Privacy policy

1. Who is responsible

The controller of personal data processed by the Knit Hosted service is Jeffrey Walter Mixon, a sole proprietor in the United States, reachable at support@getknit.app and at 7960 Soquel Drive, STE B166, Aptos, CA 95003-3999, United States. This policy covers the website and dashboard at hosted.getknit.app and the spools we run under spool.getknit.app. The Knit app on your phone has its own policy at getknit.app.

2. What we process, and why

To provide the service we process the following, for the purposes stated:

• Account data — the email address you sign in with, the name of your workspace and who is a member of it, held by our identity provider. Purpose: to sign you in and to let a workspace share its spools.
• Billing data — a customer reference from our merchant of record and the invoices it issues. Your card details are entered on the merchant of record's pages and never reach us. Purpose: to charge for seats and show you what you pay.
• Spool configuration — each spool's hostname, plan, settings (whether it has a token, its proof-of-work level, whether it has a shared room and that room's name), its access token stored encrypted so that a copy of our database cannot reveal it, the hash of any shared room's invite, and a history of the changes you made. Purpose: to run the spool the way you configured it and to show you what changed.
• Usage counters — every five minutes, the number of connected devices, bytes stored and bytes sent by each spool. Purpose: the meters and charts on your dashboard, and enforcing the plan's ceiling. These are counts about the container, not records of any person's use of it.
• Support correspondence — what you write to us and our replies. Purpose: to help you.
• Website measurements — see section 7.

3. What we do not process

Messages relayed by a spool are encrypted on your devices before they reach it. A spool holds sealed frames filed under conversation identifiers it cannot map to a person, for a bounded time, and forwards them to connected devices; neither the spool nor we can read their content, learn who is in a conversation, or see who read what.

Our control plane — the systems that run the fleet and this website — never receives conversation identifiers, connection logs or the IP addresses of the devices that connect to a spool. Reports from a spool's server carry the state of the container and nothing about who used it. A spool's hostname is random and never derived from you, and one wildcard certificate covers the fleet, so your hostname is not written into public certificate logs.

4. Legal bases

Where the GDPR or the UK GDPR applies, we rely on: performance of our contract with you (account, billing, spool configuration and usage counters, support); our legitimate interests in keeping the service secure and knowing how the website performs (section 7), balanced against your interests by collecting no more than the aggregate figures described; and legal obligations, for the retention of billing records.

5. Who processes data for us

We use the following providers as our processors, each under its data processing terms and each receiving only what its role needs:

• Clerk, Inc. (United States) — sign-in and workspace membership: your email address and who belongs to your workspace.
• Resend, Inc. (United States) — delivery of the emails we send you.
• Hetzner Online GmbH (Germany) — the servers your spools run on, in the European Union.
• Vercel Inc. (United States) — hosting of this website and dashboard, with functions running in Frankfurt; and the cookieless website measurements in section 7.
• Neon, Inc. (United States) — the service database, hosted in the European Union (Frankfurt).
• Cloudflare, Inc. (United States) — DNS for getknit.app. It answers name lookups and does not sit in front of your spool or this site.
• New Dream Network, LLC (DreamHost, United States) — the mailbox that receives what you write to support@getknit.app and abuse@getknit.app.

Polar Software Inc. (United States) is our merchant of record and sells you the service in its own name. Polar is not our processor. It decides for itself what it collects at checkout — your name, email address, billing address, card details and tax information — and how long it keeps it, and its own privacy policy at polar.sh/legal/privacy applies to that. From Polar we receive a customer reference, the status of your subscription and copies of the invoices it issues to you.

6. Who else may receive data

Beyond the processors in section 5 and Polar, we disclose personal data only: to a court, regulator or law enforcement authority when a request binds us, and then only what it binds us to disclose — we tell you unless the law forbids it; to a successor if the service is sold or transferred, on notice to you and under this policy; and at your direction, for example when you invite someone to your workspace. We do not sell it.

7. Website measurements and cookies

This website uses Vercel Web Analytics and Vercel Speed Insights to count page views and measure page speed. They set no cookies; a visitor is told apart from another by a hash of the request that is discarded after 24 hours, and nothing is tied to an IP address. A page view is recorded with the page, the referring site, a coarse location (country, region, city) and the browser, operating system and device type. Before a page view is sent we remove every query parameter except campaign tags, so no identifier of your spool or checkout travels with it, and dashboard addresses are recorded as route patterns rather than the exact pages opened. Seven steps of a purchase are also counted as named events: a plan chosen, a return from the checkout, a spool coming up, a seat added, a spool deleted, a plan cancelled and a cancellation withdrawn. An event records the plan and, where the step changed it, the number of seats, with the same page, location and browser details as a page view; it carries no identifier of you, your workspace, a spool, a checkout or a subscription. There are no advertising or cross-site tracking technologies on this site.

Signing in sets strictly necessary session cookies from our identity provider on this site's own domain (hosted.getknit.app) and on its authentication subdomain. They are not used for tracking and expire with your session.

Our hosting and identity providers keep short-lived request and sign-in logs that include the IP address of the browser you use for this site and the dashboard, for security. They are not joined to any spool's traffic and are not used to profile you.

8. How long we keep data

A spool's data — the sealed frames it holds — is deleted when the spool is removed: at the end of the paid period after you cancel its plan, or on our next pass after you delete it. Usage counters are kept for 90 days. Account data, spool configuration and its change history are kept while your workspace exists. When you delete the workspace, its spools run to the end of their paid period and are removed; the account and spool records are then marked closed and retained only as long as the merchant of record's final deliveries and tax and accounting law require, and deleted after that. Support correspondence is kept for up to two years.

9. Where data goes

The controller is in the United States, and several processors listed in section 5 are United States companies; your spool and the service database are hosted in the European Union. Where personal data of people in the EU, EEA, UK or Switzerland is transferred to the United States, we rely on the processor's standard data processing terms, including the EU standard contractual clauses or a Data Privacy Framework certification where the processor holds one. Polar's transfers are governed by Polar's own policy.

10. Your rights

Depending on where you live you may have the right to access the personal data we hold about you, to have it corrected or deleted, to receive it in a portable form, to restrict or object to its processing, and to withdraw consent where processing is based on it. Write to support@getknit.app and we will respond within one month. You may also complain to the data protection authority where you live. We are below the thresholds at which the California Consumer Privacy Act applies, but we give everyone, wherever they live, the same rights: to know what we hold about you, to correct it, to delete it, to receive a copy, and to object. We do not sell personal information and do not share it for cross-context behavioural advertising, and have not done so in the preceding twelve months. We do not respond to browser Do Not Track signals; this site does not track visitors across sites, so there is nothing for the signal to switch off.

Much of this you can do yourself: the dashboard shows and lets you change every setting we hold about a spool, and deleting your workspace removes your account.

11. Security

All connections to the site, the dashboard and every spool use TLS. Access tokens are encrypted at rest with a key the database does not hold. The control plane is built to receive counts rather than content, and access to it is limited to the operator. No method is perfect; if we learn of a breach affecting your data we will tell you and, where required, the relevant authority, without undue delay.

12. Children

The service is for adults. You must be 18 or older to create a workspace, and we do not knowingly collect personal data from anyone under 18. If you believe someone under 18 has created a workspace, contact us and we will delete it.

13. Changes and contact

We may update this policy. Material changes are announced by email to workspace administrators before they take effect, and the current version is always at hosted.getknit.app/legal/privacy-policy. Questions go to support@getknit.app; a person reads them.