Privacy Notice

Last updated September 3, 2026

POIETO, Inc. ("POIETO," "we," "us," or "our") builds tools for shaping AI. We make how AI works visible, understandable, and governed by the people who use it. Consent and data stewardship aren't a compliance section for us; they are the product.

This Privacy Notice describes how we collect, use, store, share, and protect personal information when you:

  • Visit our website at poieto.com, or any site of ours that links to this Notice
  • Use POIETO products and services, including our platform and workspace tools
  • Participate in our programs (education, arts, training, or research and user testing, including Making With), or attend our events
  • Work with us as a consulting or enterprise client
  • Communicate with us about any of the above

By using our Services you agree to the practices this Notice describes. Our Terms of Service provide additional terms. Questions: data@poieto.com

Who we are: POIETO, Inc., incorporated in Oklahoma and operating across the United States. Mailing address: 1206 Maple Avenue, Los Angeles, CA 90015, United States.

SUMMARY OF KEY POINTS

  • This notice is organized by who you are to us: visitor, platform user, client or guest, program participant (see "Who this notice covers"). Most sections apply only after you create an account; just browsing collects almost nothing.
  • What we collect: account information you give us (name, email, username), content you choose to save, and limited technical data needed to run the Services.
  • Selling and sharing: we do not sell personal information. We do not share it for cross-context behavioral advertising. We have no advertising trackers (§10).
  • AI: our AI features are designed so you can see and govern what they do, and they operate under your consent choices (§5).
  • Sensitive information: we do not ask for it. Where a specific program involves it, it is collected with explicit consent, minimized, and kept under your control.
  • Your rights: access, correction, deletion, and consent withdrawal (§9).

WHO THIS NOTICE COVERS

POIETO is a software infrastructure company. We build Relational AI Infrastructure, and everything else we do centers on the software: we teach with it, we consult with it, and we host events around it. Structurally it's similar to how AI companies like Anthropic, Hugging Face, and Runway operate: a software core with education, community, and arts programming built around it. One company is responsible for all of it, so this is one notice. What applies to you depends on your relationship with us:

  • Website visitors. You browse poieto.com. We collect almost nothing (see §1); no tracking, no ads. Most of this notice doesn't apply to you.
  • Platform users. You have created an account (currently by signing up for our beta). The sections on accounts, saved work, contributions, and AI features apply from the moment you sign up.
  • Clients and guests. For consulting and enterprise engagements, and for workshops and events you attend, we hold your contact and business information, nothing more exotic. (Enterprise engagements typically run under their own contracts, which control.)
  • Program participants. You are taking part in a POIETO program (education, arts, training, or research and user testing, such as Making With), directly or through a partner institution. Section 8 applies, including its provisions for when a program includes young people.
  • Our team. Workforce privacy is covered by a separate internal notice (§4).

1. WHAT INFORMATION DO WE COLLECT?

Information you give us. Collected when you create an account, use the Services, participate in a program, or contact us:

  • name and email address
  • username and password
  • job title or organization (if you provide it)
  • contact preferences
  • content you deliberately create or save in the Services (see §1a)

Data you contribute. Some POIETO services let you deliberately contribute data. Where a contribution flow exists, contributions are explicit, attributed per your consent choices, and governed by the consent level you set at contribution time. You may withdraw consent for future use at any time.

1a. Content you save is governed by your consent choices. Where a POIETO product offers saving of work (for example, student work in our classroom tools), the save itself is consent-gated: you (or your guardian or instructor, per §8) choose whether it is saved and at what visibility level. Work is attributed and retained per those choices.

Information collected automatically. Standard technical data needed to operate and secure the Services: IP address, browser and device characteristics, and service logs (what was accessed, and when). This data identifies devices and sessions, not your identity, and we use it for operation, security, and debugging, never for advertising. poieto.com currently runs no analytics or advertising trackers. If we ever add usage statistics, they will be privacy-preserving by design (self-hosted, cookieless, and aggregate-only), and this section will name the tool and what it cannot see.

Location. We do not collect precise location. Coarse location may be inherent in an IP address.

2. HOW DO WE PROCESS YOUR INFORMATION?

  • To create and administer accounts and authenticate you
  • To provide, maintain, and improve the Services
  • To run programs you or your institution enrolled in, including education, arts, training, and research or user testing
  • To respond when you contact us
  • For security, abuse prevention, and to protect vital interests
  • To comply with law
  • For any other purpose with your consent

We do not process your information for third-party advertising, advertising, profiling, or sale.

3. LEGAL BASES (EEA, UK, AND CANADA VISITORS)

In short: some places require us to name our legal basis for handling your information. Here are ours. Consent comes first.

If you are located in the European Economic Area or the United Kingdom, the GDPR and UK GDPR require us to explain the legal bases we rely on to process your personal information:

  • Consent. Our primary basis: most processing beyond basic service operation happens because you chose it, and you can withdraw consent at any time (§9).
  • Performance of a contract. Processing necessary to provide Services you signed up for, such as operating your account or delivering a program you enrolled in.
  • Legitimate interests. Narrowly: improving the Services based on how they are used, and keeping the Services secure. We do not rely on legitimate interests for advertising or profiling, because we do not do those (§2, §10).
  • Legal obligations. Compliance with law, or cooperation with law enforcement where legally required.
  • Vital interests. Protecting the safety of any person, where necessary. If you are located in Canada, we process your information with your express or implied consent under applicable law, and otherwise only in the narrow cases Canadian law permits without consent (for example, fraud investigation, legal compliance, or emergencies involving a person's safety).

