Privacy Policy

Who we are

Todvob ("Todvob", "we", "us") provides AI agents that answer and make phone calls and chat on websites for businesses, mainly in Bangladesh. This policy explains how we handle personal data when you visit todvob.com, create an account, or interact with an AI agent that a business runs on Todvob.

Questions about this policy or your data: support@todvob.com.

Our two roles

We act in two different roles, and your rights are handled accordingly:

• For our customers’ account data (the people who sign up, their team members and billing contacts) Todvob decides how the data is used, so we are the controller.
• For data about our customers’ own callers and website visitors (for example a shop’s customers who receive an order-confirmation call), the business using Todvob decides why it is collected and is the controller. Todvob processes that data only on the business’s instructions, as its processor. If you spoke with an AI agent of a business, please contact that business first; we will help them answer your request.

Data we collect

• Account data: name, email address, password (stored only as a secure hash), workspace name, team roles, language preference.
• Billing data: plan, payment status and invoices. Card and mobile-wallet details are entered on the payment provider’s pages (PayStation or Stripe); we do not store full card numbers.
• Content you provide: agent instructions, knowledge documents, contact lists, campaign settings and phone line details. SIP passwords are stored encrypted.
• Call and conversation data: caller and called phone numbers, call times and duration, the transcript of what was said, results such as "confirmed" or "address changed", and leads captured by the agent.
• Audio: call and voice audio is streamed to our speech providers to be transcribed and to produce the agent’s voice. We keep the transcript, not a copy of the audio, unless call recording is enabled for a workspace.
• Technical data: IP address, browser type and security logs, used to keep the service safe and working.

How we use data

• To provide the service: run AI agents, connect calls, show transcripts and results, and send the notifications you choose (contract).
• To bill you and prevent payment fraud (contract, legal obligation).
• To keep Todvob secure, enforce calling rules and investigate abuse (legitimate interests, legal obligation).
• To support you when you contact us (contract, legitimate interests).
• To improve reliability and speed, using aggregated performance measurements, never selling data or using it for advertising (legitimate interests).

We do not sell personal data, and we do not use our customers’ callers’ conversations to train AI models for other customers.

Who processes data for us

We use carefully chosen providers (sub-processors) to run the service. Each receives only the data needed for its task, under contractual confidentiality and security obligations:

We may also disclose data when required by law, for example in response to a valid request from a Bangladeshi authority, and we will tell the affected customer when the law allows.

International transfers

Some providers process data outside Bangladesh, as shown above. Where data about people in the European Economic Area, the United Kingdom or Switzerland is transferred, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses offered by those providers.

How long we keep data

We keep data only as long as needed. The details are in our Data Processing & Retention policy. In short: account data while your account is open; conversations, transcripts and leads until the customer deletes them or closes the workspace; database backups for 14 days; security logs for up to 90 days.

Security

Data is encrypted in transit with HTTPS/TLS. Each workspace is logically separated, access is limited by roles, passwords are hashed, telephony passwords are encrypted, and important administrative actions are logged. No system is perfectly secure; if a breach affects your personal data we will notify you and, where required, the competent authority without undue delay.

Your rights

Depending on where you live, you can ask to access, correct, delete, restrict or export your personal data, object to certain processing, and withdraw consent at any time. People in the EU/EEA and UK have these rights under the GDPR; see our GDPR page.

To exercise a right, email support@todvob.com from the address linked to your account. We reply within 30 days. If your data was collected by a business that uses Todvob, we will forward your request to that business.

Children

Todvob is a business service and is not intended for children under 18. We do not knowingly collect their data.

Changes to this policy

If we make material changes we will update the date above and notify account owners by email or in the dashboard before the changes take effect.