Privacy Policy

Last updated 17 October 2026

This policy explains what personal data mylittlebots.com (the "Site") collects, why, who else handles it, how long we keep it and what you can do about it. The Site is operated by Like a King Inc., a New York corporation ("we", "us"), which is the controller of your data. Short version: we collect as little as we can, we don't use analytics, ad trackers or tracking cookies, and we don't sell or share your personal data.

1. What we collect

When you buy: Stripe collects your payment details and gives us your name, email address, billing country, the product, the amount, the invoice number and a payment reference. We never receive or store your full card number.
When you get your bot after paying: the thank-you page sends the checkout reference from your Stripe link to our server, which asks Stripe whether that checkout is paid and then shows your files and, where available, the Import Bot link. We don't store that reference.
When you get your bot again (get.html): you enter your email and invoice number; our server sends them to Stripe to check that the invoice is paid and belongs to that email, then shows your files. We don't store them. To stop guessing, our server briefly keeps your IP address in memory and counts tries for up to 10 minutes; it isn't written to disk.
When you click Import Bot: the link opens SpaceXAI's Grok Bot site, so what happens there is covered by SpaceXAI's own terms and privacy policy, not ours. We don't receive anything back from it.
When you contact us: the contact form stores the name, email address, topic and message you type, so we can reply. It doesn't record your IP address or set cookies.
Email sign-up: if you join the list, we store your email address and use it only to send what you signed up for (new bots and launch prices). Every email has an unsubscribe link.
When you visit: our server and its proxy process your IP address, browser and device details, the pages you request, the referring page and the time, to deliver the Site, keep it secure and fix errors (server logs).

The bots you buy run in your own accounts with third-party AI services (for example Grok Bot). We don't receive the data your bots process, such as your prompts, notes, files, messages, recordings or outputs.

We don't collect sensitive personal information on purpose. Please don't send it to us through the contact form.

2. Why we use it (legal bases)

to complete your purchase, deliver and re-deliver your files and handle refunds (performance of our contract with you);
to keep purchase records for tax and accounting (legal obligation);
to keep the Site running and secure, stop abuse and fraud, and answer your messages (our legitimate interests, which we balance against your rights);
to send the emails you signed up for (your consent, which you can withdraw at any time with the unsubscribe link).

We don't use your data for automated decisions with legal or similarly significant effects, and we don't build advertising profiles.

3. Who else processes it

Stripe processes payments, invoices and receipts under its own privacy policy.
Our hosting provider (Hetzner, in Finland, in the EU) runs the server the Site and its data are on.
Google Fonts serves the Site's fonts, so your browser connects to Google, which receives your IP address, when a page loads.
SpaceXAI LLC runs Grok Bot. If you click Import Bot or install a bot, you deal with SpaceXAI directly under its own policies.
Authorities or advisers, only where the law requires it, to protect our rights, or as part of a merger, sale or reorganisation (in which case this policy keeps applying to your data).

We don't sell your personal data, and we don't share it for cross-context behavioural advertising.

4. Cookies

We don't set any cookies, we don't store anything in your browser, and we don't use analytics or advertising trackers. Google Fonts and Stripe may set their own cookies when you use their services, under their own policies.

5. How long we keep it

Purchase records (held by Stripe and us): as long as tax and accounting law requires, usually up to 7 years.
Contact messages: as long as needed to deal with your request, and no longer than 2 years.
Email list: until you unsubscribe or ask us to delete it.
Server logs: rotated automatically and kept only briefly (a few small rolling files that are overwritten as new traffic comes in), unless needed longer to investigate a security issue.
Invoice-lookup attempts: in memory only, up to 10 minutes.

6. Your rights

Depending on where you live (including the EU, UK and many US states), you may have the right to: know what data we hold about you and get a copy; correct it; delete it; get it in a portable format; object to or restrict how we use it; withdraw consent at any time; and complain to your data-protection authority. We won't treat you differently for using these rights.

To use any right, use the contact form or reply to your Stripe receipt. We'll reply within one month (45 days for US state requests), and may ask you to confirm your identity first, for example with your invoice number. You can use an authorised agent; we may ask for proof of their authority. If we refuse a request, we'll tell you why and how to appeal.

7. California privacy rights (CCPA/CPRA)

If you're a California resident: in the last 12 months we collected the categories in section 1, which are identifiers (name, email, IP address), commercial information (products bought), internet activity (server logs) and the contents of messages you send us. We got them from you, from your browser and from Stripe, for the business purposes in section 2, and disclosed them only to the service providers in section 3. We don't sell or share personal information, including of anyone under 16, and we don't use or disclose sensitive personal information for purposes that would give you a right to limit it. We honour Global Privacy Control signals, though we have nothing to opt you out of. You have the rights to know, delete, correct and opt out, and not to be discriminated against, as described in section 6.

8. International transfers

We're in the United States, our server is in the EU, and some providers process data in other countries, including the United States. Where the law requires it, transfers are covered by appropriate safeguards such as the European Commission's standard contractual clauses or the EU-US Data Privacy Framework.

9. Children

The Site and the products are for adults (18+). We don't knowingly collect data from children under 13 (or under 16 in the EU), and we'll delete it if we learn we have.

10. Security

The Site is served only over HTTPS, payments go through Stripe, paid files are released only after Stripe confirms the payment, and our own secrets are kept off the public site. No system is perfectly secure, but we keep what we collect small, so there's little to expose. If a breach affects your data, we'll tell you and the authorities as the law requires.

11. Changes and contact

We'll post any change here and update the date at the top; for significant changes we'll also tell you through the Site or by email if we have it. For any privacy question or request, use the contact form or reply to your Stripe receipt.

Terms of Sale & Use · Back to the bots