Privacy statement

Contact and responsibility

YO(U)360 / U360 is your contact for information shared through this website and our own portal: info@u360.nl or +31 24 234 0555. Business details: You360, Traverse 128, 5361 TH Grave, the Netherlands. Dutch Chamber of Commerce number 55790402; establishment number 000025407325.

Information and purposes

We process your name, email, inquiry and conversations, plus organization, phone, planning and preferences you provide, to answer your request, prepare an assignment and fulfil agreements. Account and applicable billing information support access and administration. Technical information such as IP, browser signals and timestamps supports delivery, abuse prevention and access control, not advertising profiling.

Optional call recordings and AI reports

Video recording starts only after a visible request from the administrator and the customer’s explicit consent. Either participant can stop recording without ending the call. Video, audio and timing information are stored on U360’s own server; local AI creates a transcript and draft report. Call content is not sent to an external AI API for this purpose.

Only authorised administrators can access the recording, transcript and draft. The administrator reviews the report before sharing it with the customer. The selected retention period of 7, 30 or 90 days appears in the recording request and applies to the recording, transcript and private draft. A shared report follows the customer case retention period. Backup copies may remain until their rotation date.

Legal bases

Inquiry and contract processing may be necessary for steps you request before a contract or its performance. Necessary security and technical administration rely on our legitimate interest in protecting users and systems, balanced against privacy. Administration may require processing by law. Optional marketing requires a separate appropriate basis; an inquiry does not subscribe you automatically.

Service providers

Vercel hosts the website; Supabase software runs our database on a Hostinger VPS in Manchester, United Kingdom, managed with Coolify. Hostinger stores provider backups separately in France. Resend handles email. BotID Basic processes browser signals; Cloudflare Turnstile may be used outside Vercel. Free-form conversation content is excluded from service notifications. Providers receive information needed for their role. Transfers outside the EEA require appropriate safeguards. We do not claim that all data stays exclusively in the Netherlands or EEA. Ask us for applicable recipient and transfer details.

Security and internal declaration

Checked public connections use HTTPS/TLS. Accounts, organization permissions and database policies restrict access. Platform administration requires two-step verification and sensitive actions check revoked sessions. Our dated internal declaration records verified scope and open points. It is not independent certification or a guarantee against incidents. Internal transport encryption, offsite recovery tests and additional detection are not fully demonstrated. Statutory obligations remain applicable.

Cookies and activity records

Necessary cookies support sign-in and display preferences. Production session cookies use Secure, HttpOnly and SameSite=Lax. We do not use our own advertising tracking. The extended portal visit log is prepared but inactive on the verification date. Once activated, it will record session signals, pages and optionally IP and approximate area for up to 30 days under role restrictions. These signals do not prove location or active reading time. Existing change audits are separate.

Retention

Inquiry, account and conversation records are retained for necessary contact, agreements and handling or statutory retention. Deletion requests are assessed by category. Backup copies may remain until rotation; deleted information must not become active again following restoration. Offsite recovery and final backup retention remain open verification points.

Your rights

Request access, correction, erasure, restriction and applicable portability via info@u360.nl. You may object to legitimate-interest processing and withdraw consent where used. We verify identity proportionately and normally respond within one month, explaining any permitted extension. Portal exports and account requests assist this process; registering a deletion request does not complete deletion. You may complain to the Dutch Data Protection Authority at autoriteitpersoonsgegevens.nl.