Privacy Policy

Last updated: June 14, 2026

Hot Potato (“Hot Potato,” “we,” “us”) is operated by BigD & AI LLC. This policy explains what we collect, why, and what choices you have. Questions? See Contact.

What we collect

• Account info: your name and email address, used to sign you in (we use passwordless email links — we never store a password) and to send the notifications you ask for.
• Workspace data: the organizations, initiatives, blockers (“taters”), notes, and pass history you create in the product.
• Billing info: if you subscribe, payment is handled by Stripe. We never see or store your full card number — only your subscription status and a Stripe customer reference.
• Basic usage and device data: standard log information (IP address, browser type, timestamps) collected by our hosting provider to keep the service running and secure.

How we use it

• To provide the service: show your board, run the burn clocks, and deliver pass notifications and nudges.
• To process subscriptions and send billing-related messages.
• To secure, maintain, and improve the product.
• To respond to your support requests.

We do not sell your personal information.

Service providers

We share data only with vendors that help us run Hot Potato, under their own privacy terms:

• Google Firebase / Google Cloud — hosting, database, authentication.
• Stripe — payment processing.
• Postmark — transactional email delivery.
• Twilio — text-message nudges, if you enable them.

Cookies

We use only the cookies and local storage required to keep you signed in and operate the service. We do not use third-party advertising or cross-site tracking cookies.

Data retention

We keep your data for as long as your account is active. You can ask us to delete your account and associated personal data at any time by contacting us.

Your choices

• Opt out of any email by replying STOP, or of texts by replying STOP to a message.
• Request access to, correction of, or deletion of your personal data via Contact.

Children

Hot Potato is a workplace tool and is not directed to children under 16.

Changes

We may update this policy; we'll revise the date above and, for material changes, notify you by email.