Privacy Policy

Who We Are

KnowledgeBricks is a software-as-a-service platform operated by KnowledgeBricks, Inc. We build and operate knowledge portals for logistics, supply chain, and construction teams. This Privacy Policy explains how we collect, use, store, and share information when you use our website (knowledgebricks.com) and our platform (the "Service").

Questions about this policy can be directed to privacy@knowledgebricks.com.

Data We Collect

We collect two categories of information:

Information you provide directly:

• Account registration data: name, email address, company name, job title
• Billing information: credit card details and billing address, processed and stored by Stripe (we never store raw card data)
• Contact form submissions and demo request information
• Assessment responses submitted through our Knowledge Risk Assessment tool

Information collected automatically:

• Usage data: pages visited, features used, query counts, and session duration
• Device and browser information: browser type, operating system, IP address, and timezone
• Cookies and similar technologies for session management and analytics

What we do not collect: We do not collect or store the text content of queries submitted to the knowledge portal for any purpose other than generating an immediate response. We do not use user query content to train AI models. We do not retain portal query history beyond what is necessary for your in-session experience unless you explicitly save a thread.

How We Use Your Data

We use the information we collect for the following purposes:

• To create and manage your account and provide access to the Service
• To process subscription payments and manage billing through Stripe
• To respond to support requests, demo inquiries, and contact form submissions
• To send transactional emails: account confirmations, billing receipts, and security alerts
• To send product updates and service announcements (you may unsubscribe at any time)
• To analyze aggregate usage patterns for the purpose of improving the platform
• To detect and prevent fraud, abuse, and security incidents

We do not use your data for advertising targeting, do not sell your data to third parties, and do not engage in behavioral profiling for commercial purposes.

Data Sharing

We share data only with the following categories of sub-processors, each of whom is bound by data processing agreements consistent with applicable privacy law:

• Stripe, payment processing and subscription management
• Clerk, user authentication and account management
• Supabase, database hosting and storage (US-based, SOC 2 compliant)
• OpenAI and/or Anthropic, AI inference for portal query responses. Query content is transmitted to these providers solely for the purpose of generating a response and is subject to their respective API data usage policies. Neither provider uses API data to train their models by default.
• Vercel, application hosting and edge delivery

We do not share your personal information with any other third parties unless required by law, court order, or a valid legal process. In the event we are required to disclose data by law, we will notify affected users where legally permitted.

Data Retention

We retain account data for the duration of your subscription and for 90 days following account termination, after which it is permanently deleted from our systems. Billing records are retained for 7 years as required by financial regulations. Anonymized, aggregated usage data may be retained indefinitely for product analytics.

You may request deletion of your account and associated data at any time by emailing privacy@knowledgebricks.com. Deletion requests are processed within 30 days.

Security

We implement industry-standard security practices to protect your data, including:

• Encryption in transit (TLS 1.2+) for all data transmitted between your browser and our servers
• Encryption at rest for all database records containing personal information
• Row-level security policies enforced at the database layer to prevent cross-tenant data access
• Access controls that restrict employee access to customer data to what is strictly necessary for support and operations
• Regular security reviews of third-party dependencies and sub-processors

No system is perfectly secure. If you believe you have discovered a security vulnerability, please report it responsibly to security@knowledgebricks.com.

Your Rights

Depending on your location, you may have rights regarding your personal data under applicable privacy laws (including GDPR, CCPA, and similar frameworks). These rights may include:

• The right to access the personal data we hold about you
• The right to correct inaccurate personal data
• The right to request deletion of your personal data
• The right to restrict or object to certain processing activities
• The right to data portability, receiving your data in a structured, machine-readable format
• The right to withdraw consent where processing is based on consent

To exercise any of these rights, contact us at privacy@knowledgebricks.com. We respond to all legitimate requests within 30 days.

Cookies

We use cookies for session management (required for login), analytics (to understand aggregate usage), and preference storage (to remember your settings). We do not use third-party advertising cookies. You can disable cookies in your browser settings, but some platform functionality may be impaired.

Contact

For questions, requests, or concerns about this Privacy Policy or our data practices, contact us at:

KnowledgeBricks, Inc.
Email: privacy@knowledgebricks.com

We will respond within 5 business days to all privacy-related inquiries.