Privacy Policy

Who we are

Jess is operated by [Registered company name], [Registered address] ("Jess", "we", "us"). We provide an AI receptionist that answers phone calls and messages, answers customer questions, quotes and books jobs, and sends reminders and follow-ups for trades and service businesses.

This policy covers our website (https://jessai.au), our demo-call form, and the Jessservice itself.

Our role and yours

For our own customers and website visitors — the businesses that sign up, and anyone who fills in a form on this site — we decide how your data is used. In GDPR terms, we are the controller.

For the people who call or message a business that uses Jess, that business decides why their data is collected and what happens to it. We process it on the business's behalf and under its instructions — we are itsprocessor. If you called a business and want to know what it holds about you, the business is your first point of contact. We'll help them answer you.

What we collect

When you request a demo call

Your name, phone number, email, company name, trade, and whether you'd rather hear from us over WhatsApp. We also record that you agreed to be contacted.

When your business uses Jess

• Account data — names, emails, phone numbers and roles of you and your team members.
• Business setup — your business name, services, prices, service areas, hours, scripts and tone of voice.
• Billing data — plan, usage (call minutes), invoices and billing contact. Card details are handled by our payment provider; we don't store full card numbers.
• Connected accounts — access tokens and the data you let us read or write in tools you connect, such as your calendar or messaging accounts.

When someone calls or messages a business that uses Jess

• Phone number, caller ID and the time and length of the call.
• Audio recordings, transcripts and summaries of the conversation, and message content on channels like WhatsApp or SMS.
• What the caller shares to get the job booked — typically name, address, the problem they need fixed, and preferred times.

Automatically

Basic technical data when you visit the site or use the app: IP address, browser and device type, pages requested and error logs. We use this to run and secure the service.

How we use it

• To provide the service: answer calls, book jobs, send summaries, reminders and follow-ups.
• To set up and manage accounts, and to bill for usage.
• To call you back when you ask for a demo, and to follow up about Jess.
• To keep the service secure, prevent abuse and fix problems.
• To improve how Jess handles calls — see the next section for limits on this.
• To meet legal obligations, such as tax and accounting records.

Where the GDPR or a similar law applies, we rely on: performing our contract with you; our legitimate interest in running, securing and improving the service; your consent (for example, for the demo call and marketing), which you can withdraw at any time; and compliance with legal obligations.

We do not sell personal data, and we don't share it for cross-context behavioral advertising.

Calls, recordings and AI

Jess is an AI. Callers are told they're speaking with an AI assistant, and calls may be recorded and transcribed so the business can review what was said and so Jess can book the job correctly.

Call recording and consent rules differ between places — some require every party to agree to a recording. Businesses using Jess are responsible for configuring their greeting and recording settings to comply with the laws where they and their callers are. We provide the tools to do this, including a configurable disclosure at the start of every call.

We use third-party AI models to understand speech, generate replies and produce summaries. We do not allow those providers to train their general models on your calls or messages. We only use call content to improve Jess itself in de-identified form, or with the business's permission.

Who we share it with

We share personal data only as needed to run Jess:

• Service providers who process data for us under contract — hosting, telephony and messaging carriers, speech and AI model providers, email delivery, payment processing and customer support tools.
• Tools you connect — when you link a calendar, messaging account or other integration, we send it the data needed to do what you asked, such as creating a booking.
• The business you called — if you call a business that usesJess, the recording, transcript and details of your call go to that business.
• Legal and safety — when required by law, or to protect the rights, property or safety of our users, the public or us.
• Business transfers — if we're involved in a merger, acquisition or sale of assets, subject to this policy.

A current list of our sub-processors is available on request atprivacy@jess.ai.

How long we keep it

We keep account and business data for as long as the account is active. Call recordings, transcripts and messages are kept according to the retention period the business sets, and deleted when the business deletes them or closes its account. Demo requests are kept for up to 24 months unless you ask us to delete them sooner.

After an account closes, we delete or anonymise its data within 90 days, except where we need to keep records longer for legal, tax or dispute reasons.

Security

We protect data with encryption in transit and at rest, access controls limited to the people who need it, and monitoring of our systems. No system is perfectly secure, so we can't guarantee absolute security — but if a breach affects your data, we'll notify you and the relevant authorities as the law requires.

Your rights

Depending on where you live, you may have the right to:

• access the personal data we hold about you and get a copy of it;
• correct data that's wrong or incomplete;
• delete your data;
• object to or restrict certain processing;
• receive your data in a portable format;
• withdraw consent at any time, without affecting earlier processing;
• opt out of marketing messages — every one includes a way to do so.

California residents have the rights described above under the CCPA/CPRA, and we won't discriminate against you for using them. People in the EU and UK can also complain to their local data protection authority.

To use any of these rights, emailprivacy@jess.ai. We may need to verify your identity first. If you called a business that uses Jess, we'll pass your request to that business, since it controls your data.

International transfers

We and our service providers may process data in countries other than yours, including the United States. When we transfer data out of the EU, UK or other regions with transfer rules, we use appropriate safeguards such as the European Commission's Standard Contractual Clauses.

Cookies

This website only uses what it needs to work. We don't use advertising cookies or third-party trackers. If we add analytics or anything that isn't strictly necessary, we'll update this policy and ask for your consent where the law requires it.

Children

Jess is a service for businesses and isn't directed at children under 16. We don't knowingly collect their data as our own customers. If you believe a child has given us personal data, contact us and we'll delete it.

Changes to this policy

We'll update this policy as Jess changes. The date at the top shows the latest version. If a change is significant, we'll tell account holders by email or in the app before it takes effect.

Contact us

Questions about privacy, or a request about your data? Emailprivacy@jess.ai or write to[Registered company name], [Registered address].