Privacy Policy
Last updated: April 2026
1. Who we are
Knowledger is operated by TBC Industries Pty Ltd, based in New South Wales, Australia. This policy explains how we collect, use and protect your personal information.
2. What we collect
Account information: Name, email address, password (hashed, never stored in plain text).
Usage data: Invite activity, subscription status, timestamps of actions taken on the platform.
PKD submissions: Encrypted immediately on submission. Stored in encrypted form. Inaccessible to Knowledger staff.
NDA signatures: Typed name, email, and timestamp stored as electronic signature records.
Payment information: Handled entirely by Stripe. Knowledger does not store card details.
Communications: Emails sent via Resend. We retain delivery logs.
3. How we use your data
To provide and operate the Knowledger service
To send transactional emails — verification, invite notifications, NDA copies, reminders
To process payments via Stripe
To maintain sealed records for the duration of your subscription
To improve the product based on aggregate usage patterns
We do not use your data for advertising. We do not sell your data to third parties.
4. PKD data
PKD submissions are encrypted with AES-256 before being stored. The encryption key is derived from the platform's secure key infrastructure. Knowledger staff cannot access the content of sealed PKD submissions under any circumstances. PKD data is only decrypted when both parties agree to unseal, or when required by a formal legal process.
5. Data sharing
We share data with the following third parties solely to operate the service:
Supabase — database and authentication infrastructure (SOC 2 Type 2 certified, hosted on AWS)
Stripe — payment processing
Resend — transactional email delivery
Vercel — application hosting
We do not share your data with any other third parties without your consent, except where required by law.
6. Data retention
Your data is retained for as long as your account is active. PKD records are maintained while your subscription is active. On full account deletion, your data is removed within 30 days, except where retention is required by law.
7. Your rights
Depending on your location you may have rights to access, correct, or delete your personal data. To exercise these rights contact us at hello@useknowledger.com. We will respond within 30 days.
Australian users: We comply with the Australian Privacy Act 1988 and the Australian Privacy Principles.
UK/EU users: You have rights under UK GDPR and EU GDPR including the right to erasure and data portability.
US users: We comply with applicable US state privacy laws including CCPA where applicable.
8. Security
We implement industry-standard security measures including AES-256 encryption, SOC 2 Type 2 certified infrastructure, and secure authentication. See our Security page for full details.
9. Cookies
Knowledger uses essential cookies only — for authentication sessions. We do not use tracking or advertising cookies.
10. Changes
We may update this policy. We'll notify you by email of material changes.
Contact: hello@useknowledger.com