Privacy Policy

1. Who we are and when this policy applies

This Privacy Policy applies across all websites, subdomains, landing pages, portals, hosted forms, demos, applications, and other online properties that Attention Ninja LLC ("Attention Ninja," "we," or "us") owns or operates as part of its services, regardless of the domain name used. This includes attentionninja.com, attn.systems, their subdomains, the Attention System, and other domains and subdomains used to deliver our services. It covers personal information we handle for our websites, inquiries, Blueprint requests, demos, account administration, billing, support, and marketing, as well as our role in processing information for customers as explained below.

For our own website operations, inquiries, account administration, billing, support, and marketing, we determine the purposes of processing and act as a controller or business where those terms apply. When a customer uses our services to manage their own contacts, communications, or other customer records, we generally process that information on their instructions as a processor, service provider, or subprocessor. Their privacy notice applies to their relationship with you, and our Customer Data Processing Addendum governs our processing for them. Contact that business first about its use of your information; we will help route a request we receive.

This distinction also applies when we host or operate a website, page, form, or portal for a customer under their branding or domain. This policy explains Attention Ninja's handling of information; the customer's own privacy notice and responsibilities also apply. Changing the domain or subdomain does not by itself change our obligations under this policy.

A privacy notice explains information practices. Visiting a website, submitting a request, or reading this policy does not by itself authorize every marketing channel, call recording, or optional use of personal information.

2. Information we handle and where it comes from

The information involved depends on what you submit and which services are used. It can include:

• Contact and business information: names, work contact details, business name, website, location, role, and information you provide about business goals or needs.
• Requests and correspondence: form responses, Blueprint and demo requests, emails, support messages, and files or materials you choose to provide.
• Account and transaction information: account identifiers, access permissions, selected services, invoices, payment status, and related transaction records. Payment providers handle payment details entered into their designated payment fields.
• Technical information: IP address, browser and device information, pages or features used, timestamps, referring pages, and identifiers associated with cookies or similar technologies. These details may be personal information even if they do not include your name.
• Customer service records: contacts, appointments, communications, transactions, and other business records processed for a customer, depending on the features enabled.
• AI and voice information: prompts, conversation content, recordings, transcripts, summaries, outputs, and related usage information when the selected feature collects or creates them.

Information comes from you, people authorized to act for your business, your use of the service, connected tools, communications providers, and other sources you authorize. In preparing a Blueprint, we may also review publicly available business information, such as your website and public business listings. Publicly available information is still handled subject to applicable law.

We do not ask you to include sensitive personal information in ordinary inquiry or demo forms. Please do not submit government identifiers, health records, payment-card security codes, or similarly sensitive information there. Customer-provided records or conversation content can contain sensitive information; any service intended to process regulated data requires appropriate configuration and agreements before that use.

3. Why we use information

We use information as appropriate to respond to your request, prepare and deliver a Blueprint or demo, provide and configure agreed services, maintain customer accounts, process billing, offer support, operate authorized communications and automations, protect security, prevent abuse, troubleshoot, understand service performance, meet legal obligations, and resolve disputes.

We may send relevant marketing communications where permitted and subject to your choices. Marketing consent is separate from requesting a Blueprint or receiving necessary service messages. For customer CRM data, the customer's instructions and the Addendum define the permitted purposes. Ownership of our systems does not give us ownership of customer data or permission to use it for unrelated purposes.

4. Service providers and other disclosures

We use providers for functions such as hosting, CRM infrastructure, communications, AI, payment processing, support, and security. Information needed for a selected feature may be processed by its providers under applicable service and data-protection arrangements. Providers and locations can differ by feature and can change. Contact us for information about the providers relevant to your service; customer subprocessor notices and objections are addressed in the Addendum.

We may also disclose information to authorized people in your business; when you direct or authorize a disclosure; to professional advisers subject to appropriate confidentiality; when required by law or valid legal process; as reasonably necessary to protect rights, security, and safety; or in a business transaction such as a merger or sale, subject to applicable protections and notice requirements.

We do not sell customer CRM information, contact lists, or SMS consent records. Our permission to process customer data does not include sharing it for unrelated third-party advertising. Information you intentionally publish or send to others through the service is disclosed as you direct. Independently selected third-party websites or services have their own privacy practices.

5. AI features, calls, and recordings

When an AI feature is used, the information supplied to it and the outputs it creates may be processed by the AI and infrastructure providers needed to deliver that feature. Voice services may process audio, recordings, transcripts, summaries, telephone numbers, and call details when enabled. The use of recording or transcription must be disclosed through the relevant interaction, with consent where required; this policy alone is not recording consent.

Provider processing, storage, and any permitted secondary uses depend on the feature and applicable agreements. We do not represent that every AI provider follows the same retention or model-training practices. Customer data is not licensed to us for training our own general-purpose AI models. A materially different use requiring additional notice or authorization must be addressed before that use. Contact us about a particular feature before submitting sensitive or confidential information to it.