4. WHO WE SHARE INFORMATION WITH

  • Service providers under contract who host or support the Services (for example, web hosting and email delivery), bound to use data only to provide services to us.
  • Payroll and finance (workforce only). Employee payroll runs on Intuit QuickBooks. Employees enter tax and banking details directly with Intuit through their own portal,so POIETO systems never hold employee SSNs or bank credentials. Workforce privacy is covered by a separate internal notice.
  • Program and product integrations. Some programs and features integrate third-party tools. Where a program or feature uses one, we say so in that program's materials or in the product itself, link the tool's own privacy policy, and share only what the integration needs in order to work. We review every integration's license and privacy terms before adopting it.
  • Program partners. Where a program runs with a partner institution, such as a county program, we share what the program contract requires, which is attendance and program reporting, under data-minimization practices (see §8, which keeps participant names out of session narratives).
  • Legal. When required by law or subpoena, or to protect rights, safety, and theServices.
  • Business transfers. If POIETO is involved in a merger, acquisition, or sale ofassets, your information may be transferred as part of that transaction. We will notify you of any change in ownership or in how your information is handled.
  • With your consent, in situations you approve beyond this Notice. We do not sell personal information and have not in the preceding 12 months.

5. ARTIFICIAL INTELLIGENCE

POIETO's purpose is making AI legible and governable, and our own AI practices follow that:

  • Some of our Services include AI features. They operate under the same consent choices as the rest of the Services: what an AI feature can see and do is visible, and contributions are governed by the consent levels you set.
  • We do not use your personal information or your saved work to train models without your explicit consent.
  • Where a specific AI feature involves a third-party provider or a particular processing arrangement, we describe it where you encounter that feature. Those details are specific to each feature and are disclosed with it, rather than listed here in the abstract. Our broader commitments about AI and data are described in the values section of our site.

6. HOW LONG DO WE KEEP INFORMATION?

We keep information only as long as needed for the purposes above, unless law requires longer. When there is no ongoing need, we delete or anonymize it. Program records required by a program contract are retained per that contract.

7. HOW DO WE KEEP INFORMATION SAFE?

We use reasonable technical and organizational measures: access controls and role-scoped permissions, encrypted transport, access logging, and data-minimization defaults. No system is perfectly secure, and transmission is at your own risk.

8. PROGRAMS

POIETO runs programs of several kinds, including education, arts, training, and research or user testing (such as Making With). Participants range from adults, artists, teaching artists, and professionals to, in some programs, young people. Programs run in person and through partner institutions. For all participants, program data is minimized and consent-gated, never sold, and never used for marketing.

Research and user testing. Participation is always voluntary and governed by a session-specific consent form that says what is observed, what is recorded, and for what purpose. Findings are reported without identifying participants unless you separately and explicitly consent.

When a program includes young people, additionally:

  • Enrollment comes through the institution or program, with guardian consent obtained per the program's requirements. We do not enroll minors directly through the open web, and we do not market to children.
  • Consent-first classroom tools. Where students can save work in POIETO tools, saving is optional and consent-gated, with explicit consent levels controlling visibility and retention. Instructors see program-appropriate views.
  • Data minimization by rule. Session records and reports describe activities and roles, not identities. Participant names do not appear in session narratives, and no photos of participants are used without a signed release.
  • No sale, no ads, no profiling of any participant data, ever.
  • Guardians and institutions may review or request deletion of a participant's information via the program or data@poieto.com.

9. YOUR PRIVACY RIGHTS

Access, correction, deletion, portability, and consent withdrawal, honored per applicable law. As product philosophy, we honor them as broadly as we can, regardless of jurisdiction. Requests: data@poieto.com. Account holders can review and update their information in account settings. Account termination deactivates your account and deletes it from active systems; some records are retained where law or program contracts require. If you are in the EEA, the UK, or Switzerland and believe we are processing your information unlawfully, you may also complain to your local data protection authority.

10. DO-NOT-TRACK

We do not track users across third-party sites, so Do-Not-Track signals do not change our behavior. There is nothing to turn off.

11. UNITED STATES STATE PRIVACY RIGHTS

In short: if your state gives you privacy rights, we honor them. As product philosophy, we extend the same rights to everyone, regardless of state. If you live in California or another state with a comprehensive privacy law, your rights may include the following:

  • Right to know. What categories of personal information we collect, where from, why, and with whom we share them. For POIETO the answer is short, and it is this Notice. We collect identifiers you give us (name, email, username), content you choose to save or contribute, and limited technical data (§1). Source: you. Purposes: §2. Sharing: §4.
  • Right to access. A copy of the personal information we hold about you.
  • Right to correct. Fix inaccurate personal information.
  • Right to delete. Deletion of your personal information, subject to legal retention requirements and program-contract obligations (§6).
  • Right to opt out of sale or sharing. We do not sell personal information and do not share it for cross-context behavioral advertising (§4), so there is nothing to opt out of. If that ever changes, this Notice changes first, and the required opt-out mechanisms appear with it.
  • Right to limit use of sensitive personal information. We do not collect sensitive personal information in the ordinary course (§1). Where a specific program involves it, it is governed by that program's explicit consent instrument.
  • No discrimination. Exercising your rights never affects your access to the Services or how we treat you.

Exercising your rights: email data@poieto.com. We will verify your identity, to protect you rather than to slow you down, then respond within the time your state's law requires. We honor requests made through an authorized agent where the law provides for one.

In the preceding 12 months we have not sold personal information, shared it for cross-context behavioral advertising, or collected sensitive personal information outside program-specific consent instruments.

12. UPDATES TO THIS NOTICE

We may update this Notice. When we do, the "Last updated" date changes, and we announce material changes through the Services or by email.

13. CONTACT

POIETO, Inc. · 1206 Maple Avenue, Los Angeles, CA 90015, United States · data@poieto.com

14. REVIEW, UPDATE, OR DELETE YOUR DATA

Submit a data subject access request to data@poieto.com, and we will respond as applicable law requires.