This Privacy Policy explains how BaboBot LLC (“BaboBot,” “we,” “us,” or “our”) collects, uses, and protects information when you visit our website or use our services.

BaboBot provides an AI-powered information and communication platform designed primarily for schools and educational institutions. This Privacy Policy applies to:

• Visitors to our website

• Individuals who submit contact or demo requests

• Students, parents, faculty, staff, and administrators who use BaboBot through a school

If you are using BaboBot through a school, your school controls how your information is used, and our processing of that data is governed by our agreement with the school, including any applicable Data Privacy Agreement (DPA).

1. Who We Are

BaboBot LLC
188 Brookline Avenue
Boston, MA
Email: privacy@babobot.com

2. How This Policy Is Structured

Because BaboBot serves both website visitors and school communities, this Privacy Policy is divided into two main sections:

• Information collected from website visitors

• Information processed on behalf of schools

If there is any conflict between this Privacy Policy and a school’s written agreement with BaboBot, the school agreement controls.

3. Information We Collect from Website Visitors

When you visit our website, we may collect the following information:

Information You Provide Voluntarily

• Name

• Email address

• Company or school name

• Any information you include in a contact form or demo request

Information Collected Automatically

We may collect limited technical information, such as:

• IP address

• Browser type

• Device information

• Pages visited and time spent on the site

We may use analytics tools in the future (such as Google Analytics) to understand website usage. These tools typically collect online identifiers and usage data, not direct identifiers like names, unless you voluntarily provide them.

4. Information Processed on Behalf of Schools

When BaboBot is used by a school, we process information on behalf of that school, which acts as the Data Controller.

Depending on how a school configures the service, this may include:

Student Information

• First and last name

• Grade or class level

• School email address

• Student ID (such as a Veracross ID)

Parent / Guardian Information

• Name

• Email address

• Relationship to student

Faculty / Staff Information

• Name

• Email address

• Role or title (where applicable)

BaboBot does not collect or process sensitive personal data, such as health records, medical information, IEPs, or special education data.

5. How Information Is Used

We use information to:

• Provide, operate, and maintain the BaboBot service

• Respond to inquiries and demo requests

• Support schools and users

• Improve functionality and performance

• Maintain security and prevent misuse

We do not use personal data for targeted advertising.

6. Schools as Data Controllers

When BaboBot processes information on behalf of a school:

• The school determines what data is provided to BaboBot

• The school controls access, retention, and deletion

• Requests to access, correct, or delete school-related data must be made through the school

BaboBot acts solely as a service provider / data processor in these cases.

7. Children’s Privacy

BaboBot is designed for use by schools.

• Students under the age of 13 may use BaboBot only through school-authorized access

• BaboBot does not collect parental consent directly

• Schools are responsible for obtaining any required parental consent under COPPA

• BaboBot acts as a “school official” with a legitimate educational interest under FERPA

8. AI & Automated Processing

BaboBot uses AI models to generate responses and provide functionality.

• Identifiable personal data is not used to train shared AI models

• Any data used for improvement or training is fully anonymized and de-identified

• Personal data is not used for cross-customer AI training in identifiable form

9. How We Share Information

We do not sell, rent, or trade personal data.

We may share information only with:

• Schools that provide the data

• Trusted service providers (subprocessors) who help us operate the service, such as:

  • Cloud hosting providers

  • Infrastructure and AI services

These providers are bound by confidentiality and data protection obligations.

10. Data Security

We take data security seriously and use administrative, technical, and organizational safeguards, including:

• Encryption of data in transit and at rest

• Role-based access controls

• Secure cloud infrastructure hosted in U.S. regions

No system is 100% secure, but we work to protect information using industry-standard practices.

11. Data Retention

• Website inquiry data is retained as long as necessary to respond to requests or for legitimate business purposes

• School data is retained according to our agreement with the school

• Upon termination or non-renewal of a school’s contract, school data is deleted in accordance with the applicable DPA (generally within 90 days)

12. Your Rights and Choices

Website Visitors

You may request access to or deletion of information you submitted directly to us by contacting privacy@babobot.com.

School Users

If you are a student, parent, or staff member using BaboBot through a school, please contact your school to exercise your privacy rights. We will assist schools in fulfilling such requests.

13. Compliance with Laws

BaboBot is designed to comply with applicable data protection laws, including:

• FERPA

• COPPA

• U.S. state privacy laws

• GDPR, where applicable

14. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the “Last Updated” date and, where appropriate, providing notice.

15. Contact Us

If you have questions about this Privacy Policy or our data practices, contact us at:

privacy@babobot.com