Privacy Policy

JOJO is a private knowledge assistant provided by Grupo Noa International ("we", "us") to its employees and authorized users. JOJO answers work questions using your organization's own documents, and shows the source for every answer. This policy explains what information JOJO processes, why, and the choices you have.

Information we process

• Account and identity. When you sign in — with your organization's Microsoft account (Microsoft Entra ID) or a JOJO email-and-password account — we process your name, work email, a unique account identifier, your assigned roles, and your department memberships. Passwords for JOJO accounts are stored only as salted hashes and are never kept in readable form.
• Content you provide. The questions you ask, the answers returned to you, any ratings or corrections you submit, and any documents or text that authorized users upload to the knowledge base.
• Usage and audit records. A record of queries and answers (kept for security, quality, and compliance), timestamps, and the departments a request was scoped to.
• Technical data. Standard server information such as IP address and request metadata, used to operate and secure the service.

How we use this information

• Authenticate you and control who can see what, by role and department.
• Retrieve and generate answers from your organization's own documents.
• Maintain an audit trail and improve answer quality.
• Operate, secure, and support the service.

We do not use your information for advertising, and we do not sell it.

Service providers we share with

To run JOJO we rely on a small number of processors, who handle data only to provide their function:

• Microsoft (Entra ID / Azure AD) — sign-in and identity.
• OpenAI — to convert text into search embeddings and to generate answers. When you ask a question, that question and the relevant passages retrieved from your organization's documents are sent to OpenAI to produce the response.
• Hosting and infrastructure providers — to store data and run the service.

Storage and security

Data is transmitted over encrypted connections (HTTPS/TLS). Access is restricted by role and department using row-level security, and uploaded files are held in access-controlled storage. No method of transmission or storage is perfectly secure, but we work to protect your information using appropriate technical and organizational measures.

Data retention

We keep your information while your account and your organization's use of JOJO are active, and as needed to meet security and legal obligations. On request from your organization, we delete or return the relevant data.

Your rights

Depending on where you live, you may have rights to access, correct, or delete your personal data. Because JOJO is provided to you by your employer, please direct such requests to your organization's administrator, or contact us at the address below.

Children

JOJO is a workplace tool for employees and authorized users. It is not directed to children and is not intended for anyone under 16.

International processing

Your information may be processed in countries other than your own, including the United States, with appropriate safeguards in place.

Changes to this policy

We may update this policy from time to time. Material changes will be posted on this page with a new effective date.

Contact

Grupo Noa International
dev@websols.net

This policy describes the JOJO application. Your organization may have its own additional policies governing how it uses JOJO and your data.