This Privacy Policy describes how Jozie AI Inc. ("Jozie AI", "we", "us", or "our") collects, uses, and protects information when you use the Companions platform and related services (collectively, the "Service"). By accessing or using the Service, you agree to the practices described in this Privacy Policy.
1. Who We Are
Jozie AI Inc. is a technology company that provides AI-powered business assistant tools under the Companions brand. Our platform enables businesses to deploy AI assistants for email management, appointment booking, and customer support. For questions about this policy, please contact us at privacy@jozieai.com.
2. Information We Collect
2.1 Information You Provide
When you create an account or use the Service, we may collect:
- Account information: First name, last name, email address, and password (stored as a salted hash).
- Profile information: Any updates you make to your profile, including display name.
- Assistant configuration: Personality prompts, knowledge base content, email credentials (IMAP/SMTP), calendar settings, and widget customization preferences you configure for your AI assistants.
- Communications: Emails, chat messages, and appointment data processed through your configured AI assistants.
- Payment information: If applicable, billing details are processed by our third-party payment processor and are not stored on our servers.
2.2 Information Collected Automatically
When you use the Service, we automatically collect:
- Log data: IP address, browser type, operating system, pages visited, timestamps, and referring URLs.
- Usage data: Features used, assistant interactions, session duration, and performance metrics.
- Authentication tokens: JSON Web Tokens (JWT) used to maintain your session, stored locally in your browser.
2.3 Information from Third Parties
When you connect third-party services to the platform (such as email providers or calendar services), we receive only the data necessary to provide the requested functionality. We do not use this data for advertising or profiling purposes.
3. How We Use Your Information
We use the information we collect to:
- Provide, operate, and maintain the Service and your AI assistants.
- Process and deliver the automated email replies, appointment bookings, and customer support interactions you configure.
- Authenticate your identity and maintain the security of your account, including TOTP two-factor authentication.
- Improve and personalize the Service based on usage patterns and feedback.
- Communicate with you about your account, updates, security alerts, and support requests.
- Detect, investigate, and prevent fraudulent activity, abuse, or violations of our Terms of Service.
- Comply with legal obligations.
We do not use your data to train AI models that are made available to other users or the public. Your knowledge base content and conversation data are used solely to operate your own assistants.
4. Data Sharing and Disclosure
We do not sell, rent, or trade your personal information to third parties for their marketing purposes. We may share information in the following limited circumstances:
- Service providers: We work with trusted third-party vendors (such as cloud hosting, database, and AI inference providers) who process data on our behalf under strict confidentiality obligations.
- Legal requirements: We may disclose your information if required by law, court order, or government authority, or where we believe disclosure is necessary to protect our legal rights, prevent fraud, or protect the safety of any person.
- Business transfers: If Jozie AI Inc. is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you before your information becomes subject to a different privacy policy.
- With your consent: We may share your information for any other purpose with your explicit consent.
5. Data Retention
We retain your personal information for as long as your account is active or as needed to provide the Service. Specifically:
- Account data is retained until you delete your account.
- Email, chat, and appointment data processed by your assistants is retained for as long as you maintain the relevant assistant configuration.
- Auto-reply logs and support session history are retained for up to 12 months by default, after which they may be archived or deleted.
- Log data is retained for up to 90 days for security and operational purposes.
You may request deletion of your data at any time by contacting privacy@jozieai.com.
6. Security
We take the security of your information seriously and implement industry-standard measures including:
- Password hashing using bcrypt with salting — passwords are never stored in plaintext.
- JSON Web Token (JWT) based authentication with configurable expiration.
- TOTP-based two-factor authentication available for all accounts.
- HTTPS (TLS) encryption for all data in transit.
- Multi-tenant data isolation — your data is logically separated from other users at the database level.
- Third-party email credentials are stored with encryption and are never returned to the frontend.
While we take these steps to protect your information, no security system is impenetrable. We encourage you to use a strong, unique password and enable two-factor authentication.
7. Cookies and Tracking
The Service uses the following forms of local storage and tracking:
- localStorage: We use your browser's localStorage to store your authentication token and user profile data to maintain your session. This data is stored on your device and is not a cookie.
- sessionStorage: The embeddable chat widgets use sessionStorage to maintain the current conversation session within a browser tab.
- Essential cookies: We may use strictly necessary session cookies for security purposes.
We do not use advertising cookies, cross-site tracking pixels, or behavioral advertising technologies.
8. Third-Party Services
The Service integrates with the following categories of third-party services:
- AI inference providers: To power the AI responses generated by your assistants. Prompts and responses may be transmitted to these providers. We select providers with appropriate data processing agreements.
- Email providers: IMAP/SMTP services you configure — we access only the email account you explicitly connect.
- Font and CDN services: Google Fonts (for typography) and jsDelivr (for open-source JavaScript libraries). These services may set their own cookies.
We are not responsible for the privacy practices of third-party services. We encourage you to review their privacy policies.
9. Your Rights
Depending on your location, you may have the following rights regarding your personal information:
- Access: Request a copy of the personal information we hold about you.
- Correction: Update inaccurate or incomplete information via your Account Settings.
- Deletion: Request deletion of your account and associated data.
- Portability: Request your data in a structured, machine-readable format.
- Objection: Object to certain processing of your personal information.
- Restriction: Request that we restrict processing of your data in certain circumstances.
- Withdraw consent: Where processing is based on consent, you may withdraw consent at any time.
To exercise any of these rights, contact us at privacy@jozieai.com. We will respond within 30 days. If you are in the EU/EEA, you also have the right to lodge a complaint with your local data protection authority.
10. Children's Privacy
The Service is not directed to individuals under the age of 16. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately at privacy@jozieai.com and we will delete it.
11. International Data Transfers
Jozie AI Inc. is based in the United States. If you access the Service from outside the United States, your information may be transferred to, stored, and processed in the United States or other countries where our service providers operate. These countries may have data protection laws different from those in your country. By using the Service, you consent to such transfers. Where required by applicable law, we ensure appropriate safeguards are in place.
12. Changes to This Policy
We may update this Privacy Policy from time to time. When we make material changes, we will notify you by updating the "Last updated" date at the top of this policy and, where appropriate, by sending an email notification to the address associated with your account. Your continued use of the Service after the effective date of any changes constitutes your acceptance of the revised policy.
13. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: