We collect only what we need to run safe, well-organized workshops for teens, and we never sell personal information. This policy explains what we collect through yxo.world, at workshops and by email, and what we do with it.
1Who we are and what this covers
"YXO," "we" and "us" mean OpenExo Inc, doing business as YXO, [mailing address]. Questions go to yxoworld@gmail.com.
This policy is part of our Terms and Conditions. It covers yxo.world, our forms, our workshops, and the emails we exchange with you.
2What we collect
| Where | What we collect |
|---|---|
| Registration form (filled in by a parent) | Your teen's first and last name, date of birth, grade and, if you give it, school. Whether they have food allergies and the details. Your name, email and phone number. How you heard about YXO, the number of seats, any discount code, your phone-free-day confirmation, whether you give photo consent, and your agreement to the Terms. We also give each family a reference code so we can match the form to the payment. |
| Stripe checkout | Your name, email, billing details and the payment result. Stripe handles your card; we see only the last four digits and the card type. |
| Waitlist form | Your name, email, city and state or country, and how you heard about us. |
| Workshop request form | Your name, email, city, the expected number and ages of students, and whether you have space to host. |
| Emails and messages | Whatever you choose to tell us when you write to us, such as a cancellation or a change to your teen's details. |
| At workshops | Attendance, photos and video (see section 4), and work your teen chooses to share. |
| Website visits | Totals from Plausible, such as pages viewed, referring site, country, device and browser type, plus the city entered on the waitlist and workshop forms. Plausible uses no cookies and does not store IP addresses. Our Meta Pixel also records visits and actions, as section 6 explains. |
We do not ask for Social Security numbers, home addresses, or teens' own phone numbers or social media accounts.
3How we use it
- Register your teen, hold their seat, and match the registration to the payment
- Keep your teen safe, including planning food around allergies and reaching you in an emergency
- Send confirmations, venue details, reminders and updates about the cohort
- Process refunds, credits and seat transfers
- Answer your questions and requests to bring YXO to your city
- Tell waitlist members about new cohorts and early registration (you can opt out at any time)
- Understand which pages and channels bring people to YXO, and measure our ads, so we can improve the site and our outreach
- Meet legal, tax and accounting duties, and protect our rights
We use allergy and dietary details only for safety and catering. We do not use them for marketing.
4Teens' information
YXO serves teens ages 13 to 17, but we collect their information from their parent or guardian, not from the teens themselves. The website and its forms are meant for adults.
We do not knowingly collect personal information directly from anyone under 13. If we learn that a child under 13 has sent us information, we will delete it. If you think this has happened, email yxoworld@gmail.com.
Photos and video. We take photos and video at workshops. We use images in which your teen can be identified only if you tick the photo-consent box at registration, and we never post a teen's full name or school with their image. You can withdraw consent at any time by email.
During workshops, teens may use third-party AI and web tools under supervision. We teach them not to enter personal details such as full names, addresses or school names into those tools. Those providers' own privacy policies apply to what is entered there.
A parent or guardian can ask to see, correct or delete their teen's information at any time (section 8).
5Who we share it with
We do not sell or rent personal information, and we do not share it for other companies' advertising. We share it only with:
| Who | Why | Their policy |
|---|---|---|
| Stripe | Processes payments and refunds | Stripe privacy policy |
| Graceworks International Inc. | Payments for YXO Miami go through its Stripe account, so its name appears on your receipt and card statement. It sees the same payment details we do. | — |
| Formspree | Receives and stores form submissions, and emails them to us | Formspree privacy policy |
| Plausible Analytics | Counts website visits without cookies | Plausible privacy policy |
| Meta (Facebook and Instagram) | Measures our ads and helps show them to people likely to be interested (section 6) | Meta privacy policy |
| Google (Gmail) | Hosts our inbox and sends our emails | Google privacy policy |
| GitHub (GitHub Pages) | Hosts and serves yxo.world, and may log technical details of each visit, such as IP address, for security | GitHub privacy statement |
| Venue staff and facilitators | Need-to-know safety details only, such as a teen's name and allergies | — |
| Medical and emergency services | If your teen needs urgent care, the details they need | — |
Apart from Meta, which also uses pixel data for its own purposes as section 6 explains, these providers may use the information only to provide their service to us.
We may also disclose information if the law requires it, to protect someone's safety, or as part of a merger or sale of the business, in which case the buyer must honor this policy.
6Cookies, analytics and ads
Analytics. Our analytics tool, Plausible, works without cookies and reports only totals, such as how many people visited a page or which cities waitlist members are from.
Advertising. We advertise on Instagram and Facebook, and yxo.world uses the Meta Pixel to measure those ads. The pixel is a small piece of Meta's code that runs on every page of the site. It sets cookies in your browser (named _fbp and, if you arrive from one of our ads, _fbc) and sends Meta the pages you visit, the actions you take (viewing a page, joining the waitlist, requesting a workshop, going to checkout, and completing a payment, with the package price), and technical details such as your IP address, browser and device. If you are logged in to Facebook or Instagram, Meta can link this to your account. Meta uses it to report how our ads perform and to show our ads to people more likely to be interested, under its own privacy policy. We do not send Meta your name, your email address, anything you type into our forms, or any of your teen's details.
Your options. You can limit this in your Facebook or Instagram settings, under "Your activity off Meta technologies" and in your ad preferences, or block the pixel with your browser's tracking protection, a content blocker, or private browsing. The site works the same either way. Like most sites, yxo.world does not respond to browser "Do Not Track" signals.
Stripe's checkout page may use its own cookies for security and fraud prevention.
7How long we keep it, and security
We keep information only as long as we need it:
| Information | How long we keep it |
|---|---|
| Allergy and dietary details | Deleted within 90 days after the cohort ends |
| Registration details (your teen's name, date of birth, grade and school, and your contact details) | 2 years after the cohort, so we can answer questions and invite you back |
| Payment and refund records | 7 years, as tax and accounting rules require |
| Waitlist and workshop-request entries | Until you ask us to stop writing to you or to delete them |
| Photos and video | As long as we use them, or until you withdraw consent |
We limit access to the small team that runs each cohort, use providers with industry-standard security, and never store full card numbers. No system is perfectly secure; if a breach affects your information, we will tell you as the law requires.
8Your choices and rights
Wherever you live, you can ask us to:
- Show you the information we hold about you or your teen
- Correct anything that is wrong or out of date
- Delete it, unless we must keep it for legal or accounting reasons
- Stop sending you waitlist or marketing emails (reply "stop" to any of them, or write to us)
- Stop using your teen's photos or video in new materials
Email yxoworld@gmail.com from the address you used to register. We will confirm who you are and reply within 30 days. We will not treat you differently for making a request.
Residents of some states, such as California, have extra rights under their state laws. We will honor those requests as those laws require.
9Changes and contact
We may update this policy as YXO grows. The date at the top shows the latest version. If we make a significant change to how we use information you already gave us, we will email you before it takes effect.
Questions about your information?
Email Lily Safrani at yxoworld@gmail.com, or write to OpenExo Inc at the address in section 1, and we will get back to you quickly.