- Home
- Privacy policy
Legal
Privacy Policy
Last updated: 23 September 2026
1. Who we are
ClientAssist is a trade name of JB Business Solutions, Jacques Urlusstraat 43, 2202 SN Noordwijk, Chamber of Commerce 89825802. We provide an AI receptionist for businesses: an assistant that answers the phone, answers questions, schedules appointments and transfers calls when needed.
Questions about privacy or a request about your data? Email info@clientassist.nl.
2. Two roles
For the data of visitors to this website, of anyone who contacts us and of our customers, we are the controller. That is covered in part A.
If you call a business that uses our AI receptionist, that business is responsible for your data and we process it on its behalf, as processor. That is covered in part B.
Part A: data for which we are responsible
3. What data, why and for how long
| When | What data | Why and on what legal basis | How long |
|---|---|---|---|
| You visit the website | IP address and technical data in our hosting provider's log files | Keeping the site secure and working; legitimate interest | According to the hosting provider's log retention period; we do not analyse them |
| You use the chat on the website | Your messages; your IP address for abuse prevention | Answering your question; legitimate interest | We do not store messages; the IP address is deleted after 24 hours |
| You request a demo, a quote or contact | Name, email address, phone number, company and what you write to us | Handling your request; at your request, prior to any agreement | Up to 24 months after the request, unless you become a customer |
| You request the ROI calculation | Email address, company details and the figures you enter | Sending you the calculation; at your request | Up to 24 months after the request |
| You receive our newsletter | Name, email address, company, and whether you open the email or click a link | Keeping you informed; consent, or for existing customers legitimate interest (article 11.7(3) of the Dutch Telecommunications Act) | Until you unsubscribe, via the link at the bottom of every newsletter |
| You become a customer | Contact persons, email addresses, company, Chamber of Commerce and VAT details, billing address and account details | Performing the agreement | For as long as the agreement runs; we delete the account within 30 days after it ends |
| You pay us | Invoice details, IBAN and direct debit mandate | Performing the agreement and meeting our statutory tax retention obligation | Seven years, as required by law |
| You call a business that uses ClientAssist | Your phone number (encrypted), the time, duration and country of origin of the call, and how the call ended | Detecting and stopping abuse, spam and fraud involving our service, for example a number that calls dozens of times a day; legitimate interest. We do not use the content of calls for this. | Counts 30 days; a block until 90 days after it is lifted or expires; alerts about unusual calls 12 months |
We do not sell data, do not use it for advertising and do not make decisions about you that are based solely on automated processing.
4. Who we share data with
We engage the following parties. They process the data only on our behalf.
| Party | Purpose | Location |
|---|---|---|
| Supabase | Database and storage | EU (Ireland) |
| Google (Workspace) | EU and US | |
| Netlify / Vercel | Website hosting | US, with servers worldwide |
| Anthropic | The language model behind the chat on the website | US |
| MailBlue | Sending the newsletter | EU and US |
| Mollie | Payments and direct debit | EU (Netherlands) |
| Moneybird | Invoicing and accounting | EU (Netherlands) |
Google reCAPTCHA (spam protection on forms) and Google Maps (the map on the contact page) only load if you give your consent for them via the cookie notice. Google processes that data partly under its own responsibility.
Part B: if you call a business that uses ClientAssist
5. What happens to your call
At the start of the call you hear that you are speaking with an AI assistant and that the call is being recorded. During the call the following is processed:
- the recording and a written version (transcript) of the call;
- your phone number, and the date, time and duration of the call;
- what you tell us yourself, such as your name and the reason for your call;
- a summary, and where applicable an appointment or callback request.
The business you call determines what this data is used for and is responsible for it. Do you want to access your data, have it corrected or deleted, or do you object? Then contact that business. If your request reaches us, we forward it and help the business handle it.
We delete the content of the call (recording, transcript, summary, your name and phone number) no later than 90 days after the call. Only the date, time and duration are kept longer, because the business is invoiced on that basis. The business can agree a shorter period with us.
Do you not want to speak with an AI assistant? Then ask for a staff member; the assistant will transfer you to the number the business has set up for that purpose.
To counter abuse of our service, we also keep track, for ourselves, of how often a number calls. If a number calls the same business very often in a short time, it may be refused temporarily. We are responsible for this ourselves; see part A.
6. Sub-processors
To make the AI receptionist work, we engage the following parties:
| Party | Purpose | Location |
|---|---|---|
| Retell AI | Speech recognition and conducting the conversation | US |
| Language model provider, via Retell (such as OpenAI) | Understanding and answering the question | US |
| ElevenLabs | The assistant's voice | US |
| Twilio | Telephony and phone numbers | US |
| Supabase | Storage of calls in the dashboard | EU (Ireland) |
We notify our customers of a new sub-processor at least 30 days in advance, so that they can object. The arrangements for this are set out in the data processing agreement.
For both parts
7. Transfers outside the European Economic Area
Some of the parties listed above are based in the United States. We base those transfers on the EU-US Data Privacy Framework insofar as the party is certified under it, and otherwise on the standard contractual clauses of the European Commission included in that party's data processing terms.
8. Security
- All connections are encrypted (TLS); the database is stored encrypted.
- Each customer sees only its own data. This is enforced by the database itself (row-level security), not just by the website.
- Only those who need it for their work have access to data.
- We do not use call data to train AI models, and we configure our suppliers so that they do not do so either, insofar as that setting is available.
9. Your rights
You have the right of access, rectification, erasure, restriction of processing, data portability and objection. Where processing is based on consent, you can withdraw that consent at any time. For data under part A, email info@clientassist.nl; we respond within one month. For data under part B, contact the business you called.
If you are not satisfied with how we handle your data, you can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
10. Cookies
This website stores in your browser only what is needed to make the site and the dashboard work: your choice in the cookie notice and, if you log in, your session. Google reCAPTCHA and Google Maps only load after your consent and may then place their own cookies. We do not use analytics, marketing or advertising cookies.
11. Changes
We update this policy when our service, our suppliers or the law change. We notify our customers of material changes in advance.
Contact details
JB Business Solutions
Trading as ClientAssist
Jacques Urlusstraat 43
2202 SN Noordwijk
The Netherlands
Chamber of Commerce: 89825802
VAT: NL004763207B69
Email: info@clientassist.nl