Privacy policy

This policy explains how JoyneAI, Inc. (“Joyne”, “we”, “us”), a US company, handles personal information when you visit joyne.co, book a pilot, contact us or use the Joyne product. It is written for the United States (including the California Consumer Privacy Act as amended by the CPRA, and other state privacy laws) and for our Australian users (the Privacy Act 1988 and the Australian Privacy Principles), with a short section for visitors in the EU, EEA, UK and Switzerland.

The short version

We collect what we need to reply to you, run this website and provide Joyne to the suppliers who use it.
Drawings, project data, catalogs and prices that customers upload belong to them. We use them to provide the service to that customer. Catalogs and prices are confidential and never pooled across suppliers.
AI model providers, such as OpenAI, help read drawings and prepare takeoffs. They work for us as service providers and may not use customer content to train their models, except as their business terms allow.
Analytics and advertising cookies are optional. In the EU, EEA, UK and Switzerland they stay off until you accept. Anyone can change their choice in Cookie settings, and we honor Global Privacy Control.
We don’t sell personal information for money. Some advertising cookies may count as “sharing” under US state laws, and you can opt out.

Who we are

Joyne is operated by JoyneAI, Inc., a Delaware corporation, with its registered office at 131 Continental Dr, Suite 305, Newark, DE 19713, USA.

For this website and for our own sales and marketing, we decide how personal information is used (in GDPR terms, we are the controller). For content that customers upload to the product, we act on the customer’s behalf as their service provider or processor (see Customer content, catalogs and pricing).

Questions about privacy go to privacy@joyne.co.

What we collect

When you contact us or book a pilot

Your name, work email, company, role and anything you write to us. If you book a pilot on our booking page, the booking form is provided by Cal.com, our scheduling provider. It collects your name, email, the time you pick and your answers to a few questions (such as your company, role, the trades you supply, your region and your typical monthly quote volume), and adds the meeting to our calendar.

When you visit this website

Pages viewed, how you arrived (for example, the referring site or ad), clicks on “Book a pilot”, video plays, how far you scroll, your device and browser type, language and an approximate location derived from your IP address. Our own site code records these events, and the analytics and advertising tools listed in our cookie policy collect them where your choices allow.

The website has no accounts. It picks the Australian or US version of its videos from your device’s time zone, without a cookie.

When your company uses Joyne

Account information: names, work emails, roles and sign-in details of the people your company invites.
Customer content: drawings, plans, specifications and project details, and the takeoffs and quotes produced from them. These can include personal information about other people, such as a contractor’s contact details or a project address.
Catalog and pricing data: the products, prices and customer-specific rates a supplier loads into Joyne.
Usage and technical data: records of sign-ins, actions and errors, IP addresses and device information, used to run, secure and support the service.

From other sources

Business contact details from a colleague who introduces you, from events or from public professional profiles, and aggregated campaign reports from advertising platforms.

We don’t ask for sensitive information, such as health information or racial or ethnic origin. Please leave it out of uploads and messages.

How we use it

To reply to you, and to arrange and run pilots.
To provide the product: reading drawings, preparing takeoffs and pricing quotes from the supplier’s own catalog and rates.
To support, secure and fix the service, and to prevent misuse.
To understand how the website and product are used, and to improve them.
To measure our advertising and show our ads to people who have visited this website, where your choices allow.
To send occasional product and company news to business contacts. Every email has an unsubscribe link.
To meet legal obligations and enforce our agreements.

Customer content, catalogs and pricing

Content a customer uploads, and the results Joyne produces from it, belong to that customer. We use it only to provide, support and secure the service for that customer, as the customer agreement sets out or the law requires.

Supplier catalogs, prices and customer-specific rates are confidential. We never share one supplier’s catalog or pricing with another supplier, never pool or combine pricing across suppliers, and never use it to benchmark, suggest or set anyone else’s prices. Inside Joyne, only people who need access to provide or support the service have it, and they are bound by confidentiality.

Joyne’s results are prepared for the customer’s own team to check before a quote is released. We don’t use customer content to make decisions that have legal or similarly significant effects on individuals.

If your details appear in a customer’s content (for example, you are one of their contractors) and you want to use your privacy rights, please contact that customer. We will help them respond.

AI processing and service providers

Joyne uses AI models run by third-party providers, such as OpenAI, to read drawings and prepare takeoffs. When we send customer content to these providers, they act as our service providers (processors): they process it on our instructions, under contract, to provide the service to us.

We don’t allow these providers to use customer content to train or improve their models, except as their terms allow. At the date of this policy, the business terms we use don’t permit training on content we send by default. Providers may keep content for a limited time for abuse monitoring or legal reasons, as their terms allow. If this changes in a way that matters to you, we will update this policy.

We don’t use one customer’s content to train models that serve other customers unless that customer agrees.

Other service providers help us run Joyne and this website: cloud hosting and storage, email, scheduling (Cal.com, for pilot bookings), customer support, error monitoring, and the analytics and advertising tools in our cookie policy. Each gets only what it needs for its task and must protect it.

Cookies, pixels and similar technologies

We keep a small first-party record of your cookie choices. Where your choices allow, we also use Google Analytics 4 (analytics), Google Ads (ad measurement and remarketing), the LinkedIn Insight Tag and the Meta Pixel (ad measurement and retargeting), loaded through Google Tag Manager. Our cookie policy lists each one, what it does and how long it lasts.

EU, EEA, UK and Switzerland: analytics and advertising stay off until you accept them.
Elsewhere, including the US and Australia: they are on by default, and you can switch them off at any time.
Global Privacy Control: if your browser sends a GPC signal, we treat it as an opt-out of advertising cookies and of the sale or sharing of your personal information.

