Version 1.2 · Effective August 2, 2026

Jono Privacy Policy

Version 1.2 | Effective Date: August 2, 2026

1. Introduction

At Jono, we believe trust is earned. Businesses trust us with an important part of their relationship with customers, and we take that responsibility seriously. We believe artificial intelligence should help businesses build better relationships with customers—not replace transparency, trust or human judgment.

This Privacy Policy explains how Jono, Inc. ("Jono", "we", "us" or "our") collects, uses, discloses, retains and protects personal information when people visit our website, create or use a Jono account, communicate with us, or interact with a business through Jono.

2. Who We Are

Jono, Inc. is a Delaware corporation that provides an AI-powered communications platform designed to help businesses respond to missed calls and manage customer inquiries.

• "Business Customer" means a business or organization that uses the Services.
• "End Caller" means an individual who calls or communicates with a Business Customer through the Services.
• "Services" means Jono's website, software, AI assistant, missed-call detection, messaging, hosted recap and callback features, account and payment functionality, and related services.

3. How Jono Fits In

When an End Caller's call is missed, Jono may send a service-related message and facilitate a conversation on behalf of the relevant Business Customer. During that interaction, the End Caller may communicate with an AI assistant provided by Jono on behalf of the Business Customer.

The AI assistant may help understand the request, collect relevant information and prepare a summary for the Business Customer. Jono facilitates the communication but does not provide the Business Customer's underlying services, set its prices, guarantee its availability, or make professional or commercial decisions for it.

For information processed principally to provide the Services at a Business Customer's direction, the Business Customer generally determines why the information is processed and Jono acts as its service provider or processor. Jono may separately determine how limited information is processed for its own legitimate purposes, including account administration, billing, security, fraud prevention, legal compliance and maintaining the reliability of the platform.

4. Scope

This Privacy Policy applies when you:

• visit a Jono website or hosted page;
• create, verify or use a Jono account;
• communicate with Jono;
• interact with a Business Customer through Jono; or
• otherwise use the Services.

This Privacy Policy does not govern a Business Customer's independent privacy practices or any third-party website or service that operates independently of Jono.

5. Information We Collect

5.1 Business and account information

• business name, category, contact details and verified phone number;
• account credentials, one-time-code verification records and authorized-user information;
• service areas, offered services, exclusions, preferences and other business configuration;
• subscription, pilot-code, billing and transaction administration information; and
• information provided in support requests or other communications with Jono.

5.2 End Caller and conversation information

• telephone number and, when provided, name;
• message content and conversation history;
• the nature of the request, urgency, location, availability and other information voluntarily provided;
• conversation summaries and related records;
• call and message metadata, such as timestamps and provider identifiers; and
• whether a hosted recap or callback link was opened or selected.

Please do not submit sensitive personal information unless it is genuinely necessary for an approved interaction. Regulated professionals may use Jono only for administrative communications and initial intake, subject to Jono's approval and restrictions. Jono is not designed to provide professional advice, handle emergencies, make eligibility or other high-impact decisions, determine insurance coverage or claims, perform underwriting, or create a professional-client relationship. Business Customers must not configure Jono to request protected characteristics for housing decisions or sensitive information beyond what is reasonably necessary for approved initial intake.

5.3 Technical and usage information

• IP address and browser or device information, where collected;
• cookie, local-storage and similar technology information;
• security, diagnostic and application logs;
• usage events, page interactions and service-performance information; and
• consent, opt-out and suppression records.

5.4 Payment information

Payment and subscription transactions are processed by Stripe. Jono receives limited billing information, such as payment status, plan, transaction identifiers and portions of payment-method information, but does not directly store full payment-card numbers.

6. How We Use Information

6.1 Providing the Services

• create and manage accounts;
• verify phone-number ownership and maintain authenticated sessions;
• detect missed calls and facilitate service-related communications;
• operate the AI assistant and generate conversation summaries;
• deliver conversation summaries, related information and hosted pages to Business Customers and End Callers; and
• provide support and maintain Business Customer configurations.

