Privacy statement

Version 10 November 2026 (updated: logging in with Google and paying through Stripe mentioned) · Nederlands. If the versions differ, the Dutch version applies.

BelBuddy is a trade name of Wenneker Ventures, Chamber of Commerce (KvK) 42173073, based in The Hague, the Netherlands. Questions about privacy can be sent to [email protected].

1. Visitors to this website

The website runs on Cloudflare. Cloudflare processes technical data (such as your IP address) to show and protect the site. We don't use advertising or tracking cookies.

2. The chat on this website

Questions in the chat are first answered by an AI assistant (Anthropic). If it can't help you, or if you choose to, your question goes to the BelBuddy team via Telegram. We store your questions and our answers in a Cloudflare database in the EU. Conversations without a new message are deleted after 12 months. If you give an email address in the chat, we only use it to answer your question. Don't enter payment details or passwords in the chat.

3. BelBuddy customers

For customers we store the business details you give when signing up (business name, name, email address, phone number, optionally Chamber of Commerce number), the email addresses used to log in and to receive call notes, and the settings (opening hours, services, information about your business, calendar connection, staff). You log in with a code by email or with your Microsoft or Google account; we don't store passwords for your account. Payments go through Stripe (Ireland); Stripe processes your payment and invoice details for that. We don't see full card or account numbers.

Calendar connections. BelBuddy can only access the calendar you connect, not email, contacts or files. For Outlook or Microsoft 365 and for Google Calendar we only store an access token for the calendar, encrypted, and the email address of the connected account. For Apple iCloud, Yahoo or another CalDAV calendar we store the email address and the app-specific password you create for it, encrypted. You can disconnect at any time in the app; with Apple and Yahoo you can also revoke the app password yourself.

BelBuddy's use of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We only use calendar data to find free times and to book or cancel appointments, and for no other purpose.

Google user data: what we use, who we share it with and how we protect it

What we use. With your permission, BelBuddy only uses the following from your Google account: your email address (to sign in and to show the connection), the start and end times of events in the connected calendar on the day a caller asks about (to see when you are free), and the events BelBuddy itself adds to your calendar or removes at the caller's request. We do not store the titles or contents of your other events.

Who we share Google user data with. We do not sell Google user data, do not use it for advertising or to train AI models, and do not share, transfer or disclose it to any party other than those below:

Beyond that, we only disclose data where the law requires us to. BelBuddy staff only look at Google user data with your consent (for example for a support request), when needed for security or to investigate abuse, or when required by law. For parties outside the EU the safeguards in section 5 apply.

How we protect Google user data.

Microsoft 365 staff. If you let BelBuddy import your staff, we store their name, email address, department, job title and business phone number, and we look up their Teams status during a call. Staff who leave are deactivated at the next update.

4. Callers who speak with BelBuddy

BelBuddy answers the phone on behalf of a business (our customer). That business is responsible for its callers' data; BelBuddy is a processor and signs a data processing agreement with every customer. BelBuddy introduces itself as a digital assistant on every call.

WhatWhyWhere
Caller's phone numberAnswer the call, enable a call-backTelephony via DIDWW
The call (speech and text)Hold the conversation and transcribe itElevenLabs
Name, number, appointment, questionAppointment in the business's calendar, call note in the app and by emailBelBuddy server in Germany (Contabo); email via Brevo (EU)
Short summaryNote for the businessAnthropic

If the business connects BelBuddy to its own software (via the API or a webhook), we send that business's calls to that software on its instructions. Secrets for such connections are stored encrypted.

We only use calls to provide the service to the business. We never sell anything on and don't use calls for advertising. The business chooses how long calls are kept (30 days to 2 years, 1 year by default); after that they are deleted automatically every night. When a subscription ends, we delete that customer's data within 30 days.

Backups. Every night we make an encrypted backup of the database. It is stored on the server and in a BelBuddy mailbox (Google Workspace) and can't be opened without our key. Backups on the server are deleted automatically after 30 days; the copies in the mailbox are cleaned up every month.

5. Transfers outside the EU

ElevenLabs (US) processes the call while it takes place, with a Google language model (Gemini) that writes the answers; afterwards ElevenLabs keeps nothing of the call (no recording, no text). Anthropic writes the short summary and runs the chat on this site, in the US. We use Telegram only for the chat on this site. We only use parties that offer appropriate safeguards, such as the EU-US Data Privacy Framework or the European Commission's standard contractual clauses. The calls and notes BelBuddy keeps are stored encrypted on our server in Germany. The encrypted nightly backup is also kept in a BelBuddy mailbox (Google Workspace). Phone notes are emailed to the customer via Brevo (EU).

6. Your rights

You can ask us which data we hold about you, and ask us to correct or delete it. Email [email protected]. If you're not satisfied with how we handle your data, you can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).