Privacy Policy

Last updated: 1 November 2026

This policy explains what personal information Coco Coworking AI, Inc. ("Coco", "we", "us") collects through joinco.co, including the blog and the beta application form, why we collect it, who we share it with, how long we keep it, and the choices you have.

Who we are

Coco Coworking AI, Inc. is a Delaware corporation based in the United States. We decide how and why the information described here is used. You can reach us about anything in this policy at hello@joinco.co.

What we collect

When you apply for the beta

The "Apply for the beta" form asks for:

your first name, your email address and your company name (required);
your last name, your job title, your company's website and a message (optional).

The form is provided by HubSpot. With each submission HubSpot also records technical details: the date and time, the page you submitted from, the page that sent you there, and any campaign tags in the page address (such as utm_source). To show which page led you to apply, the form also sends the page you first landed on, the site that referred you and those campaign tags. They travel in the apply link and in hidden form fields; we don't store them in cookies or in your browser's storage. HubSpot may also record your IP address and estimate your country from it. When the form loads, HubSpot's form host sets a short-lived bot-protection cookie (__cf_bm) from its content delivery provider, Cloudflare.

When you browse joinco.co

Server and security logs. Cloudflare hosts and delivers this site. Like any web host, it processes your IP address, browser type, the address you requested and the time, to deliver pages and to protect the site against abuse.
Cloudflare Web Analytics. We count page views, referring sites, browser types and countries with Cloudflare Web Analytics. It sets no cookies and does not follow you across other websites.
HubSpot tracking code, only if you accept. Our cookie banner asks whether you accept tracking cookies. HubSpot's tracking code loads only after you click Accept. It then sets cookies (__hstc, hubspotutk, __hssc, __hssrc) to recognize a returning browser, record the pages it views on joinco.co, and connect those visits to a beta application if you submit one. We use it to see which pages lead people to apply and to follow up on applications. If you don't accept, the tracking code does not load and sets no cookies.
Images from other hosts. Some logo images on our home page load from third-party image hosts. As with any web request, those hosts receive your IP address and browser details.
Your theme choice. If you switch between light and dark mode, the choice is saved in your own browser (local storage). It is never sent to us.
Your cookie banner answer. Your Accept or Decline is saved in your own browser (local storage), so the banner does not ask again on every page. It is never sent to us.

We don't use advertising cookies. We ask for your consent before setting any cookie that isn't needed to deliver the site or the form.

When you email us

If you write to hello@joinco.co, we receive your email address, your message and anything you attach.

We don't take payments on this site, and we don't ask for sensitive information such as health data or government ID numbers. Please don't include it in the form or in emails.

How we use it

To review your beta application and reply to you, including sending your invite if you are approved. For visitors in the EEA and the UK, our legal basis is taking steps you asked for before an agreement, and our legitimate interest in running a beta program.
To run, secure and improve the site, including finding and fixing errors and blocking abuse. Legal basis: legitimate interests.
To understand which pages lead people to apply. We use the landing page, referrer and campaign tags sent with the form (legal basis: legitimate interests) and, if you accepted tracking cookies, the HubSpot tracking code (legal basis: your consent).
To answer your emails. Legal basis: legitimate interests, or taking steps you asked for.
To meet legal obligations and to protect our rights. Legal basis: legal obligation or legitimate interests.

We don't sell your personal information, and we don't share it with anyone for advertising across other companies' sites and apps.

We share personal information with the service providers that run this site and our beta program for us, for the purposes above:

HubSpot (customer relationship management, the application form and the tracking code). Our HubSpot account is hosted in HubSpot's EU data center.
Cloudflare (hosting, content delivery, security and Web Analytics).
Our email provider, for messages you send to hello@joinco.co.
Image hosts that serve some logo images on our home page. They receive your IP address and browser details when the images load, as described above.

We may also disclose information to professional advisers, to authorities when the law requires it, or to a buyer or successor if Coco is involved in a merger, acquisition or sale of assets.

International transfers

We are based in the United States, and our service providers operate in several countries. Your information may be processed outside the country where you live, including in the United States. When we transfer personal information out of the EEA or the UK, we rely on the safeguards in our providers' data processing terms, such as the European Commission's standard contractual clauses.

How long we keep it

Beta applications: while your application is open, and for up to 24 months after our last contact with you, unless you ask us to delete them sooner. If you become a customer, we keep what we need to run your account.
Emails: for as long as we need them to answer you and keep a record of the conversation.
Cookies: if you accepted tracking cookies, HubSpot's __hstc and hubspotutk last up to 6 months, __hssc 30 minutes, and __hssrc until you close your browser. The __cf_bm bot-protection cookie lasts 30 minutes. You can delete cookies at any time in your browser settings.
Hosting and analytics data: kept by Cloudflare for the periods set in its own terms.

Your rights

Depending on where you live, you can ask us to:

tell you what personal information we hold about you and give you a copy;
correct it;
delete it;
stop using it for a particular purpose, or restrict how we use it;
send it to you or another company in a portable format.

In the EEA and the UK, you can also object to processing based on our legitimate interests, withdraw your consent to tracking cookies at any time (this does not affect processing that happened before), and complain to your local data protection authority.

In California, you have the right to know what personal information we collect, use and disclose, to delete it, to correct it, and not to be treated differently for using these rights. We don't sell or share personal information as California law defines those terms, so there is nothing to opt out of. You can use an authorized agent to make a request for you.

To make any request, email hello@joinco.co from the address you used with us. We may ask you to confirm your identity before we act, and we will reply within the time the law requires: one month under the GDPR, 45 days under California law.

To withdraw consent to tracking cookies, clear joinco.co's cookies and site data in your browser settings (this also clears your saved banner answer, so the banner asks again), or email us. If you decline or block HubSpot's cookies, the site and the beta form still work.

Children

joinco.co and Coco are made for businesses. They are not directed at children under 16, and we don't knowingly collect their personal information. If you think a child has sent us information, email us and we will delete it.

Security

We protect personal information with reasonable technical and organizational measures, and we limit access to the people who need it. No method of sending or storing data is completely secure, so we can't guarantee absolute security.

If you use the Coco product

This policy covers joinco.co and the beta application. If your application is approved and you sign up at app.joinco.co, your use of the product is covered by the terms you accept when you sign up. After approval you can use Coco with your own API keys. Our Security page describes how keys and tool connections are stored. If your company needs a data processing agreement, ask us at hello@joinco.co.

Changes to this policy

We will update this page when our practices change and change the date at the top. If a change is significant, we will say so on this page before it takes effect.

Contact

Coco Coworking AI, Inc., hello@joinco.co