Privacy Policy - Jodie

Last Updated: 21 April 2026

Welcome to Jodie (“we,” “our,” or “us”). We value your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and otherwise process your personal information when you visit our website https://heyjodie.com (the “Website”), as well as your rights under UK data-protection laws.

1. Who We Are

• Name of Entity: JODIE AI LIMITED (the “Data Controller”)
• Company Number: 16685106
• Registered Address: 45 Albemarle Street, Mayfair, London, W1S 4JL
• Contact Email: team [at] heyjodie.com
• Data Protection Officer: data-protection-officer [at] heyjodie.com

We are responsible for deciding how and why we hold and use your personal data. Should you have questions about this Privacy Policy or wish to exercise any legal rights, please contact us using the details above.

Our Role (Controller vs. Processor): For personal data collected when you visit our Website, create a Jodie account, or communicate with us directly, we act as the Data Controller. When callers contact a business that uses Jodie and we process that caller’s personal data on the business’s behalf (for example, call audio and transcripts produced when Jodie answers a call), we act as a Data Processor on the instructions of the Jodie subscriber, who is the Controller of that data. If you are a caller with a request about a specific call, please direct it to the business you were trying to reach; they are responsible for responding.

2. What Information We Collect

We may collect and process the following categories of personal data:

1. Identification & Contact Details

   • Name, email address, phone number, and postal address.

2. Call & Communication Information

   • Call audio and recordings, voicemail, AI-generated transcripts and summaries, caller telephone numbers, call metadata (time, duration, routing), messages, bookings and similar information generated when calls are handled through the Services. Where this data relates to callers contacting a Jodie subscriber, we process it as a Processor on the subscriber’s behalf (see section 1).

3. Account & Login Information

   • Username, password (hashed), or other account credentials if you register an account.

4. Financial Information

   • Payment details or bank information (if relevant to transactions or fees).

5. Marketing & Communications Data

   • Your preferences for receiving marketing communications from us; social-media handles if you connect via social platforms.

6. Technical & Usage Data

   • IP address, browser type, device identifiers, cookie and pixel data, session re-play recordings, click paths, scroll depth, heat-map statistics, and other information about how you interact with our Website and marketing emails.
   • Sources: collected automatically via cookies, pixels, JavaScript, and similar technologies from:
     • Google Analytics 4 (GA4)
       Behavioural analytics (page views, events, user flows, approximate geolocation).
     • Microsoft Clarity
       Session re-play, scroll and click heat-maps, and aggregated performance metrics.
     • Meta (Facebook) Pixel
       Conversion tracking, ad attribution, and custom-audience building.
     • TikTok Pixel
       Conversion tracking, ad attribution, and audience measurement for TikTok advertising campaigns.
     • Reddit Pixel
       Conversion tracking and ad attribution for Reddit advertising campaigns.
     • LinkedIn Insight Tag
       Conversion tracking, website demographics, and retargeting for LinkedIn advertising campaigns.
     • ProveSrc
       Website verification and trust signals for social proof and credibility.
     • Tolt
       User engagement tracking and behavioral analytics.
     • Intercom
       Customer support chat functionality and user communication management.

7. Other Data You Provide

   • Any other personal data you voluntarily share with us when filling out forms or contacting us (e.g., support queries).

Note: We typically do not collect special-category personal data (e.g., health, religious, or ethnic information). If we ever need to handle such data, we will request your explicit consent or rely on another lawful basis under UK law.

3. How We Collect Your Data

• Direct Interactions: You provide data when you fill out forms, register for an account, request services, or communicate with us.
• Automated Technologies: As you navigate the Website, GA4, Microsoft Clarity, Meta Pixel, TikTok Pixel, Reddit Pixel, LinkedIn Insight Tag, ProveSrc, and Tolt automatically collect Technical & Usage Data through cookies and similar technologies.
• Third Parties: We may receive personal data from analytics providers (Google, Microsoft, Meta, TikTok, Reddit, LinkedIn, ProveSrc, Tolt), payment processors, and marketing partners.

4. Why We Process Your Data (Legal Bases)

We use your personal data only where UK law permits. Common lawful bases include:

1. Consent

   • Where you give explicit consent (e.g., when accepting optional analytics or marketing cookies).

