Privacy Policy

This Privacy Notice for The Human Collab (doing business as The Human Co.) describes how and why we might access, collect, store, use, and/or share your personal information when you use our Co.llab service, including when you visit collab.thehumanco.org or engage with us in related ways.

Summary of key points

What personal information do we process? When you visit or use our Services, we may process personal information depending on how you interact with us. The personal information you disclose to Co.llab is limited to your email address (and, optionally, a tag identifying which form you signed up through).

Do we process sensitive personal information? No.

Do we collect information from third parties? No.

How do we process your information? We process information to deliver the prompt pack you signed up for, notify you when Co.llab opens, and share occasional updates relevant to Co.llab and instructional design.

With whom do we share personal information? With two service providers only: MailerLite (our email processor) and Vercel (our hosting provider). Both are contractually bound to process data on our behalf.

How do we keep your information safe? We implement technical and organizational security measures, though no system is 100% secure.

What are your rights? Depending on your location, you may have rights regarding your personal information, including access, correction, and deletion rights.

How do you exercise your rights? Submit a request or contact us at paul@thehumanco.org.

What information do we collect?
How do we process your information?
What legal bases do we rely on?
When and with whom do we share your personal information?
What is our stance on third-party websites?
Do we use cookies and other tracking technologies?
Do we offer artificial intelligence-based products?
How long do we keep your information?
How do we keep your information safe?
Do we collect information from minors?
What are your privacy rights?
Controls for Do-Not-Track features
Do United States residents have specific privacy rights?
Do we make updates to this notice?
How can you contact us about this notice?
How can you review, update, or delete the data we collect?

1. What information do we collect?

Personal information you disclose to us

We collect personal information that you voluntarily provide to us when you sign up for the Co.llab prompt pack, express an interest in Co.llab, or otherwise contact us.

Personal information provided by you. Specifically:

Your email address, when you submit a signup form on any page of the site
Optionally, a tag (e.g. ld-prompt-pack) identifying which form you signed up through, so we can send you the right content

We do not currently collect names, phone numbers, mailing addresses, job titles, payment details, or any other personal information beyond what is listed above.

Sensitive information. We do not process sensitive information.

Payment data. Co.llab is not currently a paid product — it is in closed beta with 80+ testers, with public release when the product is ready. When Co.llab becomes available for purchase, this Privacy Notice will be updated to describe the payment processor we use and the payment data we handle.

Information automatically collected

We automatically collect certain information when you visit or use the site. This information does not reveal your specific identity (like your name or contact information) but may include device and usage information. This information is primarily needed to maintain the security and operation of our Services.

The information we collect automatically through our hosting provider Vercel includes:

Log data. IP address, browser type, timestamps, pages visited, and referrer URL, recorded by Vercel as standard server logs for security and performance purposes.
Device data. Basic information about the device you use to access the site (operating system, browser version) as it appears in the User-Agent string.

We do not use Google Analytics, Facebook Pixel, or any third-party advertising or behavioural analytics service on the Co.llab site.

2. How do we process your information?

We process your personal information for a limited set of reasons:

To deliver the prompt pack you signed up for. Your email is passed to our email processor (MailerLite), which triggers the welcome email containing the download link.
To notify you when Co.llab opens. You signed up as part of the Co.llab waitlist; we will email you when the product becomes available.
To send occasional relevant updates. Product updates, instructional-design content, and news about Co.llab's development. You can unsubscribe at any time.
To maintain the security of the Services. Standard server logs help us detect and prevent abuse.
To comply with law. If we are legally required to retain or disclose information.

We do not use your information for advertising, profiling, or automated decision-making.

3. What legal bases do we rely on to process your information?

We only process your personal information when we believe it is necessary and we have a valid legal reason (legal basis) to do so under applicable law.

If you are located in the UK, the EU, or the EEA, this section applies to you.

The UK GDPR and General Data Protection Regulation (GDPR) require us to explain the valid legal bases we rely on in order to process your personal information. We rely on the following:

Consent. We process your email on the basis of your consent, given when you submit the signup form. You can withdraw your consent at any time by unsubscribing from our emails or emailing us.
Legal obligations. We may process your information where necessary for compliance with legal obligations, such as to cooperate with a regulatory authority or defend our legal rights.
Legitimate interests. We process basic server logs under our legitimate interest in maintaining a secure and reliable service.

4. When and with whom do we share your personal information?

We share your data only with the service providers who perform services for us on our behalf. These third parties are contractually required to process data only as instructed by us and to protect the security of that data.

The third parties we share personal information with are:

MailerLite — our email service provider. When you submit the signup form, your email and tag are sent to MailerLite, which stores them and delivers the welcome email and any future communications. MailerLite privacy policy.
Vercel — our hosting provider. Vercel serves the website and logs standard request data (IP, user agent, timestamps) for security and performance monitoring. Vercel privacy policy.

We do not sell or license your personal information to any third party.

Business transfers. We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.

5. What is our stance on third-party websites?

The Co.llab site may link to third-party websites (for example: The Human Stack on Substack, MailerLite's own pages, competitor authoring tools referenced in our blog). We do not make any guarantee regarding any such third parties, and we will not be liable for any loss or damage caused by the use of such third-party websites. The inclusion of a link to a third-party website does not imply an endorsement by us. Any data collected by third parties is not covered by this Privacy Notice. You should review the policies of such third parties directly.

