Privacy policy
Sona, by Mojo Systems LLC · Last updated October 23, 2026
In short: Sona connects the inboxes you choose to the AI assistant you choose, and only does things with your email when you ask (or, if you switch on Jex follow-ups for an inbox, when a follow-up rule you approved runs). We don't sell your data, we don't use it for ads, and we don't use it to train AI models. You can disconnect an inbox or delete your Sona data at any time.
1. Who we are
Sona is a service of Mojo Systems LLC, a Pennsylvania limited liability company ("we", "us"). This policy covers Sona at sona.mojosystems.io and the Sona connector you add to an AI assistant. Mojo Systems' other products are covered by the Mojo Systems privacy policy.
2. What we collect
- Your account details. When you sign in with Google or Microsoft, we receive your name, email address and an account identifier from that provider.
- Access to the inboxes you connect. For each inbox, the provider gives Sona a sign-in token that lets it read, organize, draft and send email and read and create calendar events on your behalf. We store these tokens encrypted. For providers that don't offer this kind of sign-in, you may give Sona an app password instead, which we store encrypted in the same way.
- What you tell Sona about each inbox. The name and description you give an inbox (which you can ask your AI assistant to draft by reviewing the inbox for you), and short notes your assistant saves while helping you (for example, "invoices go out from billing@").
- Your on/off choices. Whether each inbox, and each calendar, is switched on for Sona, whether Jex follow-ups may use each inbox (off unless you change it), and whether your AI assistant may read the text of messages in each inbox. With message text off, Sona passes on only senders, recipients, subjects, dates and labels, never what an email says. For those inboxes Sona asks your email provider for headers only, so the text of your messages never reaches Sona at all. Searches in that inbox then match only subject lines and senders, replies don't quote the original message, and security codes in subject lines are removed.
- Your plan. If you pay for Sona, Stripe handles the payment. We keep only your Stripe customer and subscription references and whether your plan is active; your card details go to Stripe, not to us.
- Inbox counts. To show you how busy each inbox is, Sona counts how many messages it holds, how many are unread and how many arrived in the last 7 days. This uses counts only, never senders, subjects or message text, and the numbers are kept in memory for up to an hour, not stored.
- A log of actions Sona takes for you. When Sona sends an email, saves a draft, changes a message or creates a calendar event, we record the type of action, the recipients or guests, and the time. For Jex follow-ups we also record the name of the Jex rule and a reference to the Jex lead the email answered. We do not record subject lines, event titles or message text.
- Request counts. To keep Sona fair for everyone, we count how many requests your assistant makes each day. If you come close to or reach a fair-use limit, we note which kinds of request were made (for example "search email, 40 times") and how Sona responded. These records hold no addresses, subjects or message text, and are deleted after 90 days.
- Emails cleaned. We count how many emails Sona has organized for you, as totals, with no addresses or content. You see your own total; we only share the total across everyone.
- Very little technical data. Sona does not keep a log of your requests. If something breaks, the error is written to our server's system log, which rotates automatically. Sona's pages use a single session cookie to keep you signed in and no analytics or ad trackers.
Sona does not store the contents of your email or calendar, and nothing reads your mail in the background, apart from two things you set up yourself and that are described below: your Sona rules, and the bounce check for Jex follow-ups. Neither reads message text, and neither ever runs in a Private inbox. Sona reaches your inboxes only when you ask: when you ask your assistant to search, read or summarize, Sona fetches what's needed from your provider at that moment and passes it to your assistant. When you open your Sona pages, they show your inbox counts, today's events and recent unread messages from people (for these Sona fetches only the sender, subject, date and labels, never message text); that is shown on the page and not stored.
3. How we use it
- To do what you ask through your AI assistant: search and read email, draft and send replies from the right address, organize messages (including cleaning up groups of messages you choose, after you confirm a preview), and read, create, change or delete calendar events.
- To pick the right inbox for a request, using your descriptions and saved notes.
- To keep the service secure and working, and to answer your support requests.
Sona rules (only if you create them). You can ask your assistant to set up a rule for an inbox, such as "label anything from billing@ as Invoices". Every few minutes Sona asks your email provider for new messages matching that rule's search; your provider does the matching and returns only message references, and Sona applies the actions you chose. Rules can only label, archive, mark as read or star messages; they never send, forward or delete anything. Nothing runs automatically in a Private inbox: rules can't be created there, and switching an inbox to Private pauses its rules until you resume them. You can pause or delete a rule through your assistant, or delete it on the inbox's page.