2. Contractual Necessity

   • To perform our obligations under a contract (e.g., providing services you’ve registered for).

3. Legal Obligation

   • To comply with UK legal or regulatory requirements.

4. Legitimate Interests

   • To operate, improve, and secure our Website; analyse how it is used; prevent fraud; and market our services (including through GA4, Microsoft Clarity, Meta Pixel, TikTok Pixel, Reddit Pixel, LinkedIn Insight Tag, ProveSrc, and Tolt), provided such interests do not override your rights and freedoms.

5. How We Use Your Data

We may use your personal data to:

• Provide Services: Facilitate services, maintain your account, and process transactions.
• Customer Support: Handle your inquiries, troubleshoot issues, and manage customer-service requests.
• Marketing & Communications: Send newsletters or promotions (only if you have opted in). You can withdraw consent at any time.
• Analytics & Improvements:
  • GA4 helps us understand traffic sources, popular pages, and overall Website performance.
  • Microsoft Clarity provides session re-plays and heat-maps so we can see where users experience friction and improve usability.
  • The Meta Pixel lets us measure the effectiveness of our ads and reach users with more relevant content.
  • TikTok Pixel allows us to track conversions and optimise our TikTok advertising campaigns.
  • Reddit Pixel helps us measure the effectiveness of Reddit advertising and reach relevant audiences.
  • LinkedIn Insight Tag enables us to track conversions and gather insights about our LinkedIn advertising performance.
  • ProveSrc provides website verification and social proof to enhance user trust and credibility.
  • Tolt tracks user engagement and provides behavioral analytics to improve user experience.
  • Intercom enables customer support chat functionality, allowing us to communicate with users and provide assistance.
• Legal & Compliance: Comply with regulatory requirements, detect fraud, or enforce our rights.

6. Cookies, Pixels & Tracking Technologies

Our Website relies on first-party and third-party cookies, pixels and local-storage objects to function. We use them to:

• Store user preferences and session information.
• Analyse traffic and user interactions via Google Analytics 4 and Microsoft Clarity.
• Measure advertising performance through the Meta Pixel, TikTok Pixel, Reddit Pixel and LinkedIn Insight Tag.
• Provide website verification and social proof through ProveSrc, and engagement analytics through Tolt.
• Enable customer-support chat functionality through Intercom.

These technologies are integral to how the Website is delivered. If you do not want them to run in your browser, you can disable cookies or similar tracking via your browser settings, or stop using the Website. By continuing to use the Website, you acknowledge that these cookies and similar technologies are necessary for the Website to function as intended.

You can also manage advertising preferences directly with the providers listed below.

Opt-Out Links

Service	How to Opt Out
Google Analytics 4	Install the Google Analytics Opt-out Browser Add-on or disable cookies in your browser.
Microsoft Clarity	Disable cookies in your browser or enable “Do Not Track”.
Meta Pixel	Adjust ad preferences in your Facebook/Instagram account settings or use industry opt-out tools (e.g., YourAdChoices).
TikTok Pixel	Adjust ad preferences in your TikTok account settings.
Reddit Pixel	Adjust ad preferences in your Reddit account settings.
LinkedIn Insight Tag	Adjust ad preferences in your LinkedIn account settings or use LinkedIn’s opt-out page.
ProveSrc	Disable cookies in your browser or contact us to opt out of verification tracking.
Tolt	Disable cookies in your browser or enable “Do Not Track”.
Intercom	Disable cookies in your browser or adjust chat preferences in the Intercom widget.

7. Who We Share Your Data With

1. Service Providers

   • Hosting, IT support, payment processors, email service providers, analytics vendors, and customer support services such as Google LLC (GA4), Microsoft Corporation (Clarity), Meta Platforms Ireland Ltd (Meta Pixel), TikTok Technology Limited (TikTok Pixel), Reddit Inc. (Reddit Pixel), LinkedIn Corporation (LinkedIn Insight Tag), ProveSrc Ltd (ProveSrc), Tolt Ltd (Tolt), and Intercom Inc. (Intercom).

2. Business Partners

   • If you request or opt in to co-branded services or partnerships.

3. Legal or Regulatory Authorities

   • When required to comply with the law or to protect our rights.

4. Corporate Transactions

   • In connection with a sale, merger, or transfer of part of our business or assets, your personal data may be disclosed to the prospective buyer or merged entity.

