Privacy Policy
Last updated: 14 September 2026
At Kobem we take privacy seriously. This policy explains what personal data we process, for what purpose, on what legal basis and what rights you have. It applies to our website and to the Kobem services.
1. Data controller
Controller: KOBEM TECHNOLOGIES - FZCO, registered under registration No. 85517 and trade licence No. 92297, issued by the Dubai Integrated Economic Zones Authority (DIEZA) and registered address at IFZA Properties, Premises DSO-IFZA, Dubai Silicon Oasis, Dubai, United Arab Emirates.
Data protection contact: contact@kobem.ai.
2. What data we process
Depending on how you use Kobem, we may process:
- Account data: name, email, phone, details of your real estate company.
- Usage data: activity in the dashboard, settings, technical logs.
- Call data: recordings, transcriptions and data of the customers who call (name, phone, reason, etc.), which you entrust us to process as the service provider.
- Billing data: managed through our payment provider.
3. Purposes and legal basis
- Provide the service and manage your account — performance of the contract.
- Answer, qualify and record the calls received by your real estate company — performance of the contract (we act as data processor on your behalf).
- Billing and tax and accounting obligations — legal obligation.
- Improve and secure the service — legitimate interest.
- Marketing communications, only if you give us your consent.
4. Retention periods
We keep your account data, recordings and transcripts for as long as you are a customer and you do not delete them. You can delete any call from the dashboard at any time, and when you close your account we delete everything we are not required to keep.
We do not yet apply automatic deletion by age. When we turn it on we will say so here with the exact period — we would rather tell you what we actually do than announce a deadline we do not meet.
Accounting data is kept for the legally required periods (up to 6 years).
5. Recipients and data processors
We do not sell your data. To provide the service we work with providers that act as data processors, bound by the relevant data processing agreement:
- Supabase — Database and storage of call recordings (EU)
- Vercel — Hosting of the web application (EU / USA)
- LiveKit Cloud — Audio transport and execution of the voice agent (EU)
- Google (Gemini) — Voice model that answers and holds the conversation (USA)
- Deepgram — Speech-to-text transcription (USA)
- OpenAI — Fallback for the voice pipeline (USA)
- Anthropic — Call analysis and summary, and dashboard assistant (USA)
- Telnyx — Telephony: numbering and call transit (EU / USA)
- Resend — Delivery of service emails (USA)
- Telegram — Notifications, only if the customer links their account (—)
- HubSpot — Lead sync, only if the customer connects it (USA)
- Google Workspace — Calendar and Sheets, only if the customer connects them (USA)
- Cal.com — Scheduling, only if the customer connects it (USA)
The ones marked optional only come into play if you connect that integration from your dashboard.
None of our AI providers use your customers' conversations to train their models. That is a contractual condition, not a preference.
6. International transfers
Some providers may be located outside the European Economic Area. In those cases we ensure adequate safeguards (the European Commission's standard contractual clauses or other valid mechanisms) to protect your data.
7. Your rights
You can exercise your rights of access, rectification, erasure, objection, restriction and portability by writing to contact@kobem.ai. If you believe we have not properly handled your request, you can lodge a complaint with the Spanish Data Protection Agency (www.aepd.es).
8. Security
We apply appropriate technical and organisational measures: encryption in transit (TLS) and at rest (AES-256), isolation of data between accounts, additional encryption of your integration credentials, temporary links to play recordings, and logging of our staff's access to an account.
The full detail, including what we do not have yet, is on the Security page.
9. Changes to this policy
We may update this policy. We will publish the current version on this page with its last update date and, if the change is significant, we will notify you.