Privacy policy

Who we are

Josie is an AI receptionist for small businesses, provided by [Company legal name] ("Josie," "we," "us"). This policy explains what information we collect, how we use it and the choices you have. It covers our website, the Josie app and the phone and text services we run for the businesses that use Josie.

Two groups of people are involved:

• Customers: the businesses that sign up for Josie, and the people who use the Josie app on their behalf.
• Callers: the people who call or text a business that uses Josie. For callers, we act as a service provider to that business: we process their information on the business's behalf and under its instructions.

Information we collect

From customers

• Account details: name, email, password (stored only as a secure hash) and the business's name.
• Business details you give Josie to answer calls: hours, services, prices, staff, policies, answers to common questions and transfer numbers.
• Billing details, handled by our payment processor. We never see or store full card numbers.
• How you use the app, such as pages visited and settings changed, so we can keep Josie working and improve it.

From callers, on behalf of the business they called

• The phone number a call or text comes from, and the time and length of each call.
• A transcript of the call and, where the business turns it on and the law allows, a recording.
• What the caller asks Josie to do: a booking, a message, a question, or a request to talk to a person, with the details they give, such as their name.
• For texts: the messages sent and received, and the caller's consent to receive them.

From visitors to our website

• The email address you give us to join the waitlist, and where you joined from.
• Basic technical information, such as browser type and pages visited.
• Site analytics. On our public pages (the home page, pricing, the calculator, security and the industry pages) we count visits and which buttons are used, with PostHog. It sets no cookies, keeps nothing in your browser and builds no profile of you, and what it receives is never tied to your name, email address or phone number. It drops the query string of the page you are on, except campaign tags that start with utm_. It does not run on sign-in, sign-up, onboarding, the Josie app or any business's texting pages, and we honor your browser's privacy signal: if it sends Global Privacy Control or Do Not Track, we don't load it at all.
• Demo calls. If you try Josie by phone or in your browser on our site, we handle the call to run the demo and delete its transcript after 24 hours.

How we use information

• To provide Josie: answer and route calls, book appointments, take messages, send confirmations and reminders, and show customers their calls, transcripts and reports.
• To bill customers and prevent fraud and abuse.
• To keep Josie secure and reliable, and to fix problems.
• To improve Josie, using information about how the service performs. We don't use callers' conversations to train AI models.
• To contact customers about their account, and waitlist members about Josie's launch.
• To comply with the law.

AI and call recording

Josie uses AI services to understand callers and to speak and write responses. At the start of every call, Josie says it is an AI assistant and that the call is recorded and transcribed. We configure our AI providers not to use your calls to train their models. For healthcare businesses, our voice provider keeps no call data after the call ends.

How we share information

We share information only as needed to run Josie:

• Service providers that host and power Josie: telephony and text messaging, voice AI, cloud hosting and databases, payments and email. They may use the information only to provide their service to us.
• The business a caller contacted, which can see that caller's calls, transcripts and messages in its Josie account.
• When the law requires it, or to protect the rights, safety and property of Josie, our customers or others.
• In a business transfer, such as a merger, under the same protections.

We do not sell personal information, and we do not share it for cross-context behavioral advertising.

Text messaging. We do not share mobile phone numbers or text-message opt-in data with third parties or affiliates for their marketing or promotional purposes. Text-message originator opt-in data and consent are never shared with any third party, except the service providers that deliver the messages.

Google user data

If you connect a Google account, for example to sync your calendar, Josie's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We use that information only to provide the feature you connected.

Health information

For businesses in healthcare, Josie works as a business associate under HIPAA. We sign a Business Associate Agreement with each of these businesses and handle protected health information as that agreement and the law require. That includes keeping it out of logs, analytics and error reports, and storing no call audio for them.

How long we keep information

We keep customer information for as long as the account is active and as needed to provide Josie. Callers' information is kept for the period the business sets in Josie, within the limits our agreements and the law allow. When a customer closes their account, we delete or de-identify their information within 90 days, except where the law requires us to keep it longer.

Security

We protect information with encryption in transit and at rest, strict separation between businesses, access controls and monitoring. No system is perfectly secure, but we work to protect your information and will notify you of a breach as the law requires. Our Security & HIPAA page has more detail.

Your choices and rights

• Customers can see and update most of their information in the app, and can ask us to export or delete it.
• Callers can ask the business they called, or us, to see, correct or delete their information. We will work with the business to respond.
• Texts: reply STOP to any message to stop receiving texts from that business. See our SMS terms.
• California residents have the right to know, access, correct and delete their personal information, and the right not to be discriminated against for using these rights. We don't sell or share personal information as California law defines those terms.

To make a request, email support@getjosie.com. We will verify your request before acting on it.

Children

Josie is a service for businesses and is not directed to children under 13. We don't knowingly collect personal information from children under 13.

Where we process information

Josie is offered to businesses in the United States, and we store and process information in the United States.

Changes to this policy

We will post any changes here and update the date at the top. If a change is significant, we will tell customers by email or in the app before it takes effect.

Contact us

Questions about this policy: support@getjosie.com, or write to [Company legal name], [mailing address].