Privacy policy

01Scope

This policy explains what Unknown collects when you use Known, why, where it lives, who can see it, and what you can ask us to do with it. It covers the web application, the command line tool, the public API, and the bots that answer in team chat products.

02What we collect

We collect three kinds of information.

• Account information: your name, email address, avatar, and which organizations you belong to and with what role. Sign-in is handled by our identity provider, which holds your credentials; we never see your password.
• Content: the wiki pages, records, notes, and chats you and your agents create, and the messages, pushes, pull requests, and events that the sources you connect send in. Content is yours; we hold it to run the service.
• Usage and technical information: the requests you make, the pages you open, your IP address and browser, and the commands the CLI runs, kept as logs for security and operations. Billing details are held by our payment provider; we keep the invoice record but never card numbers.

03Why we use it

We use information only to run Known for you and to keep it safe.

• To keep the record: store pages and revisions, show who changed what, and feed the record from connected sources.
• To answer: send the relevant parts of your record to a model provider to produce the answer, digest, or page change you asked for.
• To secure the service: detect abuse, investigate incidents, and keep audit trails of who did what.
• To bill: count the people on a paid plan and issue invoices.
• To support you: read what you share with us when you ask for help.
• To tell you about the service: security notices and changes that affect how you work. We do not send marketing email to members of an organization without asking first.

04Who processes it for us

We rely on a small number of providers, each bound to use the data only for the service they provide us.

• An identity provider for sign-in and organization membership.
• A payment provider for subscriptions and invoices.
• Model providers for answers, digests, and transforms. Content is sent to generate the result you asked for, under terms that forbid training on it, and is not kept by the provider beyond what their terms state.
• Cloud infrastructure for hosting and encrypted nightly backups.
• The services you connect, such as Slack, GitHub, and Telegram, which send us content under the access you granted and receive answers the bot posts back.

05Where it lives

Your content is stored on servers we operate, with nightly encrypted backups held separately. Data is encrypted in transit. Access to production systems is limited to the people who run the service and is logged.

06How long we keep it

• Wiki pages and records keep every revision for as long as the organization exists. Nothing rewrites history. On a plan with a limited readable window, older history is locked, not deleted, and unlocks on upgrade.
• Chats are short lived: a chat is deleted a fixed time after its last message. What matters from a chat goes back to the wiki as a page.
• Operational logs are kept for a limited period and then deleted.
• When an admin deletes an organization, its content is removed from live systems within thirty days and from backups as they roll off.

07Who can see it

We do not sell information about you or your organization, and we do not share it for advertising.

• Members of your organization, according to the permissions its admins set, and the apps your organization registers, for the members who sign in to them and only the wikis attached to them.
• The people who run the service, only as needed to operate it, investigate abuse, or help you when you ask, and always logged.
• The providers above, for the purpose each provides.
• Anyone the law requires us to disclose to. Where we may, we tell you first.

08Your rights

You can see and change your account information from your profile. An organization's admins can export the wikis it owns and their records at any time and can delete the organization. You can ask us to correct, export, or delete information about you, and to explain what we hold, by writing to hello@known.info. We answer within thirty days. Where a privacy law gives you further rights, those apply as well.

09Cookies

Known uses cookies only to keep you signed in and to remember settings such as what you have already seen. There are no advertising or cross-site tracking cookies.

10Children

Known is a tool for organizations and is not directed at children. We do not knowingly collect information from anyone under sixteen.

11Changes to this policy

We may update this policy. The effective date at the top says when it last changed, and the page keeps its history. For a change that affects how we use your information we tell the organization's admins at least thirty days before it takes effect.

12Contact

Questions about privacy go to hello@known.info.