What we collect, why, and how to ask us to delete it.

Short version

We collect what you give us in our forms, the billing details needed to run a subscription, and bare-minimum web analytics. Emails we collect come from adults — our course and printables flows are parent-gated. We never sell your data. Ever.

What we collect

• Waitlist:your email, your kids' age range(s), an optional ZIP code and child count, and optional comments. Age ranges describe your family — we never ask for a child's name or birthdate.
• Pricing survey, contact form, feedback widget, event forms: your email plus whatever you type into the form (the feedback widget also records which page you were on).
• Blog and printables subscriptions:your email. The printables list is adult-only — you confirm you're a parent or guardian (18+), then confirm by clicking a link we email you (double opt-in).
• AI Foundations course (/learn):a parent or guardian's email (confirmed by a required affirmation), an optional learner first name, lesson progress, and the learner's one-sentence reflections. We email progress summaries to the adult. We do not collect learners' own emails.
• Activities Pass billing: handled by Stripe. We store your email, subscription status, and order history; Stripe stores your payment card. We never see your full card number.
• Sign-in: members sign in with email magic links — no passwords stored.
• Abuse prevention:a hashed (not raw) version of your IP per form submission, and we may check an IP's reputation against an anti-abuse service when a submission looks automated.
• Anonymized analytics via Vercel Analytics and Speed Insights. No cross-site tracking, no advertising cookies.

Cookies

• Course progress (hibot_learner):a random ID — it contains no email or personal information — so lessons remember your learner's progress.
• Session cookies when a member signs in (secure, HTTP-only).

That's it. No tracking or advertising cookies.

Who processes it

We use a small set of service providers to run the site: Vercel (hosting and analytics), Neon (database), Resend (email delivery), and Stripe (payments). Each receives only what it needs to do its job. We do not share your data with advertisers, data brokers, or marketing partners.

What we do with it

We email you about Hi, Bot — programs, openings, the Builder Fellowship — only if you opted in to follow-ups. Transactional email (confirmations, receipts, course summaries you requested) is sent regardless. You can unsubscribe from marketing in any email, in one click.

Children's privacy

Hi, Bot is built for families with kids ages 8–16, and we design every form accordingly: the emails we collect belong to adults. The course and printables flows require a parent/guardian (18+) affirmation before any email is accepted. The only learner information we keep is an optional first name, lesson progress, and short reflections — and we ask learners not to include personal information in reflections.

Parents and guardians: you can review what we hold about your family, ask us to delete it, or withdraw consent at any time — email hello@hibot.space. We will never condition a child's participation on providing more information than is reasonably necessary. If we ever discover we've collected personal information directly from a child under 13, we'll delete it promptly. When in-person programs launch, enrollment data will be covered by a separate, age-appropriate agreement.

How to delete your data

Email hello@hibot.spaceand say "please delete my data." We'll do it within 14 days and confirm. (Records we're legally required to keep, like payment records, are retained as required and then deleted.)

Changes

If we change this policy in a way that matters, we'll update the date below and note the change. Material changes to how we handle children's information will be communicated to affected parents directly.

Last updated: June 10, 2026