LEGAL SIX NODE LABS LTD
Privacy & Terms
These pages set out how we handle your data and the terms on which you use CocoBird AI. CocoBird AI is operated by Six Node Labs Ltd. If anything here is unclear, email us at hello@sixnodelabs.com.
Last updated: 24 July 2026
DOCUMENT 01
Privacy POLICY
This Privacy Policy explains how Six Node Labs Ltd ("we", "us", "our") collects, uses, and protects your personal data when you visit cocobird.ai or join the CocoBird AI waitlist.
Six Node Labs Ltd is a company registered in England and Wales, company number 17124768, registered office at 66 Paul Street, London EC2A 4NA.
We are the data controller for the personal data described in this policy. The CocoBird AI waitlist is open to visitors worldwide, including the UK, EU, US, and elsewhere. This policy applies to everyone who submits data through cocobird.ai, regardless of location. Where a specific jurisdiction gives you rights beyond what's described below, those rights are addressed in Section 7a.
01 What Data We Collect
Waitlist signup. When you join the CocoBird AI waitlist, we collect:
Your email address
Any additional information you voluntarily provide in the signup form (e.g. channel name, subscriber count, if the form asks for it)
Automatic data collection. When you visit cocobird.ai, we automatically collect:
IP address
Browser type and device information
Pages visited and time spent on the site
Referral source (how you arrived at the site)
This is collected via Google Analytics (GA4). See Section 5 (Cookies) for detail.
Newsletter. If you subscribe to CreatorOps Weekly, that signup is processed separately by Beehiiv under its own terms, linked at the point of subscription. This policy covers the cocobird.ai waitlist specifically; the newsletter has a distinct signup flow.
02 How We Use Your Data
We use the data we collect to:
Notify you when CocoBird AI is available for signup or launch
Send occasional updates about CocoBird AI's development (you can unsubscribe at any time)
Understand how visitors use the site, so we can improve it
Respond to any enquiries you send us directly
We do not sell your personal data. We do not use your data to make automated decisions that produce legal or similarly significant effects on you.
03 Legal Basis for Processing
Under UK GDPR, we rely on the following legal bases:
Consent — for adding you to the waitlist and sending you related updates. You can withdraw consent at any time by unsubscribing or emailing us.
Consent — for using de-identified examples of comment/message activity in product demonstrations and marketing, where you've opted in separately at the point of connecting your account.
Legitimate interests — for basic site analytics, to understand and improve how the site performs. This interest is balanced against your right to privacy; you can opt out via cookie settings.
04 Who We Share Data With
We use the following third-party processors:
PROCESSOR
Google Analytics (GA4)
Beehiiv
SquareSpace
PURPOSE
Website analytics
Newsletter delivery
Waitlist signup collection
LOCATION
US (Google LLC)
US
US (Squarespace, Inc.)
Where a processor is based outside the UK/EEA, we rely on Standard Contractual Clauses or an equivalent adequacy mechanism to ensure your data is protected to UK GDPR standard.
We do not sell, rent, or trade your personal data to third parties for their own marketing purposes.
05 Cookies
cocobird.ai is built on Squarespace, which sets some cookies necessary for basic site function (page load, form submission, security). These don't require consent under PECR since the site can't operate without them.
Separately, cocobird.ai uses cookies from Google Analytics (GA4) to understand site usage. These are not strictly necessary for the site to function, so under UK PECR rules we ask for your consent before they're set.
You can also control cookies through your browser settings at any time.
06 Data Retention
We retain waitlist email addresses until:
You unsubscribe or ask us to delete your data, or
24 months after the last interaction, if you've never engaged with our emails, or
CocoBird AI concludes its waitlist phase and converts to a live product, at which point this policy will be updated to reflect ongoing account-based data handling.
Analytics data is retained per Google Analytics' default retention settings (currently 14 months, configurable)
07 Your Rights
Under UK GDPR, you have the right to:
Access the personal data we hold about you
Correct inaccurate data
Request deletion of your data
Object to or restrict our processing
Request a copy of your data in a portable format
Withdraw consent at any time
To exercise any of these rights, email hello@sixnodelabs.com. We'll respond within one month.