6. Text-message privacy

No mobile information will be shared with third parties/affiliates for marketing/promotional purposes. Support vendors may process the information only to help us provide the service. SMS opt-in details and consent records are excluded from other information-sharing categories and are not provided to third parties for their own use. These restrictions apply even where a broader disclosure category appears elsewhere in this policy, subject to legally required disclosures.

Your consent choices determine which text programs you receive. Reply STOP to unsubscribe or HELP for assistance, or contact support@attentionninja.com. Marketing consent is optional and is not a condition of purchase. See our SMS terms for additional details. We may retain a limited record of an opt-out so that we can continue to honor it.

7. Cookies, analytics, and privacy signals

Our websites and embedded services may use cookies or similar technologies to support functionality, security, preferences, and service measurement. The technologies involved depend on the page and feature you use. Browser settings can limit or remove cookies, although some functions may be affected. Where optional tracking requires consent or an opt-out, the applicable controls must be provided for that tracking.

Legacy browser Do Not Track signals do not have a uniform operational standard. That does not override rights associated with a legally recognized opt-out preference signal, including Global Privacy Control where applicable. We honor valid opt-out requests and recognized signals to the extent required for the processing we perform. Contact us if you need help exercising a choice or identifying tracking relevant to a particular page.

8. Retention, return, and deletion

We do not apply one fixed retention period to every type of information. We determine retention based on the purpose of collection, whether the service or relationship is active, customer instructions, the sensitivity of the information, applicable provider settings, and legal, accounting, security, and dispute-related requirements.

Inquiry and Blueprint information is retained as needed to handle the request and the related business relationship. Customer records, recordings, transcripts, and AI records depend on the service configuration, customer instructions, and provider arrangements. Billing and consent records may need to be retained after service ends for legal obligations, dispute handling, or honoring communication choices.

Customers retain their data rights after termination and may request return or deletion as described in the Terms and Addendum. Do not assume data will remain available indefinitely after access ends. We delete or de-identify information when it is no longer needed for the applicable purposes, subject to lawful retention exceptions. Copies in backups may remain until the relevant backup cycle completes; they remain protected and are not used for ordinary business purposes. Contact us for retention information or a deletion request concerning a specific service or record.

9. Security and confidentiality

We use reasonable administrative, technical, and organizational safeguards appropriate to the information and processing risks. Access should be limited to authorized people and providers who need it for their work. No website, transmission method, or storage system can be guaranteed completely secure. Report suspected unauthorized access or a privacy concern to support@attentionninja.com. We address incidents and provide notices as required by applicable law and our customer agreements.

10. Your choices and privacy rights

To ask about, access, correct, export, or delete personal information, or to object to or restrict a use where applicable, email support@attentionninja.com. You do not need to create an account. Tell us enough to locate the relevant relationship or record; do not email passwords, full payment details, or unnecessary sensitive documents. We may take proportionate steps to verify identity or an agent's authority before disclosing or deleting information.

You can unsubscribe from marketing emails using their unsubscribe link and opt out of texts as described above. Necessary account, billing, security, and requested-service communications may continue. Withdrawing an optional consent does not affect processing that lawfully occurred before withdrawal.

Depending on your location and the law that applies, rights may include knowing the categories, sources, purposes, and recipients of personal information; access and portability; correction and deletion; limits on certain sensitive-data uses; and opt-outs from sale, sharing for targeted advertising, or qualifying profiling. These rights have legal exceptions. We will respond within applicable deadlines, explain an applicable refusal or extension, and will not unlawfully discriminate because you exercise a right. Where an appeal right applies, reply to our decision or email us with "Privacy appeal" in the subject. You may also contact your appropriate regulator.

California residents may request information about applicable direct-marketing disclosures under California's Shine the Light law. Where the CCPA applies, the rights above include its applicable sale/sharing opt-outs, correction, deletion, access, and sensitive-information protections. Listing a right here does not mean that every privacy statute applies to every record or business activity.

11. International information

We are based in the United States, and we and our providers may process information in the United States or other countries relevant to the selected services. Where European or UK data-protection law applies, our lawful bases depend on the activity and may include performing a contract or requested pre-contract steps, legitimate interests balanced against your rights, legal obligations, or consent where required.

Where required, restricted international transfers must use an applicable lawful safeguard, such as approved contractual clauses, an applicable adequacy arrangement, or another valid legal mechanism. Contact us for information about the safeguards for your service. We do not claim an independent privacy-framework certification merely because a provider may hold one. Applicable European and UK rights can include access, correction, deletion, restriction, objection, portability, withdrawal of consent, and a complaint to a supervisory authority.

12. Children

Our public business services are not directed to children under 16, and we do not knowingly collect personal information directly from children under 16 through those services. If you believe a child has provided information directly to us, contact us so we can investigate and take appropriate action. Customers are responsible for ensuring that their own use of the service, including any information about minors, has the required safeguards and permissions.

13. Policy updates and contact

We will identify revisions by the date on this page and provide additional notice of material changes where required. We will obtain additional consent where required before using information for a materially different purpose. A policy update does not retrospectively authorize an otherwise impermissible use.

Attention Ninja LLC
478 Maymont Dr
Ballwin, MO 63011
support@attentionninja.com