Privacy Policy

Last updated: May 2, 2026

This Privacy Policy describes how GoJumba: AI Receptionist ("we", "us", or "our") collects, uses, and shares information when you use the GoJumba mobile application and related backend services (the "Service"). By creating an account or using the Service, you agree to the collection and use of information as described here.

1. Information we collect

Information you provide

• Account details — name, email address, password (stored as a one-way bcrypt hash; we never see your plaintext password).
• Business profile — business name, hours of operation, the AI receptionist's voice settings, transfer phone numbers, FAQs, and other configuration you provide.
• Payment information — billing address and payment method, collected and stored by our payment processor Stripe. We do not store full card numbers on our own servers.
• Communications — messages you send to support and any feedback you provide.

Information collected automatically

• Phone numbers — phone numbers you purchase through us via Twilio, and the caller IDs of inbound calls to those numbers.
• Call data — date, duration, caller number, recordings (when applicable), AI-generated transcripts, captured messages, and appointments booked during the call.
• Device and push tokens — operating system, app version, and APNs/Expo push token so we can deliver notifications.
• Usage data — number of calls handled, minutes used, features accessed. Used for billing and to enforce plan limits.
• Logs — server logs that may include IP addresses and user agents for debugging, fraud prevention, and security.

Information about your callers

When someone calls a phone number you have set up through GoJumba, we process their phone number, the audio of the call, and any information they provide (name, callback number, reason for calling, appointment details). This information is processed on your behalf to deliver the receptionist service. You are responsible for any disclosures or consents required by law in your jurisdiction (e.g., two-party-consent states).

2. How we use information

• Provide and operate the Service (answer calls, transcribe, route, take messages, book appointments).
• Process payments and enforce subscription plan limits.
• Send transactional messages: email verification, password reset, billing receipts, push notifications about new messages or appointments.
• Improve and troubleshoot the Service. We do not use your call recordings or transcripts to train AI models that benefit other customers.
• Detect and prevent fraud, abuse, and security incidents.
• Comply with applicable law, lawful requests from authorities, and our legal obligations.

3. How we share information

We share information only with vendors necessary to deliver the Service, and only the data each vendor needs to do its job. Each vendor below has its own privacy practices linked.

Vendor	Purpose	Privacy Policy
Stripe	Payments & billing	stripe.com/privacy
Twilio	Phone numbers, voice calls, call recording	twilio.com/legal/privacy
OpenAI	AI conversation processing during calls	openai.com/policies/privacy-policy
ElevenLabs	Text-to-speech voice synthesis	elevenlabs.io/privacy
Resend	Transactional email delivery	resend.com/legal/privacy-policy
Expo	Push notification delivery	expo.dev/privacy
Render	Application hosting	render.com/privacy
Neon	Database hosting (PostgreSQL)	neon.com/privacy-policy
Upstash	Cache & queue hosting (Redis)	upstash.com/trust/privacy.pdf
Sentry	Error tracking & performance monitoring	sentry.io/privacy

We may also disclose information when required by law (subpoena, court order, regulator request) or to protect the safety, rights, or property of our users or others.

We do not sell your personal information, and we do not share it with third parties for their own marketing.

4. Call recording and AI processing

The GoJumba AI receptionist answers and processes inbound phone calls in real time. Audio is streamed through Twilio, transcribed, and processed by OpenAI for the duration of the call. Recordings and transcripts may be retained so you can review past calls in the app.

Call recording laws vary by jurisdiction. You are responsible for ensuring callers receive any required disclosure or consent for recording. The AI's default greeting can be configured to include a recording disclosure if needed for your state or country.

5. Data retention

• Account information — retained while your account is active. After deletion, we retain billing records and audit logs as required by tax and legal obligations (typically 7 years).
• Call recordings and transcripts — retained while your account is active so you can review past calls. You can delete individual call records from the app.
• Backups — encrypted backups are retained on a rolling 30-day window.

6. Security

We use industry-standard practices to protect your data: TLS encryption in transit, encryption at rest in our hosted databases, bcrypt-hashed passwords, JWT-based authentication with revocation, rate limiting, and audit logging. No system is perfectly secure, however, and we cannot guarantee absolute security.

7. Your rights

Depending on where you live, you may have the right to:

• Access the personal information we hold about you.
• Correct inaccurate information.
• Delete your account and associated data.
• Receive a copy of your data in a portable format.
• Opt out of the sale or sharing of personal information (we do not sell or share personal information for cross-context advertising).
• Be free from discrimination for exercising any of the above rights.

To exercise any of these rights, email us at privacy@gojumba.com. We will respond within 30 days.

8. Children

GoJumba is intended for businesses and is not directed at children under 16. We do not knowingly collect personal information from children. If we become aware that a child has provided us with personal information, we will delete it.

9. Changes to this Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top. For material changes, we will provide additional notice (such as an email or in-app notification) before the change takes effect.

10. Contact us

If you have questions about this Privacy Policy or our handling of your data, contact us at:

• Email: privacy@gojumba.com
• Mail: Address available upon request via privacy@gojumba.com