Legal

    Privacy Policy

    Last updated: 23 September 2026

    1. Who we are

    ClientAssist is a trade name of JB Business Solutions, Jacques Urlusstraat 43, 2202 SN Noordwijk, Chamber of Commerce 89825802. We provide an AI receptionist for businesses: an assistant that answers the phone, answers questions, schedules appointments and transfers calls when needed.

    Questions about privacy or a request about your data? Email info@clientassist.nl.

    2. Two roles

    For the data of visitors to this website, of anyone who contacts us and of our customers, we are the controller. That is covered in part A.

    If you call a business that uses our AI receptionist, that business is responsible for your data and we process it on its behalf, as processor. That is covered in part B.

    Part A: data for which we are responsible

    3. What data, why and for how long

    WhenWhat dataWhy and on what legal basisHow long
    You visit the websiteIP address and technical data in our hosting provider's log filesKeeping the site secure and working; legitimate interestAccording to the hosting provider's log retention period; we do not analyse them
    You use the chat on the websiteYour messages; your IP address for abuse preventionAnswering your question; legitimate interestWe do not store messages; the IP address is deleted after 24 hours
    You request a demo, a quote or contactName, email address, phone number, company and what you write to usHandling your request; at your request, prior to any agreementUp to 24 months after the request, unless you become a customer
    You request the ROI calculationEmail address, company details and the figures you enterSending you the calculation; at your requestUp to 24 months after the request
    You receive our newsletterName, email address, company, and whether you open the email or click a linkKeeping you informed; consent, or for existing customers legitimate interest (article 11.7(3) of the Dutch Telecommunications Act)Until you unsubscribe, via the link at the bottom of every newsletter
    You become a customerContact persons, email addresses, company, Chamber of Commerce and VAT details, billing address and account detailsPerforming the agreementFor as long as the agreement runs; we delete the account within 30 days after it ends
    You pay usInvoice details, IBAN and direct debit mandatePerforming the agreement and meeting our statutory tax retention obligationSeven years, as required by law
    You call a business that uses ClientAssistYour phone number (encrypted), the time, duration and country of origin of the call, and how the call endedDetecting and stopping abuse, spam and fraud involving our service, for example a number that calls dozens of times a day; legitimate interest. We do not use the content of calls for this.Counts 30 days; a block until 90 days after it is lifted or expires; alerts about unusual calls 12 months

    We do not sell data, do not use it for advertising and do not make decisions about you that are based solely on automated processing.

    4. Who we share data with

    We engage the following parties. They process the data only on our behalf.

    PartyPurposeLocation
    SupabaseDatabase and storageEU (Ireland)
    Google (Workspace)EmailEU and US
    Netlify / VercelWebsite hostingUS, with servers worldwide
    AnthropicThe language model behind the chat on the websiteUS
    MailBlueSending the newsletterEU and US
    MolliePayments and direct debitEU (Netherlands)
    MoneybirdInvoicing and accountingEU (Netherlands)

    Google reCAPTCHA (spam protection on forms) and Google Maps (the map on the contact page) only load if you give your consent for them via the cookie notice. Google processes that data partly under its own responsibility.

    Part B: if you call a business that uses ClientAssist

    5. What happens to your call

    At the start of the call you hear that you are speaking with an AI assistant and that the call is being recorded. During the call the following is processed:

    • the recording and a written version (transcript) of the call;
    • your phone number, and the date, time and duration of the call;
    • what you tell us yourself, such as your name and the reason for your call;
    • a summary, and where applicable an appointment or callback request.

    The business you call determines what this data is used for and is responsible for it. Do you want to access your data, have it corrected or deleted, or do you object? Then contact that business. If your request reaches us, we forward it and help the business handle it.

    We delete the content of the call (recording, transcript, summary, your name and phone number) no later than 90 days after the call. Only the date, time and duration are kept longer, because the business is invoiced on that basis. The business can agree a shorter period with us.

    Do you not want to speak with an AI assistant? Then ask for a staff member; the assistant will transfer you to the number the business has set up for that purpose.

    To counter abuse of our service, we also keep track, for ourselves, of how often a number calls. If a number calls the same business very often in a short time, it may be refused temporarily. We are responsible for this ourselves; see part A.

    6. Sub-processors

    To make the AI receptionist work, we engage the following parties:

    PartyPurposeLocation
    Retell AISpeech recognition and conducting the conversationUS
    Language model provider, via Retell (such as OpenAI)Understanding and answering the questionUS
    ElevenLabsThe assistant's voiceUS
    TwilioTelephony and phone numbersUS
    SupabaseStorage of calls in the dashboardEU (Ireland)

    We notify our customers of a new sub-processor at least 30 days in advance, so that they can object. The arrangements for this are set out in the data processing agreement.

    For both parts

    7. Transfers outside the European Economic Area

    Some of the parties listed above are based in the United States. We base those transfers on the EU-US Data Privacy Framework insofar as the party is certified under it, and otherwise on the standard contractual clauses of the European Commission included in that party's data processing terms.

    8. Security

    • All connections are encrypted (TLS); the database is stored encrypted.
    • Each customer sees only its own data. This is enforced by the database itself (row-level security), not just by the website.
    • Only those who need it for their work have access to data.
    • We do not use call data to train AI models, and we configure our suppliers so that they do not do so either, insofar as that setting is available.

    9. Your rights

    You have the right of access, rectification, erasure, restriction of processing, data portability and objection. Where processing is based on consent, you can withdraw that consent at any time. For data under part A, email info@clientassist.nl; we respond within one month. For data under part B, contact the business you called.

    If you are not satisfied with how we handle your data, you can file a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

    10. Cookies

    This website stores in your browser only what is needed to make the site and the dashboard work: your choice in the cookie notice and, if you log in, your session. Google reCAPTCHA and Google Maps only load after your consent and may then place their own cookies. We do not use analytics, marketing or advertising cookies.

    11. Changes

    We update this policy when our service, our suppliers or the law change. We notify our customers of material changes in advance.

    Contact details

    JB Business Solutions

    Trading as ClientAssist

    Jacques Urlusstraat 43

    2202 SN Noordwijk

    The Netherlands

    Chamber of Commerce: 89825802

    VAT: NL004763207B69

    Email: info@clientassist.nl