Privacy Policy

Last updated: 14 August 2026

Definitions and Key Terms
Introduction and Scope
Personal Data We Collect
Data Processing and Use
Data Storage and Security
Analytics, Advertising and Third-Party Services
Your Rights and Choices
Data Retention and Deletion
International Data Transfers and Legal Jurisdiction
Children's Privacy
Changes to This Policy
Legal Information and Contact

1. Definitions and Key Terms

1.1 Company and Service Terms

Knowco ("we")
Service — all functions, programs, and content provided through Knowco
Platform — the website and related services accessible via any device
User — any individual who accesses or uses our Service ("you")

1.2 Data and Privacy Terms

Personal Data — any information relating to an identified or identifiable natural person
Processing — any operation performed on personal data
Data Controller — Knowco, which determines the purposes and means of processing
Data Processor — a third party that processes personal data on our behalf
Cookie — a small text file stored on your device containing platform usage data

1.3 Security Terms

Authentication — the process of verifying a user's identity
Encryption — encoding information to prevent unauthorized access
Token — a unique identifier used for secure authentication
SSL/TLS — secure protocols that encrypt data in transit

2. Introduction and Scope

2.1 Policy Overview

This Privacy Policy explains how Knowco collects, uses, and protects your personal data, and details your privacy rights and how to exercise them.

2.2 Applicability

This Policy applies to:

All Knowco users worldwide
All methods of data collection
All Service functions
All Platform versions and updates

2.3 Policy Updates

We reserve the right to update this Policy. Material changes will be notified by email where we hold your email address. Where permitted by law, continued use after changes is deemed acceptance.

3. Personal Data We Collect

3.1 Account Information

A. Required data

Email address (typically used for authentication)
Name (may be collected during payment processing)
Last login timestamp
Unique account identifier
IP address
Phone number (if provided through a payment processor)
User preferences and settings
Communication preferences

B. Optional data — not collected by default.

3.2 Service Usage Data

A. Assessment results

Results presented by the Service
Completion timestamps
Performance metrics

B. Interaction data

Features accessed
Time spent on the Platform
Browsing patterns
Device information

Individual responses may be processed in real time; retention depends on product configuration and legal requirements.

3.3 Payment Information and Processing

Where applicable, we only receive and store limited payment information:

Tokenized payment method identifier
Last four digits of the card
First six digits of the card
Card expiry date

3.4 Technical and Device Data

A. Device information

Operating system and version
Browser type and version
Screen resolution
Device type and model
Language preference

B. Connection data

IP address
Network information
Connection type
Geolocation (derived from IP, where used)
Time zone settings

C. Performance data

Load times
Error messages
System performance metrics
Network latency
App response time

4. Data Processing and Use

4.1 Primary Processing Purposes

A. Service provision

Account creation and management
Authentication and security
Feature access and customization
Customer support
Service optimization

B. Payment processing

Subscription management
Payment authorization
Fraud prevention
Transaction records
Billing support

C. Communications

Service updates and notifications
Security alerts
Product information
Support responses
Legal notices

4.2 Secondary Processing Purposes

A. Service improvement

Usage pattern analysis
Feature optimization
Performance monitoring
User experience enhancement
Defect identification and remediation

B. Analytics and research

Aggregated usage statistics
Trend analysis
Platform optimization
Feature development
Performance benchmarking

4.3 Legal Bases for Processing

A. Performance of a contract

Account management
Service provision
Payment processing
Feature access
Support services

B. Legal obligation

Tax compliance
Financial records
Legal requirements
Regulatory compliance
Security

C. Legitimate interests

Service improvement
Fraud prevention
Security maintenance
Technical optimization
Business development

D. Processing based on consent

Marketing communications
Optional features
Third-party integrations
Analytics participation
Feature testing

5. Data Storage and Security

5.1 Storage Location and Transfers

Personal data is stored using infrastructure providers and regions we select for security and compliance.
Data may be transferred globally over encrypted channels.
Where applicable, we apply appropriate international data transfer safeguards.
We maintain security measures consistent with industry practice.

5.2 Security Measures

A. Authentication and access

Strong authentication options where supported
Session management that auto-terminates when configured
Role-based access control for internal systems
Least-privilege principle
Access logging and monitoring

B. Data protection

Encryption of data at rest and in transit where applicable
Secure protocols for data transmission
Periodic security reviews

C. Payment security

PCI DSS-compliant payment processing through qualified providers
Tokenized payment information storage
Knowco does not store full card numbers
Encrypted payment data transmission

D. Backup and recovery

Periodic automatic backups where configured
Disaster recovery planning
Business continuity measures

5.3 Data Breach Notification

A data breach may include unauthorized access, accidental loss or destruction, unauthorized disclosure, or any event compromising the confidentiality, integrity, or availability of personal data.

Upon discovering a potential breach, we will initiate our incident response plan, assess the scope, contain the incident, document it, and evaluate the risk to affected individuals.

