Privacy Policy

1. Information we collect

Depending on how the Services are used, we collect:

• Account information: name, email address, phone number, role, company, sign-in details and settings.
• Business information: company name, service areas, prices, staff, vehicles, schedules, jobs, estimates, invoices and operating records.
• Customer and lead information that a business enters or receives through JunkOS: names, phone numbers, email addresses, service addresses, messages, photos, job details and estimates.
• Communications: calls, text messages (SMS and MMS), emails, voicemail, call recordings and transcripts where a business turns recording on, summaries, attachments, delivery status and related details. This includes messages that reach a business through its website chat and through Facebook Messenger, when the business connects them.
• Photos, files and recordings uploaded to the Services, including recordings made with the JunkOS Recorder app and voice samples a business provides to create a custom AI voice.
• Payment and transaction information. Card and bank details are handled by our payment providers and are not stored by JunkOS.
• Marketing and attribution information: advertising campaigns, leads, click identifiers, conversion events, spend and revenue attribution.
• Information from connected services a business chooses to authorize, such as Google (Gmail, Google Ads, Google Business Profile), Meta, Twilio, Stripe and Plaid.
• Device, log, security and usage information needed to operate, secure and troubleshoot the Services, including performance measurement on our websites.

2. Information we process for businesses

Businesses that use JunkOS put information about their own customers, leads, staff and operations into it. For that information, the business decides why it is collected and how it is used, and JunkOS processes it to provide the Services on the business's behalf.

If you are a customer of a business that uses JunkOS and you have a question about how that business uses your information, please contact the business first.

3. How we use information

We use information to:

• provide, operate, maintain and secure JunkOS;
• sign users in and enforce each business's permissions, so one business can never see another's data;
• manage leads, customers, jobs, estimates, schedules, invoices, payments and communications;
• send and receive the business communications a business authorizes;
• process photos, messages, calls and documents for the features a business uses;
• connect and synchronize the services a business chooses to authorize;
• provide marketing reporting, attribution, review and business-reporting features;
• detect fraud, abuse, security incidents and technical failures;
• provide support;
• improve the Services; and
• comply with law and enforce our agreements.

4. Artificial intelligence

JunkOS includes AI features. Depending on the features a business uses, information may be processed by these AI providers:

• OpenAI: voice conversations, call transcription and summaries, photo analysis, website chat and message drafting.
• xAI: the AI phone agent's voice, reply drafting, team-chat assistance, and creating a custom voice from samples the business provides.
• Anthropic: drafting replies to reviews, finding job details in email the business has connected, drafting website and FAQ copy, and summarizing website chats.

Information sent to an AI provider can include personal information in the messages, calls, photos, documents or records involved in the request. JunkOS sends what the feature needs.

Businesses choose which AI features they turn on. Turning on a feature authorizes JunkOS to send the related content to the providers listed here for that feature.

AI training. JunkOS does not train or fine-tune AI models on business or customer data. We have not opted in to letting any AI provider use this data to train its models; the providers process it under their business and API terms.

AI output can be incomplete or wrong. Businesses are responsible for their automation settings and for reviewing important decisions.

5. Using JunkOS from an AI assistant (ChatGPT, Claude, Grok)

A business can connect JunkOS to ChatGPT, Claude or Grok.

Connecting. You connect by signing in to JunkOS and clicking Allow. The assistant then acts as you, with your JunkOS permissions, and only inside your own business. It cannot see another business's data. Each assistant has its own sign-in; a sign-in granted to one assistant does not work in another.

What the assistant can see and do.

• When you ask the assistant something, JunkOS returns only what that request needs, for example a revenue figure with its dates, a job, a text thread, or who is waiting on a reply.
• Owners and admins can see revenue. Other team members see only what their role allows.
• The assistant changes nothing unless you ask. Texting a customer, booking, moving, cancelling or closing a job happens only on your instruction, and JunkOS confirms each change by reading the record back.
• Prices come only from your own JunkOS price list. A booking is made only at a price JunkOS quoted.
• Customers who replied STOP are never texted.

Your conversation with the assistant. What the assistant's company does with your conversation is governed by its own privacy policy and terms (OpenAI for ChatGPT, Anthropic for Claude, xAI for Grok). JunkOS does not receive your full conversation with the assistant, only the specific requests the assistant sends to JunkOS.

