Privacy You Can Trust Across Schools and Camps

This Privacy Policy explains how BaboBot LLC (“BaboBot,” “we,” “us,” or “our”) collects, uses, and protects information when you visit our website or use our services.

BaboBot provides an AI-powered information and communication platform designed primarily for educational institutions, camps, and similar organizations (“Institutions”). This Privacy Policy applies to:

• Visitors to our website
• Individuals who submit contact or demo requests
• Students, campers, parents, guardians, faculty, staff, counselors, and administrators who use BaboBot through an Institution

If you are using BaboBot through an Institution, that Institution controls how your information is used, and our processing of that data is governed by our agreement with the Institution, including any applicable Data Privacy Agreement (DPA).

1. Who We Are

BaboBot LLC
188 Brookline Avenue
Boston, MA
Email: privacy@babobot.com

2. How This Policy Is Structured

Because BaboBot serves both website visitors and Institution communities, this Privacy Policy is divided into two main sections:

• Information collected from website visitors
• Information processed on behalf of Institutions

If there is any conflict between this Privacy Policy and an Institution's written agreement with BaboBot, the Institution agreement controls.

3. Information We Collect from Website Visitors

When you visit our website, we may collect the following information:

Information You Provide Voluntarily

• Name
• Email address
• Organization name (such as a school or camp)
• Any information you include in a contact form or demo request

Information Collected Automatically

We may collect limited technical information, such as:

• IP address
• Browser type
• Device information
• Pages visited and time spent on the site

We may use analytics tools in the future (such as Google Analytics) to understand website usage. These tools typically collect online identifiers and usage data, not direct identifiers like names, unless you voluntarily provide them.

4. Information Processed on Behalf of Institutions

When BaboBot is used by an Institution, we process information on behalf of that Institution, which acts as the Data Controller.

Depending on how an Institution configures the service, this may include:

Participant Information (Students / Campers)

• First and last name
• Grade, class, age group, cabin, or session level
• Email address (where applicable)
• Participant ID (such as a Veracross ID, CampInTouch ID, or other Institution-issued identifier)

Parent / Guardian Information

• Name
• Email address
• Relationship to participant

Faculty / Staff / Counselor Information

• Name
• Email address
• Role or title (where applicable)

BaboBot does not collect or process sensitive personal data, such as health records, medical information, IEPs, special education data, or camper health forms.

5. How Information Is Used

We use information to:

• Provide, operate, and maintain the BaboBot service
• Respond to inquiries and demo requests
• Support Institutions and users
• Improve functionality and performance
• Maintain security and prevent misuse

We do not use personal data for targeted advertising.

6. Institutions as Data Controllers

When BaboBot processes information on behalf of an Institution:

• The Institution determines what data is provided to BaboBot
• The Institution controls access, retention, and deletion
• Requests to access, correct, or delete Institution-related data must be made through the Institution

BaboBot acts solely as a service provider / data processor in these cases.

7. Children's Privacy

BaboBot is designed for use by Institutions that serve children and young people, including schools and camps.

• Children under the age of 13 may use BaboBot only through Institution-authorized access
• BaboBot does not collect parental consent directly
• Institutions are responsible for obtaining any required parental consent under COPPA
• In the school context, BaboBot acts as a “school official” with a legitimate educational interest under FERPA
• In the camp context, BaboBot operates under the direction and authority of the camp, consistent with the parental permissions the camp has obtained

8. AI & Automated Processing

BaboBot uses AI models to generate responses and provide functionality.

• Identifiable personal data is not used to train shared AI models
• Any data used for improvement or training is fully anonymized and de-identified
• Personal data is not used for cross-customer AI training in identifiable form

9. How We Share Information

We do not sell, rent, or trade personal data.

We may share information only with:

• Institutions that provide the data
• Trusted service providers (subprocessors) who help us operate the service, such as:
  • Cloud hosting providers
  • Infrastructure and AI services

These providers are bound by confidentiality and data protection obligations.

10. Data Security

We take data security seriously and use administrative, technical, and organizational safeguards, including:

• Encryption of data in transit and at rest
• Role-based access controls
• Secure cloud infrastructure hosted in U.S. regions

No system is 100% secure, but we work to protect information using industry-standard practices.

11. Data Retention

• Website inquiry data is retained as long as necessary to respond to requests or for legitimate business purposes
• Institution data is retained according to our agreement with the Institution
• Upon termination or non-renewal of an Institution's contract, Institution data is deleted in accordance with the applicable DPA (generally within 90 days)

12. Your Rights and Choices

Website Visitors

You may request access to or deletion of information you submitted directly to us by contacting privacy@babobot.com.

Institution Users

If you are a participant, parent, guardian, or staff member using BaboBot through an Institution, please contact your Institution to exercise your privacy rights. We will assist Institutions in fulfilling such requests.

13. Compliance with Laws

BaboBot is designed to comply with applicable data protection laws, including:

• FERPA (where applicable to schools)
• COPPA
• U.S. state privacy laws
• GDPR, where applicable

14. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the “Last Updated” date and, where appropriate, providing notice.

15. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at:

privacy@babobot.com