Where required by law, we will notify affected users and regulators within applicable timeframes (for example, without undue delay and within 72 hours where the GDPR applies).

Notifications will describe the incident, the types of data affected, potential impact, measures taken, recommended user actions, and contact information for questions.

6. Analytics, Advertising and Third-Party Services

6.1 Analytics and Infrastructure Partners

We may use analytics, error monitoring, tag management, cloud security, and data warehouse services to monitor and improve the Platform. Specific vendors may change over time; this section describes typical categories.

Session recording (if used) should be implemented with safeguards, such as:

Tag management and analytics (e.g., Google Tag Manager or Google Analytics-type tools)
Product analytics (e.g., event-based analytics platforms)
Large-scale analytics and reporting (e.g., data warehouse tools)
Error monitoring and performance tools (which may provide session replay when enabled)
CDN and security services (e.g., DDoS protection and performance analytics)
Masking of sensitive inputs
Limiting collection to what is needed for debugging and performance
Restricting internal access

We may work with advertising partners. Depending on your settings and applicable law, partners may receive identifiers, contact information used for advertising, usage data, device information, and interaction metrics.

Partners may measure ad performance, optimize targeting where permitted, build audience segments, and analyze campaign effectiveness.

6.3 User Controls Over Tracking

Users may limit tracking through:

Browser cookie settings
Ad-blocking extensions
Device settings
Platform-specific controls
Industry opt-out tools (e.g., DAA or NAI, where available)

Limiting tracking may affect personalization and parts of the experience; core Service functions should remain available.

7. Your Rights and Choices

7.1 General Rights

Access your personal data
Correct inaccurate data
Request deletion of data (procedure in Section 8.2)
Object to processing where applicable
Data portability where applicable
Withdraw consent where processing is based on consent

7.2 Regional Privacy Rights

Depending on your region, you may have additional rights under the GDPR (EU or UK), CCPA or CPRA (California), the Australian Privacy Act, PIPEDA (Canada), and other local frameworks.

7.3 How to Exercise Your Rights

Submit requests through the official contact channels listed in Section 12.

We may require email verification, account authentication, and in some cases identity documents to protect your privacy.

Standard response timeframes generally include an initial acknowledgement within 72 hours, a substantive reply within 30 days, and extensions where permitted and notified by law.

Data exports may be provided in a machine-readable format (e.g., CSV or JSON) via secure transfer.

8. Data Retention and Deletion

8.1 Retention Periods

Data category	Retention period
Account data	During the active account period and a short period thereafter as needed for security and legal compliance
Payment records	As long as required by law
Analytics data	For service improvement, typically in aggregated or minimized form
Communication records	Typically up to 2 years unless a longer period is required
Security logs	Typically up to 13 months unless a longer period is required

8.2 Deletion Procedures

Account deletion may follow a multi-step verification process
Data removal is performed systematically
Backup removal may take additional time (e.g., up to 90 days)
We perform consistency checks according to the technical environment

9. International Data Transfers and Legal Jurisdiction

9.1 International Data Transfers

For users outside certain regions, we apply appropriate safeguards such as Standard Contractual Clauses where applicable. Technical and organizational measures support protection during transfer. We monitor regulatory requirements related to our operations.

9.2 Legal Jurisdiction and Dispute Resolution

Before taking legal action, users should use our escalation procedure via the contact email in Section 12.

Where our Terms and Conditions specify governing law, arbitration, or venue, those provisions apply in addition to this Policy. For the exact dispute resolution terms, please refer to the Knowco Terms and Conditions.

10. Children's Privacy

Age limit and protection:

Minimum age: 18 (or the higher age required in your jurisdiction)
We do not knowingly collect personal information from minors below the applicable age
If minor use is discovered, the account may be terminated

11. Changes to This Policy

11.1 Right to Modify

We reserve the right to modify this Privacy Policy at any time.

11.2 Types of Changes

Material changes significantly affect your rights or our obligations (for example, data sharing, fundamental processing purposes, or major changes to core privacy rights).

Non-material changes include clarifications, contact updates, formatting adjustments, security enhancements, and descriptions of new features that do not materially reduce your rights.

11.3 Notice Requirements

Material changes: we will provide notice as required by applicable law (e.g., by email where we hold your address)
Non-material changes: may be posted on the website and take effect on the posting date
Where permitted by law, continued use may constitute acceptance

11.4 Your Choices

Review the current Privacy Policy on our website
Stop using the Service if you disagree with a change
Contact us if you have questions about an update

12. Legal Information and Contact

12.1 Company Information

All inquiries (including privacy matters):

Email: [email protected]
General legal escalation: [email protected]
Postal inquiries: please contact us by email to obtain the correct mailing address for your request type.

12.2 Response Times

Inquiries are handled according to the response timeframes described in Section 7 where applicable.