Privacy Policy

Jonie AI, Inc. ("Jonie," "we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered voice agent services (the "Service").

By using our Service, you agree to the collection and use of information in accordance with this Privacy Policy.

1. Information We Collect

1.1 Personal Information

When you interact with our Service, we may collect:

• Contact Information: Name, phone number, email address, mailing address
• Reservation & Order Information: Party size, date/time preferences, special requests, menu selections, delivery addresses
• Payment Information: We do not store complete credit card numbers. Payment processing is handled by third-party processors (Stripe). We may retain the last 4 digits and card type for reference purposes only.
• Communication Preferences: Preferred contact methods, language preferences

1.2 Voice Call Recording and Transcription

IMPORTANT: ALL CALLS WITH OUR AI AGENT ARE RECORDED AND TRANSCRIBED.

When you call a restaurant using our Service:

• Recording Notice: You will hear a notice that the call is being recorded at the beginning of each call
• Purpose: Call recordings and transcriptions are used for quality assurance, training our AI models, resolving disputes, and compliance with legal obligations
• Consent: By continuing the call after hearing the recording notice, you consent to being recorded. If you do not consent, please hang up immediately.
• Two-Party Consent States: If you are calling from California, Connecticut, Florida, Illinois, Maryland, Massachusetts, Michigan, Montana, Nevada, New Hampshire, Pennsylvania, or Washington, your continued participation in the call after the recording notice constitutes your express consent to recording.
• Biometric Data: We do NOT collect, extract, or store biometric identifiers such as voiceprints or facial recognition data.
• Retention: Call recordings are retained for 90 days for quality assurance purposes, and up to 2 years for legal compliance and dispute resolution.

1.3 Automatically Collected Information

We automatically collect certain information when you use our Service:

• Call Metadata: Phone numbers (caller and called), call duration, call date/time, call outcome (completed, transferred, failed)
• Device Information: Device type, operating system, browser type (for web chat interactions)
• Usage Data: Features used, interaction patterns, response times, success/failure rates
• IP Addresses: For fraud prevention and security purposes

1.4 Information from Third Parties

We may receive information from:

• Reservation Systems: OpenTable, Resy, Yelp Reservations (existing reservation history, customer preferences)
• Point of Sale Systems: Toast, Clover, Square (order history, customer preferences)
• Restaurant Partners: Customer information they provide to facilitate service delivery

2. How We Use Your Information

We use the information we collect to:

• Provide Service: Process reservations, orders, answer questions, provide customer support
• Improve AI Performance: Train and improve our AI models, enhance conversation quality, reduce errors
• Business Operations: Analyze usage patterns, conduct research, develop new features
• Communications: Send confirmation messages, service updates, respond to inquiries
• Legal Compliance: Comply with legal obligations, enforce our Terms of Service, protect rights and safety
• Fraud Prevention: Detect and prevent fraudulent activity, abuse, or security incidents

2.1 AI Training

Call recordings and transcriptions may be used to train and improve our AI models. This helps us:

• Understand diverse accents and speech patterns
• Improve response accuracy and relevance
• Reduce errors and misunderstandings
• Enhance natural conversation flow

You may opt out of having your data used for AI training by contacting us at privacy@jonie.ai. Opting out will not affect your ability to use the Service.

2.2 Anonymization

When possible, we anonymize or de-identify data used for analytics and research purposes.

3. How We Share Your Information

3.1 With Restaurant Partners

Information you provide during interactions is shared with the restaurant you contact to fulfill your reservation, order, or inquiry.

3.2 With Service Providers

We share information with trusted third-party service providers who assist us in operating our Service:

• Telephony Infrastructure: Telnyx (call routing, phone numbers)
• Voice Synthesis: ElevenLabs (text-to-speech generation)
• AI Models: OpenAI and/or Anthropic (natural language processing)
• Cloud Hosting: Amazon Web Services (AWS) (data storage and processing)
• Payment Processing: Stripe (payment transactions)
• Reservation Systems: OpenTable, Resy, Yelp Reservations (reservation management)
• Point of Sale Systems: Toast, Clover, Square (order management)
• Integration Middleware: Stream API (POS integration connectivity)

These providers are contractually obligated to protect your information and use it only for the purposes we specify.

3.3 For Legal Reasons

We may disclose your information when required by law or to:

• Comply with legal process (subpoenas, court orders)
• Enforce our Terms of Service
• Protect our rights, property, or safety
• Protect the rights, property, or safety of others
• Investigate fraud or security issues

3.4 Business Transfers

If Jonie is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

3.5 With Your Consent

We may share information for other purposes with your explicit consent.

3.6 We Do NOT Sell Your Information

We do not sell, trade, or rent your personal information to third parties for their marketing purposes.

4. Data Security

We implement reasonable security measures to protect your information:

• Encryption: Data in transit is encrypted using TLS 1.3 or higher. Data at rest is encrypted using AES-256 encryption.
• Access Controls: Strict access controls limit who can access your information
• Authentication: Multi-factor authentication for employee access to systems
• Monitoring: Regular security audits and monitoring for suspicious activity
• PCI DSS Compliance: Our payment processing partners are PCI DSS compliant

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

4.1 Data Breach Notification

In the event of a data breach that affects your personal information, we will notify you and relevant authorities as required by law and in accordance with state data breach notification laws.