You also have the right to lodge a complaint with the UK's data protection regulator, the Information Commissioner's Office (ICO), at ico.org.uk. If you're located in the EU, you can also complain to your local data protection authority.
07a Additional Rights by Region
EU residents. Your data is protected under the EU GDPR in addition to the standards described above. Where our processing activity in the EU reaches a level requiring a formal representative under Article 27 GDPR, we will appoint one and update this policy accordingly.
California residents. Under the CCPA/CPRA, if you are a California resident you have the right to know what personal information we've collected, request deletion, and opt out of the sale or sharing of personal information. We do not sell or share your personal information for cross-context behavioral advertising. To exercise these rights, email hello@sixnodelabs.com.
All US recipients. Any marketing emails we send comply with the CAN-SPAM Act: every email includes a working unsubscribe link, honored within 10 business days, accurate sender information, and our physical business address.
Other jurisdictions. If your local law provides data protection rights beyond those described here, we'll honor them on request — email us and we'll do our best to accommodate the specific right you're asserting.
08 Children
CocoBird AI and cocobird.ai are not directed at children. We do not knowingly collect data from anyone under 13 (the threshold under US COPPA) or under 16 (the threshold under UK/EU GDPR, unless your jurisdiction sets consent age lower, in which case the higher of the two applicable ages governs). If you believe a child has provided us data, contact us and we'll delete it.
09 Changes to This Policy
We may update this policy as CocoBird AI develops from waitlist to live product. Material changes will be reflected with an updated "Last updated" date, and where appropriate, we'll notify waitlist subscribers directly.
10 Contact
Six Node Labs Ltd 66 Paul Street, London EC2A 4NA hello@sixnodelabs.com
PRIVACY POLICY ADDENDUM — COCOBIRD AI PRODUCT
This addendum extends the CocoBird AI Privacy Policy (Sections 01 to 10 above) to cover the CocoBird AI product itself, once you connect a YouTube channel and/or Instagram account and start using it. It does not replace the existing Privacy Policy; it applies alongside it. Where anything below conflicts with the waitlist-stage language above, this addendum governs for product use.
This addendum takes effect for each user individually, from the point they create a CocoBird AI account and connect a YouTube channel and/or Instagram account.
11 Scope of the Addendum
Sections 01 to 10 above describe how we handle data while CocoBird AI is a waitlist. This addendum applies from the point you create a CocoBird AI account and connect a YouTube channel and/or Instagram account. At that point, we become a processor of certain data on your behalf (the comments and account data you authorize us to access) as well as a controller of your own account and billing data.
12 Product Data We Collect: YouTube
When you connect a YouTube channel via Google/YouTube sign-in, we collect and access, via the YouTube Data API:
Your channel ID, channel name, and basic channel profile data
Comments on your videos (text, commenter display name and channel ID, timestamps, like counts)
Video metadata associated with those comments (video ID, title)
We request the YouTube Data API scope needed to view and manage comments on your channel (youtube.force-ssl). We do not request access to your private messages, watch history, or subscriptions.
Because CocoBird AI has read and write access, it can also take actions on your behalf via the API: hiding a comment, deleting a comment, marking a comment as spam, and posting a reply. Whether each of these happens automatically or requires your approval first is controlled by your settings inside CocoBird AI. See Section 14.
13 Product Data We Collect: Instagram
When you connect an Instagram account via Instagram/Meta sign-in, we collect and access, via the Instagram API:
Your Instagram Business or Creator account ID and basic public profile data (the Instagram API requires a Business or Creator account; personal accounts cannot be connected)
Comments on your posts and Reels (text, commenter username and ID, timestamps)
Direct messages sent to your account (message text, sender username and ID, timestamps)
Post metadata associated with those comments (post ID, caption, media type)
Account insights and engagement metrics (e.g. reach, impressions, follower count, engagement rate)
We request the following Meta permissions: public_profile, instagram_business_basic, instagram_manage_comments, instagram_business_manage_comments, instagram_manage_messages, instagram_business_manage_messages, and instagram_business_manage_insights.
