Josey.ai ("we", "our", or "us") provides an AI-powered real estate follow-up assistant that helps real estate professionals manage leads, automate outreach, and book appointments. This Privacy Policy explains how we collect, use, store, and protect information when you use our platform at app.josey.ai.
When you create an account, we collect your name, email address, and organization details necessary to provide the service.
Josey.ai integrates with third-party lead sources including Facebook Lead Ads, Google Ads, and Follow Up Boss. When you connect these services, we receive and store lead information on your behalf, including:
This data is collected at your direction as a data controller. You are responsible for ensuring you have appropriate consent from your leads to share their data with tools like Josey.ai.
If you enable SMS notifications, we collect your mobile phone number to deliver transactional text alerts. This number is stored in your user profile and used solely to send the notifications you opt into.
When Josey.ai places or receives AI-powered calls on your behalf, we process call audio, metadata (duration, outcome, caller/called number, timestamp), and transcripts to deliver analytics, appointment scheduling, and follow-up features. Audio and transcripts are encrypted at rest and isolated per customer organization.
AI disclosure. Every outbound AI call begins with a disclosure that the call may be conducted or assisted by an automated voice system. This disclosure is hardcoded and cannot be disabled by customers.
Two-party consent states. Where the called party’s area code indicates a jurisdiction that requires all-party consent for call recording (including California, Florida, Illinois, Maryland, Massachusetts, Montana, New Hampshire, Oregon, Pennsylvania, and Washington, among others), Josey.ai plays an audible recording notice before recording begins. If you disable recording in your account settings, no audio is stored for that campaign.
We collect standard usage and log data such as pages visited, features used, and browser/device information to improve the platform.
We use the information we collect to:
We do not sell your data or your leads' data to third parties. We do not use lead contact information for our own marketing purposes.
When you connect Josey.ai to Facebook, we access your Facebook Pages and Lead Ad form submissions using permissions you explicitly grant (leads_retrieval, pages_show_list, pages_read_engagement). We use this access solely to import new leads into your Josey.ai account. We do not post content, run ads, or take any actions on your Facebook account. You can disconnect the integration at any time from the Integrations page.
Josey.ai offers optional SMS text notifications delivered via Twilio. SMS messages are strictly transactional — we do not send promotional or marketing texts.
SMS consent is obtained directly inside the Josey.ai platform at Settings → Notifications. To opt in, you must:
At the point of opt-in, the following consent disclosure is shown:
"By providing your mobile number and enabling SMS notifications, you consent to receive text alerts from Josey.ai for the event types you select. Message & data rates may apply. Reply STOP to unsubscribe at any time or reply HELP for assistance."
Consent is stored per-user in our platform database. We do not share or sell your phone number or use it for any purpose other than delivering the notifications you have opted into.
Based on the notification types you enable, messages may include:
Message frequency varies based on your account activity and the notification types you enable. You control exactly which events trigger SMS alerts from your account settings at any time.
You may opt out of SMS notifications at any time by:
After opting out via STOP, reply START to re-enable. Reply HELP for assistance. Message and data rates may apply.
SMS messages are sent via Twilio. Your phone number is transmitted to Twilio solely for message delivery and is not used for any other purpose. See Twilio's Privacy Policy for details.
We share data only with the third-party services required to operate Josey.ai:
Each provider processes data only as necessary to provide their respective services.
We retain your account and contact data for as long as your account is active. If you close your account, we will delete your data within 30 days, except where required by law. You may request deletion of specific records or your entire account by contacting privacy@josey.ai.
We implement industry-standard security practices including encryption in transit (TLS), encrypted storage, row-level security on all database tables, and strict access controls. API keys and integration tokens are stored encrypted and never exposed to other users.
Depending on your location, you may have the right to access, correct, delete, or restrict processing of your personal data, as well as data portability. To exercise these rights, email privacy@josey.ai. We will verify your identity before responding and will acknowledge your request within 10 business days and respond substantively within 30 days (or 45 days where permitted by applicable law).
If you are a California resident, you have the right to:
You may designate an authorized agent to submit a request on your behalf. Agents must provide signed proof of authorization.
In addition to the rights above, you have the right to withdraw consent, object to processing, and lodge a complaint with your local supervisory authority. Josey.ai relies on Standard Contractual Clauses for international transfers of personal data out of the EEA, UK, or Switzerland.
For data about the customer (account holders) and platform usage, Josey.ai is the “controller.” For lead and contact data that customers upload or import, Josey.ai acts as a “processor” (or “service provider” under CCPA) on behalf of the customer, who is the controller. If you are a lead and wish to exercise rights, we will forward your request to the customer and assist with response.
Josey.ai is a B2B service and is not directed to children under 16. We do not knowingly collect personal information from children. If we learn that we have collected information from a child under 16 without parental consent, we will delete it.
We use essential cookies required for authentication and security (session tokens, CSRF protection). We do not use advertising or cross-site tracking cookies on the logged-in application. Our marketing site may use limited analytics cookies; where required by law, a cookie banner will request your consent.
Josey.ai is operated from the United States. If you access the Service from outside the U.S., you consent to the transfer of your information to the U.S. and its processing by providers located there. For transfers from the EEA, UK, or Switzerland, we rely on Standard Contractual Clauses and implement supplementary technical and organizational measures.
If a personal data breach materially affects your information, we will notify you without undue delay and, where feasible, within 72 hours of confirming the breach, consistent with applicable law.
We may update this Privacy Policy from time to time. When we do, we will update the “Last updated” date and notify you by email if the changes are material.