5. Your Privacy Rights

5.1 Access and Portability

You have the right to:

• Access the personal information we hold about you
• Request a copy of your information in a portable format

5.2 Correction and Deletion

You have the right to:

• Correct inaccurate or incomplete information
• Request deletion of your personal information (subject to legal retention requirements)

5.3 Opt-Out Rights

You have the right to opt out of:

• Having your call recordings used for AI training purposes
• Receiving marketing communications (you will still receive transactional messages)
• Data sharing with certain third parties (where applicable)

5.4 California Residents (CCPA/CPRA)

If you are a California resident, you have additional rights:

• Right to Know: Request disclosure of categories and specific pieces of personal information collected
• Right to Delete: Request deletion of personal information
• Right to Opt-Out of Sale: We do not sell personal information, but you may still submit a "Do Not Sell My Personal Information" request
• Right to Non-Discrimination: We will not discriminate against you for exercising your rights
• Shine the Light: Request information about personal information disclosed to third parties for direct marketing

To exercise these rights, contact us at privacy@jonie.ai.

5.5 Verifying Your Identity

To protect your privacy and security, we may require verification of your identity before fulfilling your request. We will respond to verified requests within:

• 45 days for CCPA requests (with possible 45-day extension if needed)

6. AI-Specific Disclosures

6.1 Automated Decision-Making

Our Service uses artificial intelligence to:

• Understand and respond to your requests
• Process reservations and orders
• Route calls appropriately
• Provide information

While our AI strives for accuracy, it may make mistakes. You always have the right to:

• Request human assistance
• Correct errors
• Escalate concerns

6.2 AI Limitations and Disclaimers

Our AI agent:

• May misunderstand requests, especially in noisy environments or with unclear speech
• May provide inaccurate information if restaurant data is outdated
• Cannot provide medical, legal, or financial advice
• Cannot handle all customer service scenarios (complex complaints may be escalated)
• Improves over time through machine learning

6.3 Human Review

Call recordings may be reviewed by human quality assurance personnel for training and improvement purposes.

7. Data Retention

We retain your information for as long as necessary to provide our Service and comply with legal obligations:

After retention periods expire, we will delete or anonymize your information unless longer retention is required by law.

8. Children's Privacy

Our Service is not intended for children under 13. We do not knowingly collect personal information from children. If you are a parent or guardian and believe your child has provided us with personal information, please contact us at privacy@jonie.ai and we will delete such information.

9. SMS Communications

If you opt in to receive SMS communications from us or the restaurants we serve:

• Consent: By checking the SMS consent checkbox on our website forms and providing your mobile number, you expressly consent to receive text messages from Jonie AI. This checkbox-based consent is required before we send you any SMS communications.
• Types of Messages: Reservation confirmations, order updates, appointment reminders, notifications, and service-related communications
• Opt-Out: Reply STOP to any message to unsubscribe from SMS communications at any time
• Help: Reply HELP for assistance or contact support@jonie.ai
• Frequency: Message frequency varies based on your activity
• Charges: Message and data rates may apply based on your mobile carrier's plan
• No Purchase Required: Consent to SMS is not a condition of purchase or using our services
• Consent Records: We maintain records of your SMS consent, including the date, time, and method of consent (website checkbox)

We comply with the Telephone Consumer Protection Act (TCPA) and will not send SMS messages without your express written consent obtained through our website consent checkbox.

10. Data Storage and Processing

Jonie is based in the United States. All information collected through our Service is stored and processed in the United States, in accordance with United States data protection laws.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we make changes:

• We will post the updated policy on our website
• We will update the "Last Updated" date
• For material changes, we will provide notice via email or prominent notice on our Service
• Your continued use of the Service after changes constitutes acceptance of the updated policy

We encourage you to review this Privacy Policy periodically.

12. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our privacy practices:

Email: privacy@jonie.ai

Support: support@jonie.ai

Legal Inquiries: legal@jonie.ai

Address: 205 Hudson St., 7th Floor, New York, NY 10013

13. State-Specific Disclosures

13.1 California Residents

In addition to the CCPA/CPRA rights described in Section 5.4, California residents should note:

Categories of Personal Information Collected:

• Identifiers (name, phone, email, address)
• Commercial information (reservation/order history)
• Audio recordings (call recordings)
• Internet/electronic activity (usage data, IP addresses)
• Inferences (preferences, tendencies)

Business Purposes for Collection:

• Providing and improving our Service
• Customer support and communications
• Analytics and research
• Legal compliance and fraud prevention

Categories of Third Parties with Whom We Share:

• Service providers (as listed in Section 3.2)
• Restaurant partners
• Professional advisors
• Government entities (when required by law)

Sensitive Personal Information: We do not collect government identifiers (SSN, driver's license), precise geolocation, financial account credentials, genetic data, biometric data (voiceprints), health information, or information about sexual orientation or religious beliefs.

Data Retention: See Section 7 for specific retention periods by data type.

Right to Limit Use of Sensitive Personal Information: As we do not collect or use sensitive personal information, this right does not apply.

13.2 Nevada Residents

Nevada residents have the right to opt out of the sale of certain covered information. We do not sell covered information as defined under Nevada law. If you still wish to submit an opt-out request, contact privacy@jonie.ai.

13.3 Virginia, Colorado, Connecticut, and Utah Residents

Residents of Virginia, Colorado, Connecticut, and Utah have the right to:

• Confirm whether we process your personal data and access such data
• Correct inaccuracies in your personal data
• Delete personal data you provided
• Obtain a copy of your personal data in a portable format

To exercise these rights, contact privacy@jonie.ai.

14. Accessibility

We are committed to making our Privacy Policy accessible to individuals with disabilities. If you need this policy in an alternative format, please contact support@jonie.ai.

© 2026 Jonie AI, Inc. All rights reserved.