Read and write access means CocoBird AI can also take actions on your behalf: hiding a comment, deleting a comment, posting a reply to a comment, and viewing and replying to direct messages. Automatic versus approval-gated behavior is controlled by your settings. See Section 14.
14 How We Use Product Data
We use the comment and account data described in Sections 12 and 13 to:
Display your comments and direct messages to you inside CocoBird AI, organized and filtered
Classify comments and messages (e.g. spam, toxic, high-intent, question) using automated and AI-assisted analysis
Suggest, or, where you've enabled auto-mode, automatically carry out, moderation actions (hide, delete, reply, etc.) on your connected accounts
Generate suggested replies for you to review, edit, or send
Maintain a log of moderation actions taken, so you can review or reverse them
Use account insights and engagement metrics to give you audience and performance context alongside comments
Improve the accuracy of our classification and suggestion features
Where you've separately opted in, use de-identified examples of comment or message activity in product demonstrations, marketing materials, and public reporting (e.g. the Creator Comment Toxicity Index). This use is optional, separate from the core moderation features above, and requires your affirmative consent — see Section 14a.
You control, per platform and per rule, whether an action requires your approval or happens automatically. You can change this at any time in product settings.
We do not use your connected account data for advertising, and we do not sell it.
14a Marketing & Demonstration Use
If you opt in, we may use de-identified excerpts of comment or message activity from your connected account(s) in product demonstrations, marketing content, and aggregate public reporting. "De-identified" means we remove the commenter's username, display name, profile image, and any other detail that could reasonably identify them or your channel, before the excerpt is used.
This is separate from the moderation features described in Section 14 and is not required to use CocoBird AI. You can opt in or out at any time in account settings; opting out does not affect your existing moderation features.
Aggregate statistics (e.g. percentages, averages across many accounts) may be used in public reporting such as the Creator Comment Toxicity Index without requiring this specific opt-in, since no individual comment or account is identifiable in aggregate form.
16 Additional Processors (Product Stage)
In addition to the processors listed in Section 04, once you use the CocoBird AI product we also share data with:
We use the YouTube Data API (Google LLC, US) to read and moderate YouTube comments on your behalf. We use the Instagram API (Meta Platforms, Inc., US) to read and moderate Instagram comments and direct messages on your behalf. We use one or more third-party AI/ML API providers (US) for comment and message classification and reply drafting. We use a cloud hosting and database provider (US) for application hosting and data storage. We use Stripe, Inc. (US) for payment processing and billing.
As with the processors in Section 04, where a processor is based outside the UK/EEA we rely on Standard Contractual Clauses or an equivalent adequacy mechanism.
15 AI / Automated Processing Disclosure
CocoBird AI uses automated tools, including one or more third-party AI language model providers, to analyze and classify comment and message text and to draft suggested replies.
Where comment data originates from the YouTube Data API, we do not use it to train generalized or non-CocoBird-specific AI/ML models. This complies with the Limited Use requirements of the Google API Services User Data Policy. Any AI processing of YouTube-sourced data is limited to providing and improving CocoBird AI's own comment-moderation features for your account.
Where comment data originates from Instagram/Meta, we process it in accordance with Meta's Platform Terms and Developer Policies, and do not use it for purposes beyond providing CocoBird AI's moderation features to you.
Any AI provider that processes comment text on our behalf does so as a sub-processor under contractual terms that prohibit them from using your data to train their own general-purpose models.
18 Data From People Who Are Not CocoBird Users
Comments and direct messages processed by CocoBird AI come from members of the public who comment on or message your YouTube videos, Instagram posts, or Instagram account, not from CocoBird AI users directly. These commenters and message senders have not signed up for CocoBird AI and have not agreed to this policy; they are third parties whose data we process on your behalf, as your data processor, for the purpose of providing the moderation and messaging features described in Section 14 to you, and, where the connected account holder has opted in under Section 14a, for de-identified use in product demonstrations, marketing, and aggregate reporting. We do not use identifiable commenter data — names, handles, or profile images — for these purposes.
