking, and Your Choices
Cookies. We use cookies and similar technologies for essential functionality (session and security), preferences, analytics, and advertising. You can manage non-essential cookies through our cookie tool and your browser settings. Disabling some cookies may affect functionality.
Global Privacy Control / Do Not Track. Where required, we honor recognized opt-out preference signals such as Global Privacy Control (GPC).
Marketing. You can opt out of marketing emails using the unsubscribe link in any such message. We will still send transactional and service messages (for example, security, billing, and policy updates) while you have an account.
Account information. You can update or delete your account information through your account settings or by contacting us. When you delete your account, we delete or de-identify your information within a reasonable period, except where retention is required by law.
13. Changes to This Policy
We may update this Policy from time to time. We will post the updated version with a new "Last Updated" date and, for material changes, provide additional notice where required. Your continued use of the Services after the effective date constitutes acceptance.
14. Contact Us
If you have questions, concerns, or requests regarding this Policy or your personal information:
SimplifyGenAI LLC (operating Verbeo AI) Sharjah Media City (Shams), Sharjah, United Arab Emirates Privacy: privacy@verbeo.ai Data Protection Contact: dpo@verbeo.ai