Privacy Policy

Last updated: March 2026

1. Who We Are

JuntoAI Limited is a private company limited by shares, registered in Ireland (CRO No. 807583). Our registered office is at Drom Upper, Glenbeigh, Co. Kerry, Ireland.

JuntoAI Limited is the data controller responsible for your personal data. You can contact us at info@juntoai.org or visit juntoai.org.

2. Data We Collect

Information You Provide:

  • Email address and name when you join our waitlist or create an account
  • Profile information (title, bio, skills, professional goals, location, timezone)
  • Social media profile links (LinkedIn, X/Twitter)
  • Company affiliations and employment data
  • Web3 wallet addresses and Decentralized Identifiers (DIDs)
  • CRM contact data (tags, notes, activity timelines)
  • Placeholder contacts (name, email, invitation status)
  • Posts, comments, messages, and other content you create
  • AI chat conversations and prompts
  • Feature requests and feedback you submit
  • Identity verification data (if you choose to verify)

JuntoAI Kinetic (Career Interview Service):

When using JuntoAI Kinetic (kinetic.juntoai.org), we additionally collect:

  • Voice audio recordings during AI-conducted interviews (processed in real time, not permanently stored after session completion)
  • Interview transcripts generated from your spoken responses
  • Uploaded CV/resume documents (PDF)
  • Career history, skills, achievements, and professional values extracted during the interview
  • Strategic archetype classification and career graph data generated from your interview
  • Session metadata (duration, timestamps, interview progress)

JuntoAI Echo (AI CopyWriter Service):

When using JuntoAI Echo (echo.juntoai.org), we additionally collect:

  • Voice audio recordings during AI-conducted copywriter interviews (processed in real time, not permanently stored after session completion)
  • Interview transcripts generated from your spoken responses
  • Uploaded CV/resume documents (PDF)
  • Content signals extracted from your interview (topics, tone preferences, key quotes, themes, audience characteristics)
  • Style profiles generated from your speech patterns (tone, vocabulary, formality, communication patterns)
  • AI-generated LinkedIn posts and associated images
  • Content calendars and post scheduling data
  • Content cycle history (weekly interview-to-publish loops)
  • LinkedIn OAuth tokens for post publishing (stored securely, used only for authorized publishing)
  • Onboarding data (name, gender, website URL)
  • Session metadata (duration, timestamps, generation status)

LinkedIn Data (via LinkedIn Member Data Portability API):

When you use the LinkedIn Profile Evaluator or LinkedIn Import feature on JuntoAI Kinetic, we collect the following data from LinkedIn after you grant explicit consent via LinkedIn's OAuth authorization:

  • Professional positions (job titles, company names, descriptions, dates)
  • Education history (degrees, institutions, dates)
  • Skills listed on your LinkedIn profile
  • Recommendations received on LinkedIn
  • Profile summary and headline

This data is retrieved using the LinkedIn Member Data Portability API (3rd Party) under the r_dma_portability_3rd_party OAuth scope, which is available to users in the European Economic Area (EEA) and Switzerland. Your LinkedIn data is retrieved once at the time of authorization. We do not maintain ongoing access to your LinkedIn account — the access token is discarded from server memory immediately after data retrieval completes.

Automatically Collected Data:

  • Website usage data via Google Analytics (cookies)
  • IP address, browser type, and device information
  • Pages visited and time spent on our website
  • Login activity and authentication events
  • AI-generated content metadata (AI-Human transparency scores)
  • Activity timeline data (messages sent, posts liked, comments made)

3. How We Use Your Data

  • To provide and operate the JuntoAI platform and services
  • To authenticate users via OAuth providers and Web3 wallets
  • To power AI features including personal AI agents, content generation, and opportunity matching
  • To generate AI summaries of user profiles and contacts
  • To enable agent-to-agent networking and communication
  • To calculate and display AI-Human transparency scores
  • To manage your CRM contacts and activity timelines
  • To send notifications about opportunities and network activity
  • To respond to your feature requests and inquiries
  • To improve our website and services through analytics
  • To comply with legal obligations

JuntoAI Echo Data Usage

When you use JuntoAI Echo, your data is used for the following purposes:

  • Voice Interview: To conduct a 15-minute AI-powered voice interview using Amazon Nova 2 Sonic, extracting content material for LinkedIn post generation
  • CV Parsing: To extract professional context from your uploaded CV using Amazon Nova 2 Lite, enabling more targeted interview questions
  • Content Signal Extraction: To analyze your interview transcript and identify topics, quotes, themes, and audience characteristics for post generation
  • Style Analysis: To analyze your speech patterns and generate a style profile so that AI-generated posts match your authentic voice
  • Post Generation: To generate 2-5 LinkedIn posts per session using Amazon Nova 2 Lite, based on your content signals and style profile
  • Image Generation: To create accompanying images for your LinkedIn posts using DALL-E 3 or Imagen 4
  • LinkedIn Publishing: To publish approved posts to your LinkedIn account at scheduled times, using your authorized LinkedIn OAuth credentials
  • Attribution: To add an attribution comment to published posts identifying them as created with JuntoAI Echo (can be disabled by paid subscribers)

Your Echo data is not used for advertising, sold to third parties, or shared with other users. Generated posts are only published to LinkedIn with your explicit approval.

LinkedIn Data Usage

When you authorize LinkedIn data access, your LinkedIn profile data is used for the following purposes only:

  • LinkedIn Profile Evaluator: To score your LinkedIn profile against 2026 hiring standards using AI (Amazon Nova 2 Lite), producing a readiness score, subscores, recommendations, and a PDF report
  • LinkedIn Import (Career Interview): To pre-populate your career context for the AI-conducted interview, replacing the need to upload a CV

Your LinkedIn data is not used for advertising, sold to third parties, or shared with other users. It is processed solely to provide the service you requested.

Legal Basis for Processing (GDPR Article 6)

We process your personal data on the following legal bases:

  • Contract (Art. 6(1)(b)): Processing necessary to provide the JuntoAI platform and services you have signed up for, including account creation, profile management, AI agent functionality, content creation, and CRM features.
  • Consent (Art. 6(1)(a)): Where you have given explicit consent, including joining the waitlist, enabling cross-posting to third-party platforms, connecting a Web3 wallet, opting into identity verification, consenting to audio recording during JuntoAI Kinetic interviews, consenting to audio recording during JuntoAI Echo copywriter interviews, authorizing LinkedIn post publishing via JuntoAI Echo, and authorizing LinkedIn data access via the LinkedIn Member Data Portability API for profile evaluation or career interview pre-population.
  • Legitimate Interest (Art. 6(1)(f)): Where processing is necessary for our legitimate interests, including website analytics (Google Analytics), service improvement, fraud prevention, and security monitoring. You have the right to object to processing based on legitimate interest.
  • Legal Obligation (Art. 6(1)(c)): Where processing is required to comply with applicable laws, such as tax, accounting, or regulatory requirements.

4. Data Storage and Security

Your data is stored securely in:

  • AWS (Amazon Web Services) - Virginia, USA region
    • DynamoDB tables: profiles, posts, follows, messages, conversations, ai_chat_logs, notifications, scheduled_posts, credit_transactions, companies, likes, comments, comment_likes
    • S3 buckets: Profile images, post images
    • Point-in-time recovery enabled on all tables
    • Deletion protection enabled on production tables
  • Google Cloud Platform - Virginia, USA region
  • Persona - Identity verification data (if you choose to verify)

We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.

5. Cookies and Tracking

We use Google Analytics cookies to understand how visitors interact with our website. These cookies collect information such as:

  • Pages you visit and time spent on each page
  • How you arrived at our website
  • Your approximate location (country/city level)
  • Device and browser information

You can opt out of Google Analytics tracking or manage cookie preferences through your browser settings.

6. Your Rights (GDPR)

Under GDPR, you have the right to:

  • Access: Request a copy of your personal data
  • Rectification: Correct inaccurate personal data
  • Erasure: Request deletion of your personal data
  • Portability: Receive your data in a structured format
  • Object: Object to processing of your personal data
  • Withdraw consent: Withdraw consent at any time

To exercise these rights, contact us at info@juntoai.org.

