Joshua Privacy Policy
Effective Date: July 24, 2025
1. Who We Are
Joshua is a web application and SMS-based chatbot operated by Penzu Inc., 124 Merton Street, Suite 407, Toronto, Ontario, Canada M4S 2Z2 ("Joshua," "we," "us," or "our"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you useJoshua from the United States or Canada.
2. Scope of this Policy
This Policy applies to:
- joshua.faith (and any sub-domains)
- SMS interactions with the Joshua chatbot
It does not cover any third-party websites or services that may link to or from Joshua.
3. Information We Collect
| Category | Examples | Purpose |
|---|---|---|
| Account & Contact Data | Name, email address, optional profile details | Create and manage your Joshua account |
| Phone Number | The number you use for SMS chat | Route SMS messages; never shared or sold |
| Chat Content | Messages you send or receive via the chatbot | Generate responses and improve service |
| Usage Data & Device Info | IP address, browser type, device identifiers, pages viewed, links clicked, timestamp | Security, troubleshooting, analytics |
| Cookies & Similar Tech | Session cookies, analytics cookies (Google Analytics, Mixpanel) | Remember preferences, measure traffic |
We do not intentionally collect information from anyone under 13 years of age.
4. How We Use Your Information
- Provide and maintain the Service
- Personalize your experience
- Protect the security and integrity of Joshua
- Analyze usage to improve performance (Google Analytics, Mixpanel)
- Comply with legal obligations and resolve disputes
- Communicate with you about updates or support
5. Legal Bases & Your Rights
| Jurisdiction | Primary Laws | Your Key Rights* |
|---|---|---|
| Canada | Personal Information Protection and Electronic Documents Act (PIPEDA), provincial counterparts | Access, correction, withdrawal of consent, complaint to Privacy Commissioner |
| United States | State privacy statutes (e.g., CCPA/CPRA for CA residents) | Access, deletion, correction, opt-out of "sale"/"sharing," non-discrimination |
* You can exercise these rights by contacting us (Section 13).
6. When We Share Information
We do not sell or otherwise disclose any user information except in the following cases:
- Service Providers
- OpenAI - processes chat content solely to generate chatbot replies, no account or contact information shared
- Google Analytics & Mixpanel - analyzes aggregate anonymized traffic and feature usage, can be opted-out at any time
- Legal & Safety - to comply with law, enforce our Terms, or protect users
- Business Transfers - if we merge, acquire, or sell assets (users will be notified)
All service providers are bound by contracts that prohibit them from using data for any purpose outside their work for Joshua.
7. International Transfers
Because Joshua's servers and some vendors (e.g., OpenAI in the U.S.) are located outside Canada, your information may be processed in other countries. We use contractual safeguards (such as Standard Contractual Clauses) where required to protect your information.
8. Security
We employ technical, administrative, and physical controls (TLS encryption, access controls, regular audits) to protect your information. No system is 100% secure, so we cannot guarantee absolute security.
9. Data Retention
We keep personal information only as long as necessary for the purposes outlined in this Policy, unless a longer period is required or permitted by law. Chat messages may be retained for up to 30 days for service quality and safety checks, then either anonymized or deleted.
10. Your Choices
- SMS Opt-Out: Text STOP to end SMS communications.
- Cookies: Adjust browser settings to refuse analytics cookies.
- Marketing Emails: Click "unsubscribe" in any email we send.
11. Children's Privacy
Joshua is not directed to children under 13. If we learn we have collected personal information from a child under 13, we will delete it promptly.
12. Changes to This Policy
We may update this Privacy Policy from time to time. Material changes will be posted on this page with a new “Effective Date,” and we may notify you via email or SMS.
13. Contact Us
Penzu Inc.
Attn: Privacy Officer
124 Merton Street, Suite 407
Toronto, Ontario, Canada M4S 2Z2
Email: privacy@penzu.com
If you reside in Canada and are not satisfied with our response, you may contact the Office of the Privacy Commissioner of Canada. California residents may also reach out to the California Attorney General regarding CCPA matters.
Last reviewed: July 24, 2025