Privacy Policy

This policy explains, in plain English, what JessieAnswers collects, what we do with it, and how to get rid of it. It applies to jessieanswers.nz and to the JessieAnswers dashboard at app.jessieanswers.nz.

What we collect

From you (the business owner): your name, business details, mobile number, email, and payment details when you subscribe.

From your callers: the phone number they call from, what they say during the call, and any job or contact details they give Jessie. Calls are transcribed, and may be recorded, so you have an accurate record of what was discussed. Jessie tells every caller this in her opening greeting, before they have said anything.

How we use it

To answer calls on your behalf, capture leads, send you alerts by SMS and email, and show you call history and transcripts in your dashboard. To bill you correctly for the minutes you use. To improve how Jessie handles calls for your trade.

Google Calendar data

If you connect your Google Calendar, JessieAnswers uses and transfers that information in a way that complies with the Google API Services User Data Policy, including its Limited Use requirements.

What we read. Only whether you are free or busy in a given window, so Jessie doesn’t book a caller into a time you’re already working. We don’t read the title, description, location, guests or any other contents of your calendar events. The permission Jessie uses to check your availability doesn’t cover event contents; the permission she uses to write a booking technically could, and we don’t use it that way.

What we write. One calendar event per job a caller books, on the calendar you chose. If a call ends before the booking is confirmed, we delete that event again. We never change or delete an event we didn’t create.

What we store. The refresh token Google gives us (the long-lived credential that lets Jessie act on your calendar without asking you again), encrypted, plus the address of the connected Google account and the identifier of each event we created for you. We do not keep a copy of your calendar.

How to end it. Disconnect Google Calendar under Settings in your dashboard. That deletes our stored token immediately and tells Google to cancel our access. Jobs already in your calendar are yours and stay there. You can also remove us from your Google account’s third-party access page at any time.

We do not use Google Calendar data for advertising, we do not sell it, we do not let humans read it except where you ask us to fix something or the law requires it, and we do not use it to train or improve any generalised AI model.

How we protect it

Everything travels encrypted. The connection between your browser and this site, between the dashboard and our server, between our server and the providers named below, and between us and Google all use TLS, the same protection your bank’s website uses. Nothing we handle is sent in the clear.

Everything we store is encrypted at rest. Our database and file storage sit on infrastructure in the Sydney region that encrypts data on disk. Sensitive credentials get a second layer on top of that: your Google Calendar refresh token is encrypted by our own software with AES-256 before it is stored, using a key held only on our server, so a copy of the database on its own is not enough to read it.

Access is limited. You only ever see data belonging to your own business, every dashboard request is checked against your sign-in, and sign-in attempts are rate limited to slow down guessing. Within JessieAnswers, nobody reads your data or your callers’ data except to fix something you asked us to fix, or where the law requires it. Card numbers never touch our systems at all: the payment screen belongs to our payment processor, so the digits never pass through anything we wrote.

Who we share it with

Service providers that make JessieAnswers work: our phone and voice provider in the United States (which also handles the voice you hear and turns what your caller says into text), our US-based AI provider, our database and hosting providers in Australia, the gateway that sends your lead texts from a New Zealand number, and two more American services: the one that sends your lead emails, and our payment processor. We don’t sell your data or your callers’ data to anyone.

Your calendar’s contents are never shared, because we never read them. What does leave us is narrower: to offer a caller a time, Jessie has to know which times you’re free, so those times (and nothing else from your calendar) go to the AI provider that runs the conversation and the voice provider that speaks it, both in the United States. That is the only way she can say “I could get someone to you Thursday morning” out loud. No event titles, descriptions, locations or guests are sent anywhere. Your stored Google credential is never shared with anyone.

Where it’s stored

Our own records live in Australia, on infrastructure in the Sydney region: your leads, transcripts, recordings, settings and sign-in. We’re a New Zealand company and this data is handled under the Privacy Act 2020.

Three separate services hold something too, all in the United States, and we would rather say so here. One holds your subscription and your card. Another carries the lead emails we send you. The AI provider that works out what Jessie says keeps the words of a call for up to 30 days under its own policy, or up to 2 years if its safety systems flag a conversation. The live phone and voice parts of a call also run through US services. Our Security page sets out which country each part of a call happens in.

How long we keep it

Call transcripts and lead details for as long as your account is active, plus a reasonable period after cancellation in case you need them for a dispute or a job record. Call recordings, where there is one, for 90 days, after which the audio is deleted and the transcript stays. You can ask us to delete your data at any time by emailing [email protected].

Google Calendar access is the exception: it’s deleted the moment you disconnect, not after a retention period.

Your rights

You can ask to see, correct, or delete the personal information we hold about you or your business at any time. Your callers can do the same by contacting you directly, since you’re the business they called.

Questions

Email [email protected] and we’ll get back to you.