6. Do we use cookies and other tracking technologies?

We do not use tracking or advertising cookies on the Co.llab site. Our hosting provider (Vercel) may set essential cookies required to operate the website — for example, to protect against abuse or maintain session state. These essential cookies do not identify you and are not shared with advertisers.

We do not use Google Analytics, Facebook Pixel, or any behavioural tracking service. If we add analytics in the future, we will ask for your consent first and update this page.

7. Do we offer artificial intelligence-based products?

The Co.llab website (the pages at collab.thehumanco.org) does not offer AI-based products or AI-powered features to you as a visitor. No AI processes your input on this site.

The Co.llab desktop application — currently in closed beta — does use artificial intelligence to build elearning courses. That application is a separate product governed by its own terms, which will be published at launch. A key feature of the Co.llab desktop app is that users bring their own Anthropic API key, which means course-building data is sent directly between the user's machine and Anthropic's Claude service — not through our servers.

8. How long do we keep your information?

We will only keep your personal information for as long as it is necessary for the purposes set out in this Privacy Notice, unless a longer retention period is required or permitted by law. In practice, this means we keep your email on our Co.llab waitlist until you unsubscribe or request deletion. If you unsubscribe, MailerLite retains a suppression record (your email, marked unsubscribed) to prevent accidental re-subscription. You can request deletion of that record too.

When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize it, or, if this is not possible (for example, because the information is held in backup archives), we will securely store your personal information and isolate it from further processing until deletion is possible.

9. How do we keep your information safe?

We have implemented appropriate and reasonable technical and organizational security measures designed to protect the security of any personal information we process. However, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information. Transmission of personal information to and from our Services is at your own risk.

10. Do we collect information from minors?

We do not knowingly collect, solicit data from, or market to children under 18 years of age or the equivalent age as specified by law in your jurisdiction. By submitting your email, you represent that you are at least 18 or the equivalent age as specified by law in your jurisdiction. If we learn that personal information from users less than 18 years of age has been collected, we will deactivate the record and take reasonable measures to promptly delete such data. If you become aware of any data we may have collected from children under age 18, please contact us at paul@thehumanco.org.

11. What are your privacy rights?

Depending on your state of residence in the US or in some regions such as the European Economic Area (EEA), United Kingdom (UK), Switzerland, and Canada, you have rights that allow you greater access to and control over your personal information.

In some regions (like the EEA, UK, Switzerland, and Canada), you have certain rights under applicable data protection laws. These may include:

The right to request access and obtain a copy of your personal information
The right to request rectification or erasure
The right to restrict the processing of your personal information
If applicable, the right to data portability
The right not to be subject to automated decision-making (we do not currently use automated decision-making)
The right to object to processing

You can make such a request by contacting us using the details in the "How can you contact us about this notice?" section below. We will consider and act upon any request in accordance with applicable data protection laws.

If you are located in the EEA or UK and you believe we are unlawfully processing your personal information, you also have the right to complain to your Member State data protection authority. In the UK, this is the Information Commissioner's Office.

Withdrawing your consent. We rely on your consent to process your email for waitlist purposes. You can withdraw your consent at any time by clicking the unsubscribe link in any email we send you, or by emailing us. Withdrawal does not affect the lawfulness of processing done before withdrawal.

12. Controls for Do-Not-Track features

Most web browsers and some mobile operating systems include a Do-Not-Track ("DNT") feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. No uniform technology standard for recognizing and implementing DNT signals has been finalized. As such, we do not currently respond to DNT browser signals. Since we do not track visitors across websites or use advertising networks, this has limited practical effect.

13. Do United States residents have specific privacy rights?

If you are a resident of California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, or Virginia, you may have the right to request access to and receive details about the personal information we maintain about you and how we have processed it, correct inaccuracies, get a copy of, or delete your personal information. You may also have the right to withdraw your consent to our processing of your personal information. These rights may be limited in some circumstances by applicable law.

The specific personal information we collect from US residents is the same as described in Section 1: your email address, the optional signup-form tag, and standard server logs.

We have not sold or shared any personal information to third parties for a business or commercial purpose in the preceding twelve months.

To exercise any of your rights, email us at paul@thehumanco.org. We may need to verify your identity before processing your request.

14. Do we make updates to this notice?

Yes, we will update this notice as necessary to stay compliant with relevant laws. The updated version will be indicated by an updated "Last updated" date at the top of this Privacy Notice. If we make material changes, we may notify you either by prominently posting a notice of such changes or by directly sending you a notification. We encourage you to review this Privacy Notice frequently.

15. How can you contact us about this notice?

If you have questions or comments about this notice, you may email us at paul@thehumanco.org or contact us by post at:

The Human Collab
80 Stradbroke Road
Sheffield, South Yorkshire S13 8SQ
United Kingdom

16. How can you review, update, or delete the data we collect from you?

Based on the applicable laws of your country or state of residence, you may have the right to request access to the personal information we collect, details about how we have processed it, correct any inaccuracies, or delete your personal information. You may also have the right to withdraw your consent to our processing. To request any of these, email paul@thehumanco.org with the subject line "Data request" and we will respond within 30 days (usually much sooner).

This Privacy Notice is adapted from The Human Co.'s master privacy policy at thehumanco.org/privacy-policy. Where the master policy and this notice differ, this notice governs your use of the Co.llab website specifically.