When the GDPR applies
Todvob is based in Bangladesh and serves mainly Bangladeshi businesses. The GDPR (and the UK GDPR) can still apply when a business in the EU/EEA or UK uses Todvob, or when an AI agent on Todvob talks to people located there. This page explains how we meet those obligations.
Controller and processor
- For account, billing and website-visitor data, Todvob is the controller.
- For data about a customer’s callers, contacts and website visitors, the customer is the controller and Todvob is the processor, acting under our Data Processing & Retention terms (Article 28 GDPR). A signed DPA is available on request.
Lawful bases
| Processing | Lawful basis (Article 6) |
|---|---|
| Providing the Service to account holders | Contract |
| Billing, tax and accounting | Legal obligation; contract |
| Security, fraud and abuse prevention | Legitimate interests |
| Service emails about your account | Contract; legitimate interests |
| Calls and chats on behalf of a business | Determined by that business as controller (often consent or legitimate interests) |
Your rights
- Access: get a copy of your personal data.
- Rectification: correct inaccurate data.
- Erasure: ask us to delete data, subject to legal retention duties.
- Restriction and objection: limit or object to certain processing, including any based on legitimate interests.
- Portability: receive data you gave us in a machine-readable format.
- Withdraw consent at any time where processing is based on consent.
- Not to be subject to a decision based solely on automated processing that has legal or similarly significant effects. Todvob’s AI agents answer and record conversations; businesses remain responsible for decisions they make from the results.
- Complain to your local data protection authority.
Send requests to support@todvob.com. We respond within one month (extendable by two months for complex requests, with notice). If you contacted a business that uses Todvob, we will pass your request to that business as the controller.
International transfers
Data may be processed in Bangladesh, India, the United States and other countries where our sub-processors operate (see the Privacy Policy). For transfers from the EU/EEA, UK or Switzerland we use the European Commission’s Standard Contractual Clauses (and the UK Addendum where relevant) together with technical and organisational safeguards.
AI transparency
Businesses using Todvob should tell callers that they are speaking with an AI agent and how their data is used. Todvob supports this through configurable greetings and does not use one customer’s conversation data to train models for other customers.
Contact
Data protection questions: support@todvob.com.
Questions about this document? Email support@todvob.com.