Service providers, as described above, under contract, including Cal.com for bookings and AI model providers for the product.
Advertising platforms (Google, LinkedIn and Meta), through their tags on this website, where your choices allow.
Your own organization: content in a customer’s Joyne workspace is visible to that customer’s authorized users.
Professional advisers, such as lawyers, accountants and auditors, under confidentiality.
Authorities, where the law requires it or to protect rights, property or safety.
A buyer or successor, if we are involved in a merger, acquisition or sale of assets, on the terms of this policy.

Your choices and rights

Wherever you are, you can ask to access, correct or delete the personal information we hold about you, and opt out of marketing emails and ad tracking:

Cookie settings: switch analytics and advertising on or off.
Do not sell or share my personal information: switch advertising off.
Global Privacy Control: we honor it automatically.
Anything else: email privacy@joyne.co. We don’t charge for reasonable requests.

We verify requests by matching details we already hold. Where we hold the information as a customer’s service provider, we pass the request to that customer.

US state privacy rights, including California

If you live in California or another US state with a consumer privacy law (such as Colorado, Connecticut, Oregon, Texas, Utah or Virginia), you may have the right to:

know what personal information we collect, use and disclose, and get a copy;
correct inaccurate information;
delete information we hold about you;
opt out of the “sale” or “sharing” of your personal information and of targeted (cross-context behavioral) advertising;
appeal if we decline your request, where your state provides for it; and
not be treated differently for using these rights.

Sale and sharing. We don’t sell personal information for money. When advertising cookies from Google, LinkedIn or Meta are active on this website, that can count as “selling” or “sharing” personal information for targeted advertising under some state laws. To opt out, use Do not sell or share my personal information or turn on Global Privacy Control in your browser. We don’t knowingly sell or share the personal information of anyone under 16, and we don’t use sensitive personal information in ways that would require offering a right to limit it.

What we collect and why.

Category	Examples	Source	Used for	Disclosed to
Identifiers	Name, work email, IP address, cookie IDs	You and your device	Replying, the service, security, analytics, advertising	Service providers; advertising platforms (cookie IDs, IP address)
Professional information	Company, role	You and your colleagues	Replying, pilots, the service	Service providers
Internet activity	Pages viewed, clicks, video plays, referrer	Your device	Analytics, advertising, security	Service providers; advertising platforms
Approximate location	City or region from IP address	Your device	Analytics, security	Service providers; advertising platforms
Customer content	Drawings, project details, contacts named in documents	Our customers	Providing the service to that customer	Service providers, including AI model providers

Making a request. Email privacy@joyne.co with “Privacy request” in the subject. We will reply within 45 days, or tell you if we need up to 45 more where the law allows. You can use an authorized agent; we may ask for proof that they act for you.

Australia

We handle personal information under the Privacy Act 1988 (Cth) and the Australian Privacy Principles. You can ask to access or correct the personal information we hold about you, and we will respond within 30 days. You can deal with us anonymously or under a pseudonym where that is practical, for example when asking a general question. You can opt out of marketing emails at any time.

If we have an eligible data breach, we will notify you and the Office of the Australian Information Commissioner (OAIC) as the Notifiable Data Breaches scheme requires.

EU, EEA, UK and Switzerland

If the GDPR, the UK GDPR or Swiss data protection law applies to you:

Legal bases. We rely on your consent for analytics and advertising cookies; on contract to provide Joyne to customers and their users; and on our legitimate interests for business contact, security and improving this website and the service. We process customer content as a processor, on the customer’s instructions.
Your rights. Access, correction, deletion, restriction, portability and objection (including to direct marketing, at any time), and withdrawing consent, which doesn’t affect processing before you withdraw it.
Complaints. You can complain to your local data protection authority, for example the ICO in the UK.

International transfers

We are a US company and also work from Australia. We and our service providers operate in the United States and Australia, and some providers process data in other countries. When personal information moves between countries, we take reasonable steps, including contract terms with our providers, so that it stays protected to the standard of this policy and the Australian Privacy Principles. For information from the EU, EEA, UK or Switzerland, we rely on an adequacy decision, the European Commission’s standard contractual clauses (with the UK addendum) or another lawful transfer mechanism.

Security

We protect information with encryption in transit, role-based access controls, logging and separation of each customer’s data. Only people who need access to customer content have it. No system is perfectly secure; if you think something has gone wrong, email privacy@joyne.co straight away.

How long we keep it

Emails and enquiries: up to 2 years after our last contact, unless you become a customer.
Website analytics: Google Analytics data for 14 months. Advertising platforms keep data under their own policies; cookie lifetimes are in our cookie policy.
Your cookie choice: 12 months, then it expires.
Customer content, catalogs and pricing: as the customer agreement sets out. If it says nothing, we delete them within 90 days after the agreement ends, and backups roll off on a regular cycle after that.
Account and usage records: while the account is active and up to 2 years after, for security and legal reasons.

We keep information longer only where the law requires it or to resolve a dispute.

Children

Joyne and this website are for businesses. They are not directed at children, and we don’t knowingly collect personal information from anyone under 16. If you think we have, contact us and we will delete it.

Changes to this policy

We will post any change on this page and update the date at the top. If a change is significant, we will tell customers by email or in the product before it takes effect.

Contact and complaints

JoyneAI, Inc.
131 Continental Dr, Suite 305, Newark, DE 19713, USA
privacy@joyne.co

If you have a concern, please email us first; we will respond within 30 days. If you are in Australia and not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au or on 1300 363 992. In the EU, EEA, UK or Switzerland you can contact your local data protection authority. In the US you can contact your state attorney general, and California residents can also contact the California Privacy Protection Agency at cppa.ca.gov.