Privacy Policy
Draft for review. Highlighted content requires confirmation before publication.
Last updated: September 23, 2026
This Privacy Policy explains how Coco AI, Inc., doing business as Coco Labs ("Coco Labs," "we," "us," or "our") collects, uses, and shares information about you when you visit cocolabs.ai and related pages we operate (the "Site"), join the Vyb waitlist, contact us, or interact with us in connection with the Site. It also describes the choices and rights you have.
Use of Vyb Studio at vybstudio.ai is covered by the Vyb Studio Privacy Notice, which supplements this Policy for information collected inside the product.
1. Information we collect
Information you give us
- Waitlist requests: name, email address, company, role or job title, and anything you choose to tell us about your team or use case.
- Contact form and email: name, email address, and the contents of your message.
- Beta and design feedback: if you are invited to try Vyb, ratings, thumbs up/down, comments, and other feedback you give about generated designs, along with the prompt or design the feedback relates to.
- Communications: records of your correspondence with us, including survey responses and meeting notes if you speak with our team.
Information collected automatically
- Device and usage data: IP address, browser type and version, operating system, device identifiers, referring URL, pages viewed, links clicked, time spent on pages, and approximate location derived from your IP address.
- Cookies and similar technologies: small files and pixels that recognize your browser. See Section 5.
Information from other sources
- Business contact information from publicly available sources or professional networks (for example, LinkedIn) to verify or enrich waitlist requests.
- Information from our service providers, such as email delivery and open/click statistics from our email platform.
2. How we use information
We use the information we collect to:
- operate, maintain, and improve the Site;
- review waitlist requests, prioritize access, and communicate with you about Vyb and Coco Labs;
- respond to your questions and requests;
- send product updates, research news, and marketing communications, which you can opt out of at any time;
- understand how visitors use the Site so we can improve content and performance;
- detect, prevent, and respond to fraud, abuse, security incidents, and other harmful activity;
- comply with legal obligations and enforce our Terms of Use.
3. How we use feedback to improve our models
Coco Labs builds AI models for design. If you take part in the Vyb beta, we use the feedback you give on generated designs (such as ratings, thumbs up/down, and written comments) to evaluate, improve, and train our models. We pair that feedback with the prompt and the generated output it relates to so the model can learn what "good" looks like.
We do not use your brand assets or the designs you create or export in Vyb to train our models, except to the extent they are part of the specific generated output your feedback refers to. Any use of brand assets or designs beyond this is governed by the Vyb Studio Terms of Service and Privacy Notice.
You can ask us to stop using your feedback for training by emailing privacy@cocolabs.ai. Feedback already incorporated into a trained model cannot be extracted, but we will exclude it from future training runs.
4. How we share information
We do not sell your personal information, and we do not share it with third parties for their own marketing. We share information only as described here:
- Service providers that help us run the Site and our business, under contracts that limit how they may use your information. These currently include:
- Google Cloud Platform (hosting and infrastructure)
- Google Analytics and Google Tag Manager (site analytics)
- Clerk Inc. (waitlist management and email delivery)
- Professional advisers, such as lawyers, accountants, and insurers, where necessary.
- Legal and safety: when we believe disclosure is required by law, regulation, legal process, or governmental request, or to protect the rights, property, or safety of Coco Labs, our users, or others.
- Business transfers: in connection with a merger, financing, acquisition, reorganization, or sale of all or part of our business, subject to this Policy or one that offers equivalent protection.
- With your direction or consent.
We may also share aggregated or de-identified information that cannot reasonably be used to identify you.
5. Cookies and analytics
We use cookies and similar technologies to keep the Site working, remember your preferences, and understand how the Site is used. We use Google Analytics 4, loaded through Google Tag Manager, to collect usage statistics. Google may set its own cookies and process data under its policies; you can learn more at Google's Privacy & Terms and opt out with the Google Analytics Opt-out Browser Add-on.
You can also control cookies through your browser settings. Blocking cookies may affect some Site features. Where required by law, we will ask for your consent before setting non-essential cookies. We honor Global Privacy Control (GPC) signals as a request to opt out of targeted advertising and the sharing of personal information under applicable U.S. state laws.
6. How long we keep information
We keep personal information only as long as needed for the purposes described in this Policy. As a guide:
| Information | Retention |
|---|---|
| Waitlist and contact details | Until you ask us to delete them or 24 months after your last interaction with us, whichever is earlier |
| Contact form messages | 24 months |
| Design feedback used for training | For the life of the models it helped train; excluded from new training on request |
| Analytics data | Up to 14 months (Google Analytics default) |
| Legal, tax, and security records | As required by applicable law |
7. Security
We use reasonable administrative, technical, and physical safeguards to protect personal information, including encryption in transit, access controls, and hosting on Google Cloud Platform. No system is completely secure, and we cannot guarantee the security of your information.
8. Your choices
- Marketing emails: use the unsubscribe link in any email or write to privacy@cocolabs.ai. We may still send you non-marketing messages about your waitlist request.
- Waitlist removal: email privacy@cocolabs.ai and we will remove you.
- Cookies: see Section 5.
- Feedback training: see Section 3.
9. Your privacy rights
Draft review: This section was truncated in the supplied Privacy text. The continuation was found after the Terms of Use and rejoined here. Please confirm the complete section against the corrected source before publishing.
Depending on where you live, you may have rights to access, correct, delete, or receive a copy of your personal information, to object to or restrict certain processing, to opt out of certain sharing, and to withdraw consent. To exercise any right, email privacy@cocolabs.ai. We will verify your request, respond within the time required by law, and will not discriminate against you for exercising your rights. You may authorize an agent to act for you; we may ask for proof of that authorization.
California residents (CCPA/CPRA). In the last 12 months we collected the categories of personal information listed in Section 1: identifiers, professional or employment information, internet or network activity, approximate geolocation, and inferences drawn from feedback and usage. We collected it from the sources and used it for the purposes described above, and disclosed it to the service providers listed in Section 4. We do not sell personal information, and we do not share it for cross-context behavioral advertising. We do not knowingly collect information from anyone under 16. You have the right to know, delete, correct, and opt out, and the right to non-discrimination.
European Economic Area, United Kingdom, and Switzerland. Coco Labs is the controller of your personal information. We process it on these legal bases: performance of a contract or steps at your request (responding to waitlist and contact requests); our legitimate interests (operating and improving the Site, security, business communications with professional contacts, improving our models using feedback); your consent (non-essential cookies and marketing where consent is required); and legal obligations. You may lodge a complaint with your local data protection authority. Because we are based in the United States, your information will be transferred here; we rely on Standard Contractual Clauses and equivalent safeguards where required.
Other U.S. states. Residents of states with comprehensive privacy laws (including Colorado, Connecticut, Virginia, Texas, Oregon, and others) have similar rights of access, correction, deletion, portability, and opt-out. If we decline a request, you may appeal by replying to our response.
10. International transfers
We are headquartered in the United States and our service providers may process information in the U.S. and other countries whose laws differ from yours. We take steps to ensure appropriate safeguards are in place, as described in Section 9.
11. Children
The Site is intended for adults and business users. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us information, contact us and we will delete it.
12. Changes to this Policy
We may update this Policy from time to time. We will post the revised version on the Site and update the "Last updated" date. If a change materially affects how we use information we already hold about you, we will notify you by email or a notice on the Site before it takes effect.
13. Contact us
Questions, requests, or complaints about privacy:
Coco AI, Inc. d/b/a Coco Labs
700 El Camino Real, Suite 120 #1354
Menlo Park, CA 94025
privacy@cocolabs.ai