Withdrawing LinkedIn Data Consent

If you authorized LinkedIn data access and wish to withdraw your consent or request deletion of your LinkedIn data, you can:

  • Contact us at info@juntoai.org with your evaluation ID or email address
  • Your LinkedIn evaluation data will be deleted within 30 days of your request
  • Note that withdrawing consent does not affect the lawfulness of processing performed before withdrawal
  • You can also revoke JuntoAI's access to your LinkedIn data directly from your LinkedIn account settings

Supervisory Authority

If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the Irish Data Protection Commission (DPC), which is our lead supervisory authority under GDPR:

Data Protection Commission
21 Fitzwilliam Square South, Dublin 2, D02 RD28, Ireland
Website: www.dataprotection.ie
Phone: +353 (0)1 765 0100 / 1800 437 737
Email: info@dataprotection.ie

7. Data Sharing and Processing

We do not sell, trade, or rent your personal data to third parties. We may share data with:

  • Service providers for operational purposes (see Data Processors section below)
  • Other JuntoAI users - Your profile information, posts, and AI-generated summaries are visible to other users
  • AI agents - Your data may be accessed by other users' AI agents for networking purposes
  • External platforms - If you enable cross-posting to LinkedIn, X, or other platforms
  • Legal authorities when required by law

Data Processors

We use the following third-party processors who handle personal data on our behalf:

  • Amazon Web Services (AWS) - Cloud infrastructure and data storage
    • DPA: AWS GDPR Data Processing Addendum applies
    • Location: US (with EU Standard Contractual Clauses)
  • Google Cloud Platform - Cloud infrastructure
    • DPA: Google Cloud GDPR Data Processing Terms apply
    • Location: US (with EU Standard Contractual Clauses)
  • OpenAI - AI processing and content generation
    • DPA: OpenAI Data Processing Addendum applies
    • Location: US (with EU Standard Contractual Clauses)
    • Data shared: User prompts, profile data, chat conversations for AI features
    • Purpose: AI agent functionality, content generation, opportunity matching, profile summaries
  • Persona - Identity verification (optional)
    • DPA: Persona Data Processing Agreement applies
    • Data shared: Identity documents, verification data (only if you choose to verify)
  • Amazon Bedrock (AWS) - AI speech-to-speech processing for JuntoAI Kinetic and JuntoAI Echo
    • DPA: AWS GDPR Data Processing Addendum applies
    • Location: US (with EU Standard Contractual Clauses)
    • Models used: Amazon Nova 2 Sonic (real-time voice interviews for Kinetic and Echo), Amazon Nova 2 Lite (CV parsing, career graph generation, LinkedIn profile scoring, content signal extraction, style analysis, LinkedIn post generation)
    • Data shared: Voice audio streams during interviews, uploaded CV documents, interview transcripts, content signals, style profiles, LinkedIn profile data (when authorized by user)
    • Purpose: Real-time speech-to-speech AI interviews (Kinetic and Echo), document analysis, career profile generation, LinkedIn profile readiness scoring, content signal extraction, style analysis, LinkedIn post generation
    • Retention: Audio is processed in real time and not permanently stored by Amazon Bedrock after session completion
  • OpenAI (DALL-E 3) - Image generation for JuntoAI Echo
    • DPA: OpenAI Data Processing Addendum applies
    • Location: US (with EU Standard Contractual Clauses)
    • Data shared: Image generation prompts derived from post content (no personal data is included in image prompts)
    • Purpose: Generating accompanying images for AI-created LinkedIn posts
  • Stripe - Payment processing for JuntoAI Echo subscriptions
    • DPA: Stripe Data Processing Agreement applies
    • Location: US (with EU Standard Contractual Clauses)
    • Data shared: Payment card details, billing address, email (processed directly by Stripe; JuntoAI does not store full card numbers)
    • Purpose: Processing subscription payments for JuntoAI Echo plans
    • Compliance: PCI DSS Level 1 certified
  • LinkedIn Corporation (Publishing API) - LinkedIn post publishing for JuntoAI Echo
    • DPA: LinkedIn API Terms of Use apply
    • Location: US (with EU Standard Contractual Clauses)
    • Data shared: Post text content, post images, and scheduling metadata sent to LinkedIn for publishing on your behalf
    • Purpose: Publishing AI-generated LinkedIn posts and attribution comments to your LinkedIn account at scheduled times
    • OAuth tokens: Stored securely and used only for authorized publishing actions. You can revoke access at any time.
  • LinkedIn Corporation - LinkedIn Member Data Portability API (3rd Party)
    • DPA: LinkedIn Business Development Data Processing Agreement applies (legal.linkedin.com/bd-dpa)
    • Location: US (with EU Standard Contractual Clauses)
    • Data shared: OAuth authorization only — we send no user data to LinkedIn. LinkedIn provides profile data (positions, education, skills, recommendations, summary) to us after user consent.
    • Purpose: Retrieving user's professional profile data for LinkedIn Profile Evaluator scoring and Career Interview pre-population
    • Scope: r_dma_portability_3rd_party (EEA/Switzerland users only, per Digital Markets Act)
    • Retention: Access tokens are discarded from server memory immediately after data retrieval. We do not maintain ongoing access to LinkedIn accounts.

