Privacy Policy

Account information. Your name, email address, and sign-in credentials (we support Sign in with Apple; we never see your Apple password).

Business information. Your business name, logo, address, phone number, license details if you add them, and the tone preferences you set for follow-up messages.

Client contacts.The names, phone numbers, email addresses, and service addresses of the clients you invoice. You add these yourself, by typing them in or importing from your phone's contacts. This is your data about your clients; we act as your service provider in handling it.

Invoice content. Line items, amounts, due dates, job notes, photos or scans of invoices you capture with the camera, and the message history between you, KnoqKnoq, and your clients about each invoice.

Payment information. When you or your clients pay by card, the card details go directly to our payment processor, Stripe. We never receive or store full card numbers. We keep the last four digits, the card brand, and the transaction record so you can recognize the payment.

Device identifiers. Device type, operating system version, app version, push notification tokens, and an installation identifier so we can deliver notifications to the right phone.

Usage analytics.Which features you use, how you move through the app, and performance data like crashes and load times. We use this to find what's broken and what's confusing, not to build advertising profiles.

We use your data to:

• Run the service: create, deliver, and track your invoices, and show you when clients view, reply, and pay.
• Send text messages and emails to your clients on your behalf. Every message identifies your business. KnoqKnoq never pretends to be you, and never contacts your clients for its own purposes.
• Draft and deliver payment follow-ups. Our AI reads the invoice and your message history to draft reminders in your tone. On plans with manual approval, nothing sends until you approve it.
• Process payments through Stripe and notify you when money lands.
• Understand usage and fix problems, using aggregate analytics and error reports.

We do not sell your data or your clients' data. We do not use your clients' contact information for marketing, ours or anyone else's.

We use a small set of service providers to run KnoqKnoq. Each one receives only what it needs to do its job:

• Twilio delivers text messages to your clients and receives their replies.
• Resend delivers invoice and notification emails.
• Stripe processes payments and subscription billing. Stripe handles card data under its own privacy policy and PCI compliance.
• Anthropic provides the AI models that draft follow-up messages and help read scanned invoices. Invoice context is sent to generate drafts; Anthropic does not train its models on this data under our agreement.
• Supabase hosts our database and authentication.
• Vercel hosts the website and API.
• PostHog provides product analytics.
• Sentry collects error reports so we can fix crashes.

Beyond these providers, we share data only if the law requires it (for example, a valid subpoena), to prevent fraud or abuse of the platform, or as part of a sale or merger of the company, in which case this policy continues to apply to your data.

Your clients don't have KnoqKnoq accounts. When they receive an invoice or reminder, it comes from your business, sent through our platform. We use their contact information only to deliver invoices, reminders, and receipts for you. If a client replies STOP to any text, we stop texting that number immediately, across the entire platform. Clients can also reach us at support@knoqknoq.com with questions about their information, and we'll work with you to resolve them.

We keep your data for the life of your account, plus 30 days after deletion so you can recover from an accidental delete. After 30 days, it's gone from our systems.

One exception: records of financial transactions (invoices that were paid through KnoqKnoq and their payment records) are retained for 7 years to meet tax and financial record-keeping requirements, even after account deletion.

Two ways, both real:

• In the app: Settings, then Delete Account. This deletes your account and starts the 30-day removal clock described above.
• By email: send a deletion request to support@knoqknoq.com from your account email and we'll handle it within 30 days.

If you're a California resident, the California Consumer Privacy Act gives you the right to:

• Know what personal information we collect about you and how we use and share it (this page is that disclosure).
• Request a copy of the personal information we hold on you.
• Request deletion of your personal information.
• Correct inaccurate personal information.
• Not be discriminated against for exercising any of these rights.

We do not sell or share personal information as those terms are defined by the CCPA, so there is nothing to opt out of. To exercise any of these rights, email support@knoqknoq.com. We'll verify the request against your account email and respond within 45 days.

KnoqKnoq is built for contractors in the United States and our services are directed there. If you access the service from the European Union or United Kingdom, know that your data is processed in the United States. Where GDPR applies, our legal bases are performance of our contract with you (running the service) and legitimate interest (analytics and error monitoring, security, and fraud prevention). You have rights of access, rectification, erasure, restriction, portability, and objection, and you can exercise them by emailing support@knoqknoq.com. For your clients' contact data, you are the controller and we process it on your instructions.

Data is encrypted in transit and at rest. Database access is restricted with row-level security so accounts can only reach their own records. Payment credentials never touch our servers. No system is unbreakable, but if a breach affects your data, we'll notify you promptly and tell you exactly what happened.

KnoqKnoq is a business tool for adults. We don't knowingly collect information from anyone under 18. If you believe a minor has provided us data, contact us and we'll delete it.

If we change this policy in a way that matters, we'll update the date at the top and notify you in the app or by email before the change takes effect. We won't quietly loosen anything.

Trusspoint Technologies, LLC
support@knoqknoq.com

Questions, requests, or complaints about privacy all go to that address. A person reads it.