Privacy Policy

The Joolt Group LLC ("JOOLT," "we," "us," "our") operates the website www.joolt.io and the Sophia AI platform. We are a US-based company located at:

We collect the following categories of information:

• Contact information you provide directly through our chat widget, contact forms, account signup, or by phone — including your name, business name, email address, mobile phone number, and the message you send.
• Account & usage data when you create a Sophia account — business profile, integration credentials you choose to connect (e.g. our integrated automation platform, Stripe, Google Calendar), and call/conversation logs generated by your use of the platform.
• Technical data such as IP address, browser type, pages visited, and timestamps — collected via standard server logs and the Vercel analytics integration.

• To respond to your inquiries and provide customer care messages.
• To deliver, maintain, and improve the Sophia platform you signed up for.
• To send transactional notifications related to your account (e.g. trial reminders, billing receipts, security alerts).
• To comply with our legal obligations and enforce our Terms of Service.

We do not use your information for promotional or marketing outreach unless you have explicitly opted in to that channel.

When you submit a phone number through our chat widget, our voice receptionist Sophia, or our contact channels, you consent to receive customer-care SMS messages from JOOLT related to your inquiry or service request. The opt-in message you will receive looks like:

"You've opted in to receive customer care messages from The Joolt Group LLC regarding your inquiries or service requests. Msg frequency varies based on your support interactions. Msg & data rates may apply. Reply STOP to unsubscribe, HELP for help."

Mobile opt-in data and consent are collected solely by The Joolt Group LLC and are not shared with any third parties for their own marketing purposes. We do not sell, rent, lease, or otherwise transfer mobile numbers, opt-in status, or consent records to third-party marketers, data brokers, or affiliates.

To stop receiving SMS messages from JOOLT at any time, reply STOP to any message we send. To get help, reply HELP or contact us at admin@thejooltgroup.com. Message and data rates may apply. Message frequency varies.

Last updated: May 24, 2026

SMS messaging consent. When you opt in to receive SMS messages from JOOLT, the consent and your phone number are used solely for the purpose disclosed at the time of consent (booking confirmations, trial reminders, account notifications). JOOLT does not share, sell, or rent your SMS opt-in data or phone number with third parties for marketing purposes. Carriers (e.g., Twilio, AT&T, Verizon) handle delivery of the messages but are not considered third parties for the purpose of this consent. You may revoke consent at any time by replying STOP.

Sophia is JOOLT's AI-powered voice receptionist. When an account holder (the business owner) enables Sophia's voice features, Sophia answers inbound calls and may place outbound calls on the business's behalf. This section explains what happens to the audio and transcripts of those calls.

Call recording. Sophia records inbound and outbound calls when the customer (the business owner) has enabled call recording in their account settings. When recording is enabled, Sophia announces on the first turn of every call that the call may be recorded for quality and training purposes, satisfying two-party-consent statutes in California, Florida, Illinois, Maryland, Massachusetts, Montana, Nevada, New Hampshire, Pennsylvania, Washington, and other jurisdictions where caller consent is required. The customer is the controller of the recording; JOOLT is the processor.

Transcripts and AI processing. Recorded audio is transmitted to Anthropic, PBC (the maker of Claude, our AI model provider) for transcription and natural-language understanding so Sophia can respond in conversation. Anthropic processes the audio under a data-processing agreement that prohibits using customer data to train its models and requires deletion on request. Transcripts and AI-generated summaries are stored in our database alongside the account.

Retention. Call recordings, transcripts, and AI-generated summaries are retained for the lifetime of the customer's subscription plus 30 days after termination, after which they are purged. See Section 7 for the master data-retention policy.

Sub-processors involved in voice calls. The voice pipeline touches several third-party processors. We list each one and its role:

• Our automation platform — our integrated automation platform routes calls, hosts the AI conversation surface, and stores transcripts attached to contact records.
• Anthropic, PBC — provides the Claude model used for transcription and conversational understanding. US-based; processes voice and text data on a per-request basis.
• Twilio — carrier services for inbound SMS, outbound SMS, and the A2P 10DLC compliance layer for any messages Sophia sends after a call.
• Stripe — payment processing for paid subscriptions and add-on charges; does not receive voice data.
• Supabase — primary database where transcripts, summaries, and account metadata are stored at rest. Encryption at rest enabled.
• Vercel — application hosting and edge functions; handles HTTPS request termination but does not store voice data.

Rights of callers (non-account-holders). If you have called a business that uses Sophia and a recording or transcript of the call exists, you have the following rights regardless of whether you are a JOOLT customer:

• Opt out of future recording — you may ask Sophia on the call to stop recording, and we will mark the recording for suppression and not retain the call. You may also write to admin@thejooltgroup.com to request a permanent opt-out for your phone number across the JOOLT platform.
• Deletion — you may request deletion of any recording or transcript referencing your call by emailing admin@thejooltgroup.com with the business name and approximate call date. We will respond within 30 days.
• Access — you may request a copy of the transcript of a call you participated in, subject to verification of your identity.

Voice recordings are sensitive personal information under the California Privacy Rights Act (CPRA). California residents may request that JOOLT limit the use and disclosure of their sensitive personal information to what is necessary to provide the service.

We share information only with the following categories of recipients, and only to the extent necessary to operate the service:

• Infrastructure providers we use to host the platform — Vercel (hosting), Supabase (database), and Anthropic (AI inference). These providers are bound by data-processing agreements limiting their use of your data to running our service.
• Integration partners you explicitly connect — for example, if you connect a sub-account of our integrated automation platform to Sophia, we exchange operational data with that integrated automation platform on your behalf.
• Legal requirements — when required by valid legal process, to protect against fraud or abuse, or to enforce our Terms of Service.

We do not sell your personal information, and we do not share mobile opt-in data with third parties for their own marketing purposes.

We retain account data for the lifetime of your subscription plus 30 days after termination, after which it is purged unless we have a legal obligation to retain it longer. The 30-day window matches the dunning and grace period encoded in our hard-delete pipeline (see lib/account-data-pipelines.ts) so the public commitment and the internal cron agree. SMS opt-in records are retained for at least four years to comply with carrier audit requirements. Call recordings and transcripts follow the retention schedule in Section 5.

You may request a copy of the personal information we hold about you, request correction of inaccurate data, or request deletion of your data, by emailing admin@thejooltgroup.com. We respond within 30 days. California residents have additional rights under the CCPA; EU/UK residents have additional rights under the GDPR/UK GDPR — both are honored through the same email address.

We use TLS in transit, encryption-at-rest at the database layer, role-based access controls, and audit logging on every administrative action. No system is perfectly secure; if we discover a breach affecting your data, we will notify you within the timelines required by applicable law.

We will post any material changes to this Privacy Policy on this page and update the "Last updated" date above. For significant changes affecting your rights, we will additionally notify account holders via email.

Questions about this Privacy Policy or our data practices can be sent to admin@thejooltgroup.com or by mail to the address listed in Section 1.