Last Updated: September 27, 2026 · Effective: September 27, 2026

This Privacy Policy explains how Jonie.ai, LLC, doing business as Atty.ai (“Atty”, “we”, “us”) handles personal information in two roles:

• For our customers (service provider role). Our business customers (for example law firms, medical and dental offices and home-service companies) use Atty’s AI agents to answer and place calls, text and chat with their callers. For that information (“Customer Data”), we act on our customer’s behalf and under their instructions; the customer decides what is collected and how it is used. If you called or texted a business that uses Atty, that business’s privacy notice also applies, and requests about your information are best sent to them. We will help them respond.
• For our own business. We collect information about our customers’ account users, people who visit atty.ai, and prospects who contact us or accept a proposal.

1. Information we collect

From customers and prospects: name, email, phone number, business name and address, billing details (processed by our payment provider), your signature and acceptance records (date, time, IP address and the proposal you accepted), and your messages to us.

Customer Data processed for our customers: caller names, phone numbers and other details callers provide, call recordings, transcripts, summaries, text and chat messages, intake answers and appointment details.

Automatically, on our website and apps: IP address, device and browser information, pages viewed, referring pages and campaign information, and identifiers set by cookies, pixels and similar technologies (see section 4).

2. How we use information

• To provide, maintain, secure and support the Service, including answering calls, transcribing and summarizing them, and sending them to the systems our customers connect.
• To bill customers, send service and account messages, and respond to requests.
• To keep records of consents and acceptances.
• To improve the Service. We may create de-identified and aggregated data from Customer Data, with names, phone numbers and other identifiers removed, and use it to improve the Service, including our AI models. We do not attempt to re-identify it and we do not use identifiable Customer Data to train AI models.
• To market Atty to businesses, including through advertising (see section 4). You can opt out of marketing emails at any time.
• To comply with law and protect our rights, users and the public.

3. How we share information

We do not sell Customer Data. We share information only:

• With service providers who help us run the Service, such as cloud hosting, telephony and messaging carriers, speech-recognition, voice and AI-model providers, payment processing, email delivery, analytics and customer support tools. They may use the information only to provide their services to us. A current list of the providers that process Customer Data is available on request at privacy@atty.ai.
• With the systems a customer connects (for example a CRM, calendar or practice-management system), at the customer’s direction.
• For legal reasons, when required by law or legal process, or to protect rights and safety.
• In a business transfer, such as a merger or sale of assets, subject to this Policy.

4. Cookies, pixels and advertising

Our website uses cookies, pixels and similar tools from analytics and advertising partners (for example Google, Meta, LinkedIn, Microsoft, Reddit and PostHog) to measure traffic and campaigns and to show our ads to people who visited our site. Some tools on our site may identify the business or professional profile associated with a visit. Some state privacy laws treat certain advertising uses of this data as a “sale” or “sharing” of personal information. To opt out, email privacy@atty.ai with the subject “Do not sell or share”, or use your browser’s cookie controls. These tools are not used on calls handled for our customers.

5. Retention

We keep account and billing records for as long as your account is active and as required for tax, accounting and legal purposes. Call recordings, transcripts and messages are kept for the retention period set in the customer’s account, and while the account is active. After an account is closed, we delete or de-identify Customer Data within 90 days, unless the law requires us to keep it longer or it is in routine backups that are overwritten on a regular schedule.

6. Security

We use administrative, technical and physical safeguards designed to protect information, including encryption in transit, access controls and authentication. No system is completely secure, and we cannot guarantee absolute security. If we learn of a security incident affecting Customer Data, we will notify the affected customer without undue delay and as the law requires.

7. Confidential and privileged communications

Atty processes our customers’ communications as their service provider and agent, only to provide the Service to them, and keeps them confidential. We do not use identifiable Customer Data for our own purposes other than those described in this Policy. Customers remain responsible for their professional-responsibility obligations, including any duty to tell their clients or patients about the use of AI and recording.

8. Health information

The Service is not intended to process protected health information (PHI) unless the customer and Atty have signed a Business Associate Agreement. Where one is signed, we handle PHI as it requires.

9. Your choices and rights

Depending on where you live, you may have the right to ask us to access, correct, delete or receive a copy of your personal information, to opt out of targeted advertising and the “sale” or “sharing” of personal information, and not to be treated differently for using these rights. To make a request, email privacy@atty.ai. We may need to verify your identity. You may use an authorized agent where the law allows. If we deny your request, you may appeal by replying to our decision. If your information is Customer Data, we may refer you to the business that uses Atty.

10. Text messages

If you give us your mobile number and opt in, we may send you account, service, appointment and alert text messages. Message frequency varies; message and data rates may apply. Reply STOP to opt out and HELP for help, or contact support@atty.ai. Consent to receive texts is not a condition of any purchase. We do not share mobile numbers or text-messaging consent with third parties for their marketing.

11. Children

The Service is for businesses and is not directed to children. We do not knowingly collect personal information from children under 13. Contact us if you believe a child has provided information and we will delete it.

12. Where information is processed

We and our service providers process information in the United States and may process it in other countries where they operate.

13. Changes

We will post changes to this Policy with a new effective date and email customers about material changes before they take effect.

14. Contact

Jonie.ai, LLC d/b/a Atty.ai
205 Hudson Street, 7th Floor, New York, NY 10013
privacy@atty.ai