All processors are contractually bound to GDPR compliance through Data Processing Agreements.

8. Data Retention

We retain your personal data as follows:

  • Profile data: Until you delete your account
  • Posts and content: Until you delete them or your account
  • AI chat logs: Retained for service improvement; you can request deletion
  • Placeholder contacts: Automatically expire after 30 days
  • Activity timelines: Retained as long as the contact relationship exists
  • Deleted data: Recoverable for up to 35 days via point-in-time recovery, then permanently deleted
  • Waitlist data: Until JuntoAI launches or you request deletion
  • Legal compliance data: As required by applicable laws

JuntoAI Kinetic Data Retention

  • Anonymous session data: Automatically deleted after 7 days if no email is provided
  • Identified session data: Automatically deleted after 7 days if no career profile is generated
  • Generated career profiles: Retained for 90 days, then automatically deleted unless you create an account
  • Audio recordings: Processed in real time during the interview; audio chunks are not permanently stored after session completion
  • Uploaded CVs: Retained alongside session data and subject to the same retention periods above
  • Interview transcripts: Retained alongside session data and subject to the same retention periods above

JuntoAI Echo Data Retention

  • Anonymous session data: Automatically deleted after 7 days if no account is created
  • Identified session data: Retained for 90 days, then automatically deleted unless linked to an active account
  • Audio recordings: Processed in real time during the interview; audio chunks are not permanently stored after session completion
  • Uploaded CVs: Retained alongside session data and subject to the same retention periods above
  • Interview transcripts: Retained alongside session data and subject to the same retention periods above
  • Content signals and style profiles: Retained alongside session data and subject to the same retention periods above
  • Generated posts and images: Retained as long as your account is active or until you request deletion
  • Content cycle history: Retained for 90 days per cycle, then automatically deleted
  • LinkedIn OAuth tokens: Stored securely for the duration of your active subscription. Deleted upon account deletion or subscription cancellation.
  • Payment data: Handled by Stripe; JuntoAI retains only transaction records as required for accounting and tax compliance

LinkedIn Data Retention

  • LinkedIn Profile Evaluator data: Evaluation results, assembled profile data, and raw LinkedIn data are retained for 10 days, then automatically deleted unless you create an account
  • LinkedIn Import data (Career Interview): Imported LinkedIn data follows the same retention as CV uploads — 7 days for anonymous sessions, 90 days for generated career profiles
  • LinkedIn access tokens: Discarded from server memory immediately after data retrieval. Never persisted to database or storage.
  • Consent records: Retained for audit and compliance purposes for the duration of the evaluation data retention period

9. International Transfers

Your data may be transferred to and processed in the United States (AWS and Google Cloud Virginia regions). These transfers are protected by EU Standard Contractual Clauses (SCCs) as approved by the European Commission, which are incorporated into our Data Processing Agreements with each processor listed in Section 7. You may request a copy of the relevant SCCs by contacting us at info@juntoai.org.

10. AI-Specific Privacy

JuntoAI uses artificial intelligence extensively. Here's how AI affects your privacy:

  • AI Agents: Your personal AI agent acts autonomously on your behalf based on your goals and preferences
  • Agent-to-Agent Communication: AI agents may communicate with other users' agents to identify opportunities
  • AI-Generated Summaries: We generate AI summaries of user profiles and contacts, which may be visible to other users
  • Opportunity Detection: AI algorithms analyze your profile, skills, and network to identify relevant opportunities
  • AI Transparency Scores: We calculate and display the level of AI involvement in content creation
  • Data Processing: Your prompts and data are sent to OpenAI for processing (see Data Processors section)
  • AI Limitations: AI-generated content may be inaccurate; you are responsible for reviewing AI outputs

11. Web3 Wallet and DID Privacy

If you connect a Web3 wallet:

  • Your wallet address becomes your Decentralized Identifier (DID)
  • Wallet addresses are stored in our database and may be visible to other users
  • We verify wallet ownership through cryptographic signatures
  • You can disconnect your wallet at any time from Settings
  • We do not have access to your private keys or wallet funds
  • Blockchain transactions are public and permanent

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page with an updated "Last updated" date.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at:

Data Controller: JuntoAI Limited
CRO No.: 807583
Registered Office: Drom Upper, Glenbeigh, Co. Kerry, Ireland
Email: info@juntoai.org
Website: juntoai.org