We contractually require these third parties to handle your data securely and in compliance with applicable laws.

8. International Data Transfers

Some of our providers (Google, Microsoft, Meta, TikTok, Reddit, LinkedIn, ProveSrc, Tolt, Intercom) are headquartered in the United States or other international locations. Whenever we transfer your data outside the UK and/or European Economic Area, we ensure a similar level of protection by implementing one of the following safeguards:

• The destination country has been deemed to provide an adequate level of protection; or
• We use standard contractual clauses approved by the UK Information Commissioner’s Office (ICO) or other recognised transfer mechanisms.

If you need more details about specific transfer mechanisms, please contact us.

9. How We Protect Your Information

We take technical and organisational measures to protect your personal data from unauthorised access or disclosure, including:

• Encryption (in transit and at rest, where appropriate).
• Secure data storage in controlled facilities.
• Access controls, multi-factor authentication, and staff training on data protection.
• Regular audits of our security controls and vendor due-diligence reviews.

Despite our efforts, no system is entirely secure. If you suspect your data or interaction with us is no longer secure, please notify us immediately.

10. Data Retention

We retain your personal data only for as long as reasonably necessary to:

• Fulfil the purposes for which it was collected.
• Satisfy any legal, regulatory, tax, accounting, or reporting requirements.
• Resolve disputes or enforce our legal agreements and policies.

Where we act as a Processor for a Jodie subscriber, call recordings, transcripts and related call data are retained for the duration of the subscriber’s Subscription and for a reasonable period thereafter, or as otherwise configured by the subscriber within the Services; the subscriber (as Controller) determines the applicable retention period.

Retention periods for analytics data are controlled via GA4 (default 14 months), Microsoft Clarity (default 30 days), Meta Pixel (in accordance with Meta’s data-retention policies), TikTok Pixel (in accordance with TikTok’s data-retention policies), Reddit Pixel (in accordance with Reddit’s data-retention policies), LinkedIn Insight Tag (in accordance with LinkedIn’s data-retention policies), ProveSrc (in accordance with ProveSrc’s data-retention policies), Tolt (in accordance with Tolt’s data-retention policies), and Intercom (in accordance with Intercom’s data-retention policies). Once the retention period expires, we will securely delete or anonymise your personal data in compliance with applicable laws.

11. Your Rights

Under the UK General Data Protection Regulation (UK GDPR) and other applicable laws, you may have the right to:

• Access Your Data: Obtain a copy of the personal data we hold about you.
• Rectification: Request corrections to any inaccurate or incomplete data.
• Erasure (Right to be Forgotten): Ask us to delete your data under certain circumstances.
• Restriction of Processing: Request we limit how we use your data.
• Data Portability: Receive your data in a structured, commonly used format.
• Object to Processing: Object to certain processing activities, including direct marketing and analytics profiling.
• Withdraw Consent: Where processing is based on consent, you can withdraw it at any time.

To exercise these rights, contact us at team [at] heyjodie.com or our Data Protection Officer at data-protection-officer [at] heyjodie.com. We may need to verify your identity before processing your request.

You also have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO) if you believe your personal data has been processed unlawfully or your data protection rights have been violated. You can contact the ICO at https://ico.org.uk/ or by calling their helpline on 0303 123 1113.

12. Children’s Privacy

Our Website is not intended for individuals under the age of 13. We do not knowingly collect personal data from children. If you believe a child under the age of 13 has provided us with personal information, please contact us so we can investigate and delete it where required.

13. Links to Other Websites

Our Website may contain links to third-party sites not operated by us. We are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party sites or services before providing personal information.

14. Updates to This Policy

We may update this Privacy Policy from time to time to reflect changes in our data practices or legal requirements. The “Last updated” date at the top indicates when it was last revised. Your continued use of our Website after we post any updates signifies your acceptance of the revised policy.

15. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us:

• General Email: team [at] heyjodie.com
• Data Protection Officer: data-protection-officer [at] heyjodie.com
• Address: 45 Albemarle Street, Mayfair, London, W1S 4JL
• ICO reference: ZB977748

For data protection matters specifically, please contact our Data Protection Officer. For complaints about data processing, you may also contact the ICO directly at https://ico.org.uk/.