Privacy Policy

Last updated: May 16, 2026

This Privacy Policy describes how GoJumba: AI Receptionist ("we", "us", or "our") collects, uses, and shares information when you use the GoJumba mobile application and related backend services (the "Service"). By creating an account or using the Service, you agree to the collection and use of information as described here.

1. Information we collect

Information you provide

• Account details — name, email address, password (stored as a one-way bcrypt hash; we never see your plaintext password).
• Sign-in provider details — if you use Sign in with Apple or Google Sign-In, we process the provider user ID, verified email address, and name details the provider shares with us.
• Business profile — business name, hours of operation, the AI receptionist's voice settings, transfer phone numbers, FAQs, and other configuration you provide.
• Payment information — billing address and payment method, collected and stored by our payment processors, such as Apple for in-app purchases and Stripe for web billing. We do not store full card numbers on our own servers.
• Connected calendar information — if you connect Google Calendar, we store the Google account email, OAuth tokens, granted scopes, token expiration, and basic calendar configuration needed to create appointment events.
• Communications — messages you send to support and any feedback you provide.

Information collected automatically

• Phone numbers — phone numbers you purchase through us via Twilio, and the caller IDs of inbound calls to those numbers.
• Call data — date, duration, caller number, recordings (when applicable), AI-generated transcripts, captured messages, and appointments booked during the call.
• Device and push tokens — operating system, app version, and APNs/Expo push token so we can deliver notifications.
• Usage data — number of calls handled, minutes used, features accessed. Used for billing and to enforce plan limits.
• Logs — server logs that may include IP addresses and user agents for debugging, fraud prevention, and security.

Information about your callers

When someone calls a phone number you have set up through GoJumba, we process their phone number, the audio of the call, and any information they provide (name, callback number, reason for calling, appointment details). This information is processed on your behalf to deliver the receptionist service. You are responsible for any disclosures or consents required by law in your jurisdiction (e.g., two-party-consent states).

2. How we use information

• Provide and operate the Service (answer calls, transcribe, route, take messages, book appointments).
• Create and secure your account, including signing you in with email/password, Sign in with Apple, or Google Sign-In.
• Create appointment events in your connected Google Calendar when you choose to enable calendar sync.
• Process payments and enforce subscription plan limits.
• Send transactional messages: email verification, password reset, billing receipts, push notifications about new messages or appointments, and caller follow-up SMS when enabled.
• Improve and troubleshoot the Service, including optional AI Coach suggestions based on limited tenant-scoped setup and recent-call context. We do not use your call recordings, transcripts, or Google Calendar data to train AI models that benefit other customers.
• Detect and prevent fraud, abuse, and security incidents.
• Comply with applicable law, lawful requests from authorities, and our legal obligations.

3. How we share information

We share information only with vendors necessary to deliver the Service, and only the data each vendor needs to do its job. Each vendor below has its own privacy practices linked.

Vendor	Purpose	Privacy Policy
Apple	Sign in with Apple, in-app purchases, and subscription billing	apple.com/legal/privacy
Stripe	Web payments & billing	stripe.com/privacy
Twilio	Phone numbers, voice calls, call recording	twilio.com/legal/privacy
OpenAI	AI conversation processing during calls	openai.com/policies/privacy-policy
ElevenLabs	Text-to-speech voice synthesis	elevenlabs.io/privacy
Google Calendar	Optional calendar connection and appointment event creation	policies.google.com/privacy
Google Sign-In	Optional account signup and login with a Google account	policies.google.com/privacy
Resend	Transactional email delivery	resend.com/legal/privacy-policy
Expo	Push notification delivery	expo.dev/privacy
Render	Application hosting	render.com/privacy
Neon	Database hosting (PostgreSQL)	neon.com/privacy-policy
Upstash	Cache & queue hosting (Redis)	upstash.com/trust/privacy.pdf
Private object storage provider	Private storage and playback of call recordings when recording storage is enabled	Provider-specific privacy policy, depending on deployment
Sentry	Error tracking & performance monitoring	sentry.io/privacy
Google Analytics	Website traffic analytics	policies.google.com/privacy

We may also disclose information when required by law (subpoena, court order, regulator request) or to protect the safety, rights, or property of our users or others.

We do not sell your personal information, and we do not share it with third parties for their own marketing.

4. Call recording and AI processing

The GoJumba AI receptionist answers and processes inbound phone calls in real time. Audio is streamed through Twilio, synthesized through ElevenLabs, transcribed, and processed by OpenAI for the duration of the call. Recordings and transcripts may be retained so you can review past calls in the app.

Call recording laws vary by jurisdiction. You are responsible for ensuring callers receive any required disclosure or consent for recording. The AI's default greeting can be configured to include a recording disclosure if needed for your state or country.

5. Google Calendar data

If you connect Google Calendar, GoJumba uses the access you grant only to create and manage appointment events for your receptionist-booked appointments. We store the connected Google account email, OAuth tokens, scopes, token expiration, and calendar configuration needed to provide the integration.

Calendar event data we send may include appointment time, caller name or phone number, appointment notes, lead-type answers, and service address if captured during the call. We do not use Google Calendar data for advertising, do not sell it, and do not use it to train AI models. Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

You can disconnect Google Calendar in the app. Disconnecting deletes stored Google Calendar credentials from GoJumba and stops future syncs, but it does not remove events already created in your calendar.

6. Data retention

• Account information — retained while your account is active. After deletion, we retain billing records and audit logs as required by tax and legal obligations (typically 7 years).
• Call transcripts and related call content — retained while your account is active so you can review past calls. You can request deletion of call records by contacting support.
• Google Calendar credentials — retained while the integration is connected. They are deleted when you disconnect Google Calendar or delete your account.
• Backups — encrypted backups are retained on a rolling 30-day window.

7. Security

We use industry-standard practices to protect your data: TLS encryption in transit, encryption at rest in our hosted databases, bcrypt-hashed passwords, JWT-based authentication with revocation, rate limiting, and audit logging. No system is perfectly secure, however, and we cannot guarantee absolute security.

8. Your rights

Depending on where you live, you may have the right to:

• Access the personal information we hold about you.
• Correct inaccurate information.
• Delete your account and associated data.
• Receive a copy of your data in a portable format.
• Opt out of the sale or sharing of personal information (we do not sell or share personal information for cross-context advertising).
• Be free from discrimination for exercising any of the above rights.

To exercise any of these rights, email us at privacy@gojumba.com. We will respond within 30 days.

9. Children

GoJumba is intended for businesses and is not directed at children under 16. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal information, we will delete it.

10. Changes to this Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top. For material changes, we will provide additional notice (such as an email or in-app notification) before the change takes effect.

11. Contact us

If you have questions about this Privacy Policy or our handling of your data, contact us at:

• Email: privacy@gojumba.com
• Mail: Address available upon request via privacy@gojumba.com