Privacy Policy

1. Who We Are

Mezada Development and Software Ltd, registration number: 515306199, located at 4 Ha-Merts St, Tel Aviv, Israel, is the controller of your personal data. For privacy questions, contact us at support@joni.ai. If you are in a region that requires a data protection contact, our representative or DPO can be reached at dpo@joni.computer.

2. Information We Collect

Account information: Your handle, email address, dedicated phone line, custom subdomain, and authentication details collected during onboarding.

Content you provide: Prompts, messages, files, and other content you submit to Joni and your Agents, along with the outputs generated for you.

Memory data: Joni maintains a persistent two-tier memory: long-term facts about you and your preferences, and dated working notes. This memory is created from your interactions to provide continuity across sessions.

Agent activity: Records of actions your Agents take, including emails sent and received through your agent email address, calls placed or received on your dedicated phone line, websites browsed, and tasks performed.

Transaction and billing data: Your Credits balance, purchases (Subscriptions and Top Ups), Credit transfers, and related records. Payment card details are handled by the relevant payment processor or app store, not stored by us.

Wallet and blockchain data: Where you use the Wallet feature, we may process wallet addresses and on-chain transaction data. Note that data recorded on a public blockchain is inherently public.

Usage and device data: Log data, device and browser information, IP address, and diagnostic information used to operate and secure the Service.

3. How We Use Information

We use information to:

• Provide, operate, and maintain the Service and your isolated Workspace.
• Run Joni and your Agents, including performing the actions you request.
• Maintain your memory system to deliver continuity and personalization.
• Process Credits, Subscriptions, Top Ups, and transfers.
• Provide support and respond to your requests.
• Secure the Service, detect and prevent fraud and abuse, and enforce our Terms.
• Improve and develop features, including measuring usage in aggregate.
• Comply with legal obligations.

We do not sell your personal data.

4. AI Processing and Your Memory

To generate responses and perform tasks, your content is processed by AI models, including models accessed through a model routing provider. Your memory data is used to inform Agent behavior and improve continuity. You can review, edit, or request deletion of memory entries as described in Section 9, subject to operational and legal constraints.

We configure our model routing provider to use a zero data retention path where available, so that prompt and output content is not retained by that provider beyond the time needed to return a response. Configuration may vary by model and feature.

5. Legal Bases for Processing (EEA, UK)

If you are in the European Economic Area or the United Kingdom, we rely on the following legal bases:

• Performance of a contract, to provide the Service you request.
• Legitimate interests, to secure, improve, and operate the Service, where not overridden by your rights.
• Consent, where required, for example for certain communications. You may withdraw consent at any time.
• Legal obligation, to comply with applicable law.

6. How We Share Information

We share information with service providers that help us deliver the Service, under contracts that require them to protect your data. These include:

• Cloud infrastructure for your isolated per-user Workspace and encrypted storage.
• Model routing to access AI models that generate Agent outputs.
• Email infrastructure to operate your agent email address.
• Agent and browsing infrastructure to let Agents perform tasks and browse the web.
• Payment processors and app stores to handle purchases.

Agents acting externally: When your Agents act on your behalf, relevant information is shared with the recipients of those actions. For example, an email your Agent sends is delivered to its recipient, and a call your Agent places shares relevant details with the other party.

Third party developers: If you install agents or skills from the Joni Store, those developers may receive data as described at installation.

Legal and safety: We may disclose information to comply with law, enforce our Terms, or protect the rights, safety, and property of Joni, our users, or others.

Business transfers: If we are involved in a merger, acquisition, or asset sale, information may be transferred as part of that transaction.

7. International Transfers

We and our providers may process your information in countries other than your own, including outside the EEA, the UK, and your country of residence. Where required, we use appropriate safeguards such as standard contractual clauses to protect your information during these transfers.

8. Data Retention

We retain information for as long as your account is active and as needed to provide the Service. After account closure, we delete or anonymize data within a reasonable period, except where we must retain it to comply with legal obligations, resolve disputes, or enforce agreements. Credits records and transaction history may be retained for accounting and legal purposes. Data recorded on a public blockchain cannot be deleted by us.

9. Your Rights

Depending on where you live, you may have rights to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Delete your data.
• Object to or restrict certain processing.
• Receive your data in a portable format.
• Withdraw consent where processing is based on consent.

If you are a California resident, you have rights under the CCPA and CPRA, including the right to know, delete, and correct, and the right to opt out of sale or sharing. We do not sell your personal data. We will not discriminate against you for exercising your rights.

To exercise your rights, contact support@joni.ai. We will verify your request and respond within the time required by law. You also have the right to lodge a complaint with your local data protection authority.

10. Security

We protect your information using technical and organizational measures, including encrypted storage and isolated per-user infrastructure, so that each Workspace is separated from others. No system is completely secure, and we cannot guarantee absolute security. Protect your credentials and any Wallet keys or recovery information, since loss of those may be irreversible.

11. Children’s Privacy

Joni is not intended for anyone under 18. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will take appropriate steps to delete it.

12. Cookies and Similar Technologies

We use cookies and similar technologies to keep you signed in, remember preferences, secure the Service, and understand usage. You can control cookies through your browser settings, though some features may not function without them. Where required, we will request your consent for non-essential cookies.

13. Communications

We may send you service-related messages about your account, security, and changes to the Service. With your consent where required, we may send product updates. You can opt out of non-essential communications at any time.

14. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated version with a new “Last updated” date and, for material changes, provide additional notice. Your continued use after changes take effect constitutes acknowledgment of the updated Policy.