6.2 Operating, evaluating and improving Jono

• monitor performance, reliability and service quality;
• troubleshoot errors and prevent misuse;
• evaluate the quality of conversations and summaries;
• improve the experience for a particular Business Customer, including through human-approved configuration changes;
• develop and test features using synthetic, aggregated or otherwise appropriately protected information where practicable; and
• produce internal statistics and business reporting using aggregated, anonymized or de-identified information where appropriate.

Jono does not use identifiable Business Customer or End Caller conversations to train or improve Jono or third-party AI models. Jono may review an identifiable conversation only as reasonably necessary to operate, support, secure, troubleshoot or evaluate the Services for the same Business Customer, including to make Jono-approved prompt or configuration changes for that customer. Broader product or service improvement uses synthetic, aggregated, anonymized or de-identified information that does not identify a Business Customer or individual.

6.3 Security, compliance and corporate administration

• protect accounts, systems and communications;
• detect and investigate fraud, abuse and security incidents;
• administer subscriptions and corporate records;
• comply with legal obligations and lawful requests; and
• establish, exercise or defend legal claims.

6.4 Service-related communications

Jono may send an End Caller one immediate, service-related SMS after a missed call on behalf of the relevant Business Customer. If the caller confirms the request, Jono may send one immediate recap. Jono does not send reminder sequences, feedback requests, service-quality messages or promotional marketing to End Callers. Business Customers may receive verification codes, account notices, new-inquiry alerts and other operational messages. End Callers may opt out by replying STOP, STOPALL, UNSUBSCRIBE, CANCEL, END or QUIT, or by using another legally valid opt-out method. Jono sends one confirmation and then suppresses further outbound messages to that number across all Business Customers by default. A service interaction does not authorize unrelated promotional marketing.

7. Legal Bases for Processing

Where the GDPR, UK GDPR or a similar law applies, we rely on one or more of the following legal bases:

• performance of a contract or steps requested before entering into a contract;
• the legitimate interests of Jono, a Business Customer or another party, provided those interests are not overridden by individual rights;
• compliance with a legal obligation;
• consent, where the law requires consent; and
• protection of vital interests in limited circumstances.

8. Artificial Intelligence and Automated Processing

Jono currently uses Anthropic's Claude models through Anthropic's commercial API to understand messages, generate responses, extract relevant details, create summaries and perform passive internal quality scoring. Anthropic's commercial API terms and policies state that API inputs and outputs are not used to train its models by default. Under Anthropic's standard API retention, inputs and outputs are generally deleted from its systems within 30 days, subject to stated exceptions for legal, safety and abuse-prevention needs. Jono does not use a zero-data-retention arrangement. Jono may change AI providers or models over time and will update this Policy where a change materially affects the practices described here. AI-generated content may be incomplete, inaccurate or inappropriate. Business Customers remain responsible for reviewing information where appropriate and for all decisions concerning their services, pricing, availability and customers.

Jono does not use automated decision-making that produces legal or similarly significant effects about End Callers. The Services are intended to facilitate communication and the collection and structuring of caller requests, not to determine eligibility for employment, credit, insurance, housing, healthcare or other high-impact decisions.

9. When We Share Information

We do not sell personal information. We may disclose information to:

• the relevant Business Customer and its authorized users;
• communications and telecommunications providers;
• AI service providers;
• hosting, database, security and technical-infrastructure providers;
• Stripe and other payment, billing and fraud-prevention providers;
• professional advisers, insurers and auditors;
• a buyer, investor or successor in connection with a corporate transaction; and
• courts, regulators, law-enforcement bodies or other parties when legally required or reasonably necessary to protect rights, safety and security.

Service providers are permitted to process information only for authorized purposes and are expected to protect it in accordance with contractual and legal requirements.