Jex follow-ups (off unless you turn them on). If you also use Jex, Mojo Systems' app for capturing leads, you can let follow-up rules you approved in Jex use an inbox. You choose, for each inbox, whether Jex follow-ups are off, saved as drafts, or sent. This is separate from your AI assistant's trust level, except that a Private inbox can't use Jex follow-ups at all: switching an inbox to Private turns them off. When a rule runs, Jex gives Sona emails it has already written from your own Jex templates, each addressed only to someone who filled in one of your Jex forms and each ending with your business address and a link to stop further emails. Sona then saves them as drafts or sends them from that inbox, up to 50 a day. Before sending, Sona checks the senders and subject lines of that inbox's last 3 days for bounce notices, and stops if several have arrived since its last automatic emails; it reads no message text for this and keeps nothing from it. Sona tells Jex only whether each follow-up was sent or saved as a draft, never anything from your inbox. You can turn Jex follow-ups off at any time on the inbox's page.
We do not use your email or calendar data for advertising, we do not sell it, and we do not use it to train AI models, ours or anyone else's.
4. Your AI assistant
Sona works inside an AI assistant you choose, such as Claude or ChatGPT. When you ask that assistant for something that involves your email or calendar, Sona sends the relevant information to it so it can answer. That provider's handling of the information is governed by its own terms and privacy policy, and your assistant may keep conversations under its own settings. You can choose whether Claude or ChatGPT uses your chats for training in that app's privacy settings. Sona is designed to draft first and to send only after you confirm; your assistant shows you the email before it goes out. (Jex follow-ups don't go through your AI assistant; they follow each inbox's Jex setting, described above.)
5. Google user data
Sona's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Sona does not use Google Workspace data to develop, improve or train generalized AI or machine learning models. In particular, we use Gmail and Google Calendar data only to provide the features you use in Sona, we transfer it only to your chosen AI assistant at your request or as needed for security or legal reasons (Jex receives none of it, only whether each follow-up was sent or drafted), we don't use it for advertising, and no person at Mojo Systems reads it unless you ask us to for support, it's needed for security, or the law requires it. The same commitments apply to data from Microsoft and other email providers.
6. Sharing
We share information only: with the AI assistant you connect, at your direction; with the providers below that help run Sona, under confidentiality obligations; and when required by law or to protect the safety and security of users and the service.
- Hostinger rents us the servers Sona runs on, in Boston, United States.
- DigitalOcean hosts the Mojo Systems app (app.mojosystems.io), where your Sona home and sign-in live, in New York, United States.
- Cloudflare provides our web addresses and carries traffic to mojosystems.io and app.mojosystems.io.
- Mojo Systems sign-in. You sign in to Sona with your Mojo Systems account, which shares your name and email address with Sona.
- Stripe processes payments for Sona plans.
- Google and Microsoft hold your email and calendars; Sona connects to them on your behalf.
If Mojo Systems is involved in a merger or sale, Sona data may transfer as part of that, under this policy's protections.
7. Storage and deletion
- Sona's data is stored on our servers in the United States (see Sharing for who hosts them).
- When you disconnect an inbox, we ask Google to revoke Sona's access (Microsoft does not offer this, so we delete the sign-in) and delete its description and notes right away.
- "Delete my Sona data" on your Inboxes page, or disconnecting your last inbox, deletes your Sona account, including the action log, right away, and cancels any Sona plan.
- The action log keeps the last 90 days.
- If an inbox stays disconnected by Google or Microsoft for 30 days, we delete it as if you had removed it.
- Expired sign-in codes and tokens are deleted daily.
- If you don't use Sona for 11 months, we email you. If you still haven't used it a month later (12 months in all), we delete your Sona account. Opening Sona, signing in or using it from your AI assistant cancels this.
- You can also revoke Sona's access from your Google or Microsoft account settings at any time; Sona will then ask you to reconnect that inbox or remove it.
8. Security
Sign-in tokens and app passwords are encrypted at rest, connections use HTTPS, and the tokens Sona issues to your AI assistant are stored only in hashed form. No system is perfectly secure; if we learn of a breach that affects you, we'll tell you as the law requires.
9. Your choices and rights
You can see, change or delete what Sona knows about each inbox from your Sona inboxes, switch any inbox or calendar off, and disconnect inboxes there. Depending on where you live, you may have further rights to access, correct, delete or port your information. Email build@mojosystems.io with the subject "Sona privacy request" and we'll respond within 30 days. We won't treat you differently for making a request.
We do not sell or share your personal information as those terms are used in US state privacy laws. Sona's data is stored in the United States; if you're in the EU or UK, we process it to provide the service you asked for (performance of a contract). Sona is not meant for children under 16.
10. Changes
If we change this policy in a way that matters, we'll update the date above and tell you on your Sona page before the change takes effect.
11. Contact
Mojo Systems LLC
1319 N Franklin St, Philadelphia, PA 19122
build@mojosystems.io