Because commenters and message senders can be of any age, some of this data may originate from minors. We do not attempt to identify age, and we do not use this data for any purpose beyond the features described in Section 14. If a comment or message must be permanently deleted (e.g. following a legal request from the sender or a regulator), contact us at hello@sixnodelabs.com.
17 Platform-Specific Disclosures
YouTube API Services. CocoBird AI's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Google's own Privacy Policy is available at https://policies.google.com/privacy. You can revoke CocoBird AI's access to your YouTube/Google account at any time via Google's security settings at https://myaccount.google.com/permissions, or by disconnecting your channel inside CocoBird AI.
Meta / Instagram Platform Terms. CocoBird AI's use of Instagram Graph API data complies with Meta's Platform Terms and Developer Policies. You can revoke CocoBird AI's access to your Instagram account at any time via Instagram/Facebook account settings, or by disconnecting your account inside CocoBird AI. You can also request deletion of your CocoBird AI data via Account Settings > Delete My Data inside the app, or at cocobird.ai/data-deletion.
19 Data Retention: Product Stage
This section supplements Section 06 once you're using the product (rather than the waitlist):
Comment data and moderation logs are retained for the duration of your active subscription, plus 30 days, after which they are deleted, unless you request earlier deletion.
If you disconnect a YouTube or Instagram account, we stop pulling new data from that account and delete previously synced comment data within 30 days, except where we're required to retain moderation logs for dispute or legal purposes.
OAuth tokens for connected accounts are stored encrypted and are deleted immediately when you disconnect the account or close your CocoBird AI account.
Billing records are retained as required by UK tax law (currently six years) even after account closure.
19a Data Security & Google API Data Protection
We implement robust technical and organizational security measures to protect personal and sensitive data against unauthorized access, alteration, disclosure, or destruction. This applies to all sensitive data, including OAuth access tokens, refresh tokens, direct messages, comments, and connected account data.
Encryption in Transit: All data transferred between your device, CocoBird AI, and connected third-party platforms (including Google and YouTube APIs) is encrypted in transit using industry-standard Transport Layer Security (TLS 1.2+ / HTTPS).
Encryption at Rest: Sensitive user data, including OAuth access and refresh tokens, comments, and direct messages, is stored encrypted at rest using industry-standard encryption protocols (such as AES-256) on secure cloud infrastructure.
Storage & Access Controls: OAuth tokens and API credentials are stored securely using isolated secrets management systems. They are never written to application logs or exposed to client-side code. Access to personal and sensitive data is strictly restricted to authorized personnel on a need-to-know basis and is fully logged.
Google API Services User Data Policy Compliance: CocoBird AI's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
Token Revocation & Data Deletion: Users can disconnect their Google/YouTube account at any time within CocoBird AI or via Google Security Settings. Upon disconnection, stored OAuth access and refresh tokens are immediately deleted or invalidated from our systems.
Incident Response: If we become aware of a security breach affecting your personal data, we will notify affected users and relevant regulators (such as the ICO) without undue delay, as required by law.
20 Payment Data
Paid CocoBird AI subscriptions are billed through Stripe, Inc. We do not store your full card number. Stripe processes your payment details under its own privacy policy and PCI-DSS compliance. We retain billing metadata (plan, amount, invoice history) for accounting purposes as described in Section 19.
21 Team Accounts
At this stage, each CocoBird AI account is intended for a single creator. If we introduce team or multi-seat access allowing you to invite collaborators, this policy will be updated to describe how their access to your connected platform data is handled.