10. International Transfers

Jono's principal application and database infrastructure is hosted in the European Union. Some providers, including communications and AI providers, may process information in the United States or other countries. Where required, Jono uses recognized safeguards for international transfers, such as adequacy decisions, standard contractual clauses or other lawful transfer mechanisms.

11. Retention and Deletion

Jono applies the following standard retention periods unless a longer period is required by law, legal hold, dispute, security need or written agreement. The periods below apply to information held in Jono's own systems; retention by our service providers is governed by our contracts with them and their published terms.

• Full SMS conversations: 90 days, then deleted or irreversibly anonymized.
• AI summaries and related conversation records: 12 months, or earlier upon an applicable customer deletion request.
• Call and message metadata: 12 months.
• Business account information and configuration: for the account term plus 90 days.
• Security and application logs: 12 months.
• Website analytics identifiers and event data: up to 14 months, subject to consent choices and provider controls.
• Billing and transaction records: 7 years.
• Support communications: 3 years.
• Opt-out and suppression records: for as long as reasonably necessary to prevent further messages.
• Deleted information in backups: removed through ordinary backup cycles within 90 days.

Where deletion is required, information may remain in protected backups until removed through the cycle stated above. Irreversibly anonymized information may be retained because it no longer identifies an individual. Jono may preserve information for a legal hold, security investigation, dispute or other lawful requirement and will limit the information to that purpose.

12. Security

Jono uses reasonable technical and organizational measures designed to protect personal information, including access controls, authentication, encrypted connections, vendor security controls, logging and incident-response practices appropriate to Jono's size and risk profile. No method of transmission or storage is completely secure, and Jono cannot guarantee absolute security.

13. Your Privacy Rights

Depending on your location, you may have rights to access, correct, delete, restrict or object to processing, obtain a portable copy of certain information, or withdraw consent. You may also have the right to appeal a decision or complain to a privacy regulator.

End Caller information is often processed on behalf of a Business Customer. Jono may therefore ask the relevant Business Customer to assist with or respond to a request. We may verify identity and authority before acting on a request.

Submit privacy requests or appeals to privacy@jono.team. We may ask for information reasonably necessary to verify your identity and authority. Where permitted by law, an authorized agent may submit a request on your behalf, but we may require proof of authorization and direct verification with you. If we deny an appeal, eligible residents may contact their state attorney general or other regulator as provided by applicable law.

14. United States State Privacy Disclosures

This Policy describes the categories of personal information Jono collects, the sources from which it is collected, the business and commercial purposes for collection and use, and the categories of recipients to which it is disclosed. Depending on applicable state law, eligible residents may request confirmation, access, correction, deletion or portability and may opt out of targeted advertising, sale, certain sharing or qualifying profiling. Jono does not sell personal information, does not use personal information for targeted advertising, and does not share personal information for cross-context behavioral advertising as those terms are defined by applicable law. Jono does not use sensitive personal information to infer characteristics about individuals. Where legally required and technically applicable, Jono honors recognized opt-out preference signals such as Global Privacy Control. Jono will not discriminate against a person for exercising an applicable privacy right.

15. Cookies and Similar Technologies

Jono uses strictly necessary session and payment-security technologies and, subject to legally required consent, Google Analytics and Mixpanel for website and product analytics. Jono provides a cookie banner and preference controls where required. See the Jono Cookie Notice for the current inventory and choices.

16. Children's Privacy

The Services are intended for businesses and are not directed to children under 13. Jono does not knowingly collect personal information directly from children under 13. If we learn that such information was collected unlawfully, we will take reasonable steps to delete it.

17. Changes to this Policy

We may update this Privacy Policy to reflect changes in law, technology, the Services or our practices. We will update the effective date and provide additional notice when required.

18. Contact Us

Jono, Inc. 2810 North Church Street, Suite 89354 Wilmington, Delaware 19802, United States

privacy@jono.team https://jono.team