Skip to content
knit spool
Sign inGet a spool

Legal

Privacy policy

Last updated: [date].

Draft — this policy has not been reviewed by counsel and is not yet in force. Bracketed values are placeholders. The plain-language notice at /privacy describes the system as it is.

1. Controller

[Legal entity, address, contact for data protection matters.]

2. What we process, and why

To provide the service we process: the email address you sign in with; the name of your workspace and the members you invite; a payment reference from our merchant of record; the identifiers and settings of the spools you own, including an access token stored encrypted; a history of changes to those settings; and five-minute usage counters for each spool (connected devices, bytes stored, bytes sent), retained for ninety days.

We do not process the content relayed by a spool, which is encrypted on your devices before it reaches us, nor the identifiers of conversations, connection logs or client IP addresses of the devices using a spool.

3. Legal bases

[Contract for the service itself; legitimate interest for security and the aggregate site analytics described in section 5; consent where required.]

4. Processors

We use the following providers, each under its own data processing terms:

  • Clerk, Inc. — authentication and workspace membership
  • Polar Software Inc. — payments, as merchant of record
  • Resend, Inc. — transactional email
  • Hetzner Online GmbH — servers running spools (EU)
  • Vercel Inc. — hosting of this website and the dashboard; web analytics and speed measurement
  • Neon, Inc. — the service database (EU)
  • Cloudflare, Inc. — DNS

5. Website analytics

This website uses Vercel Web Analytics and Vercel Speed Insights, which set no cookies and identify a visitor by a request hash discarded after 24 hours. We remove query parameters other than campaign tags before any page view is sent. [Reference to Vercel's privacy documentation.]

6. Retention

Spool data is deleted when the spool is removed at the end of its paid period, or immediately on your instruction. Account data is deleted [period] after the workspace is closed, except billing records retained as required by law [period].

7. Your rights

[Access, rectification, erasure, restriction, portability, objection; how to exercise them; supervisory authority.]

8. International transfers

[Where processors outside the EU/EEA are used, the transfer mechanism relied on.]

9. Contact

support@getknit.app · [postal address]