Disconnecting. You can disconnect at any time from the assistant's settings. An owner or admin can turn the JunkOS assistant off for any team member, which also stops that person's AI-assistant access.

What JunkOS keeps. To keep the service secure and to support you, JunkOS records each action an assistant requested: the action name, the time and the result. The record includes a short summary of the action, for example the customer or phone number it concerned, or the start of a message to your team. It does not keep the text of texts or emails sent to customers. Changes the assistant makes are recorded the same way as any other change to a record. These action records are deleted automatically 12 months after they are created. Our hosting provider also keeps a short-lived copy of each request in its logs, for no more than 30 days.

6. Calls and messages

JunkOS provides calling and texting through communications providers, mainly Twilio, and the telephone carriers they use. Depending on the channel, JunkOS may receive sender and recipient numbers, message content, photos and media, delivery status, call status and duration, and recordings and transcripts where recording is turned on. Call recording is off unless a business turns it on. Recordings are held by our communications provider and linked in JunkOS.

Getting consent, honoring opt-outs and choosing permitted message purposes are the responsibility of the business sending the messages. JunkOS honors STOP replies automatically.

7. Google user data

When a business connects a Google service, JunkOS asks only for the permissions the enabled feature needs:

• Google Ads: to read advertising performance and manage authorized Google Ads functions.
• Google Business Profile: to read and manage the business's profile information and reviews.
• Gmail: read access, so JunkOS can find job requests in the business's email (Anthropic processes the email text to pick out the job details); and send access, so JunkOS can send email the user asks it to send.

JunkOS uses Google user data only to provide or improve the user-facing features the business requested. JunkOS's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements. We do not use Google user data to train AI models, and we do not allow people to read it unless the user gives consent for specific messages, it is needed for security (such as investigating abuse), it is required by law, or the data has been aggregated and anonymized for internal operations.

8. How we share information

We do not sell personal information.

We share information only as described here or as a business directs:

• Service providers that run parts of JunkOS for us, under contract:

• Advertising measurement, at a business's direction. When a business connects Google Ads or Meta, JunkOS can send those platforms hashed (scrambled) customer email addresses and phone numbers, and conversion events such as a lead, a booking or a payment amount, so the business can measure its own advertising. Raw contact details are not sent.
• Services a business connects to JunkOS.
• Telephone carriers and communications providers, to route calls and messages.
• Authorized users of the same business account.
• Professional advisers, auditors and insurers, where reasonably necessary.
• Government authorities or others, where required by law or to protect rights, safety or security.
• A successor, if JunkOS is involved in a merger, acquisition, financing or sale of assets.

9. Cookies

junkos.app and the JunkOS dashboard use only the cookies needed to sign you in and keep the Services secure, plus cookie-free performance measurement. We do not use advertising cookies on them. Websites JunkOS hosts for individual businesses may use the measurement tools that business turns on.

10. How long we keep information

We keep information for as long as needed to provide the Services, keep business and transaction records, meet legal, tax, accounting and security obligations, resolve disputes and enforce agreements. Businesses may have their own obligations to keep records in JunkOS.

Specific periods:

• Records of actions requested by the JunkOS assistant or a connected AI assistant: deleted automatically after 12 months.
• Photos sent during a live JunkOS Talk session: deleted automatically after 24 hours.

11. Security

We use administrative, technical and organizational safeguards designed to protect information. No service can guarantee perfect security. Businesses are responsible for protecting their own sign-ins, devices, users and connected accounts.

12. Your choices and rights

Depending on where you live, you may have the right to ask for access to, correction of, deletion of, or a copy of your personal information. To make a request, email support@junkos.app. We respond within 30 days. If your information came to JunkOS from a business that uses our Services, we may refer you to that business, because it is responsible for answering.

13. Connected services

Services you connect to JunkOS have their own terms and privacy practices. Connecting a service lets JunkOS use it only within the permissions you grant. You can disconnect a service through the provider or in JunkOS.

14. Children

JunkOS is a business service and is not directed to children. We do not knowingly offer JunkOS accounts to anyone under 18.

15. Changes to this policy

We may update this policy as JunkOS changes. When we make material changes we will update the date above and give additional notice where required.

16. Contact

True North Systems LLC, doing business as JunkOS1484 NE Providence DrBend, OR 97701support@junkos.appjunkos.app