22 Revoking Access & Deleting Your Data
You can disconnect your YouTube or Instagram account from CocoBird AI at any time from your account settings, or by revoking access directly through Google or Instagram/Meta's own account permissions pages (links in Section 17). Closing your CocoBird AI account triggers deletion of your account data and connected-platform tokens per Section 19. To request deletion of any data we hold about you, email hello@sixnodelabs.com. See Section 07 for the full rights process.
DOCUMENT 02
TERMS OF SERVICE
These Terms of Service ("Terms") govern your use of cocobird.ai (the "Site") and the CocoBird AI waitlist, operated by Six Node Labs Ltd ("we", "us", "our"), a company registered in England and Wales, company number 17124768, registered office at 66 Paul Street, London EC2A 4NA.
By using the Site or joining the waitlist, you agree to these Terms. If you don't agree, don't use the Site.
01 What the Waitlist Is
Joining the CocoBird AI waitlist is a request to be notified when the product becomes available. It is:
Not a purchase. No payment is collected or required to join the waitlist.
Not a guarantee. Joining the waitlist does not guarantee you access to CocoBird AI, a specific launch date, or a specific price.
Not a contract for the product. Any features, pricing, or timelines described on the Site are current intentions, not commitments, and may change before launch.
If you're offered a "founding creator" spot or similar early-access designation, this is a marketing designation reflecting your position in the signup order. It does not create a binding commercial agreement.
02 Eligibility
You must be at least 18 years old, or the age of legal majority in your jurisdiction, to join the waitlist. By signing up, you confirm you meet this requirement.
03 Your Information
By joining the waitlist, you agree to provide accurate information (at minimum, a valid email address you control). See our Privacy Policy for how we handle your data.
You're responsible for keeping your email address current if you want to receive launch communications. We're not responsible for missed communications sent to an outdated or incorrect address.
05 Acceptable Use
You agree not to:
Use the Site for any unlawful purpose
Attempt to gain unauthorized access to the Site or its underlying systems
Submit false or misleading information when joining the waitlist
Use automated means (bots, scrapers) to interact with the Site or the waitlist form without our permission
We reserve the right to remove any waitlist entry we reasonably believe violates these Terms.
04 Intellectual Property
All content on the Site — including but not limited to text, graphics, logos, the CocoBird AI name and mark, and design elements — is owned by Six Node Labs Ltd or its licensors and protected by applicable intellectual property law.
You may not copy, reproduce, distribute, or create derivative works from Site content without our written permission.
07 Limitation of Liability
To the maximum extent permitted by law, Six Node Labs Ltd is not liable for any indirect, incidental, or consequential damages arising from your use of the Site or participation in the waitlist. Since no payment is involved at this stage, our aggregate liability to you in connection with the waitlist is limited to £0.
Nothing in these Terms excludes or limits liability for death, personal injury caused by negligence, or fraud, where such exclusion would be unlawful.
06 No Warranty
The Site and the waitlist are provided "as is," without warranties of any kind, express or implied. We don't guarantee the Site will be uninterrupted, error-free, or secure at all times.
Descriptions of CocoBird AI's future features, pricing, or capabilities are illustrative of current plans and may change materially before launch.
09 International Use
The Site and the waitlist are open to visitors worldwide. By using the Site or joining the waitlist from outside the UK, you confirm you're doing so at your own initiative and accept that your data will be processed and transferred in accordance with our Privacy Policy, including transfer to the UK and to processors located in other countries (such as the US).
If mandatory consumer protection laws in your country of residence give you rights that can't be waived by agreement, this section doesn't remove those rights — it establishes England and Wales law as the baseline for everything else.
08 Changes to These Terms
We may update these Terms as CocoBird AI moves from waitlist to live product, at which point a separate Terms of Service governing paid use will apply. We'll post the updated Terms with a new "Last updated" date.
10 Governing Law
These Terms are governed by the laws of England and Wales, and this applies regardless of where you access the Site from. Any disputes will be subject to the exclusive jurisdiction of the courts of England and Wales.
11 Contact
Six Node Labs Ltd 66 Paul Street, London EC2A 4NA hello@sixnodelabs.com