KnowShit Privacy Policy
Last updated: 2026-10-01. Version 1.1.
1. Who we are
KnowShit (knowsh.it) is run by SoftwareMovers, Inc., a Delaware corporation ("we", "us"). Our address is PO Box 13, Mill Spring, NC 29766, USA.
This policy says what personal data KnowShit collects, why, who we share it with, how long we keep it, and what rights you have. It covers the KnowShit website, web app and AI connector. The general SoftwareMovers privacy policy does not apply to KnowShit where this policy covers the same point.
2. Our two roles
For your account, billing and our logs, we are the controller. We decide why and how that data is used.
For the content in your workspace, we are a processor. The business that owns the workspace decides what goes in it. We process that content only to run KnowShit for it. Where you have signed a Data Processing Addendum with us, it governs that processing. Ask `[email protected]` if you need one.
If you appear in a recording someone else uploaded, contact the business that owns that workspace first. You can also write to us (section 14). We will pass your request to them, and we will act on a takedown request ourselves if you did not consent to the recording.
3. What we collect
Account data. Your name, email address and password (stored as a hash, never in plain text). If you sign in with a provider such as Google, that provider sends us your name and email address. We also keep which workspaces you belong to and your role in each.
Your content. The recordings you upload, and what KnowShit makes from them: transcripts, screenshots, knowledge base pages and outputs. Recordings often contain other people's voices, faces, names and anything shown on screen. Screenshots keep what was visible on screen; we do not redact them.
Usage and service logs. What happens in your workspace: uploads, processing steps, errors, and the cost of each AI model call. Our servers also log requests, which include IP address and browser type.
AI connector records. For each AI assistant you connect: who connected it, which assistant, the permissions it holds, when it was created, last used and revoked. For each call it makes: the tool used, a one-way hash of the search text, the number of results, and how long it took. We do not store the search text itself.
Payment data. Stripe takes your card details on its own checkout page. We never see or store your card number. We keep a record of each purchase: plan, amount, date and status.
Email records. When we email you, we log who it went to, which kind of email it was, and when. We do not keep the content of the email.
Cookies and browser storage. We use only what sign-in and the app need:
- Our sign-in service sets cookies to keep you signed in.
- The web app keeps your sign-in tokens in your browser's storage.
- The web app remembers your light or dark theme choice in your browser.
We use no advertising cookies and no analytics trackers. Cloudflare, which protects knowsh.it, may set a security cookie when it needs to check that a visitor is not a bot.
4. Why we use it, and our legal basis
- To run KnowShit for you: sign-in, storing and processing your content, the AI connector, support. Legal basis: our contract with you.
- To bill you: purchases, invoices, overage. Legal basis: our contract with you, and our legal duty to keep financial records.
- To keep KnowShit secure and working: logs, rate limits, abuse checks, fixing faults. Legal basis: our legitimate interest in a safe, working service.
- To email you about your account: processing done, invites, billing, changes to these policies. Legal basis: our contract with you.
- To meet the law: answering lawful requests, keeping tax records. Legal basis: legal obligation.
KnowShit sends no marketing email.
5. What we never do
- We do not sell your personal data. We do not "share" it for cross-context advertising, as California law defines it.
- We do not use it for advertising.
- We do not train AI models on your content. Our model provider is Microsoft, through the Azure OpenAI Service. Microsoft's terms for that service say it does not train its models on your content either. Microsoft may keep the text we send it, and the text it sends back, for up to 30 days, only to detect abuse of its service.
6. Who we share it with
We share personal data only with the providers below, so they can help run KnowShit. Each works under a contract that limits use to that purpose.
| Provider | What they do for KnowShit | Where |
|---|---|---|
| OVH | Hosts our servers and database | United States |
| Backblaze (B2) | Stores your files and our database backups | United States (US East) |
| Microsoft (Azure OpenAI Service) | Runs the AI models that read transcripts and screenshots and write your knowledge base and outputs | United States (US data zone) |
| Twilio SendGrid | Sends our emails | United States |
| Stripe | Takes payments and runs subscriptions | United States and Ireland |
| Cloudflare | Delivers traffic to knowsh.it and protects it from attacks | Global |
Our sign-in service, AI gateway, database and monitoring tools run on our own servers. They are not third parties.
Not our providers. The sign-in provider you choose, such as Google, and the AI assistant you connect work for you under their own terms. We share with them only what section 7 and your sign-in need.
We may also disclose personal data to our professional advisers under a duty of confidentiality, to authorities when the law requires it, or to a buyer if SoftwareMovers or KnowShit is sold. A buyer must keep this policy's protections.
If you upload content that breaks the safe-for-work rule in our Terms of Service, we may tell the owner of your workspace and your employer what was uploaded and by whom.
We will email workspace owners at least 30 days before we add a provider that handles your content.
7. How the AI connector moves data
On Premium and Team plans, you can connect KnowShit to an AI assistant such as Claude, ChatGPT, GitHub Copilot, Cursor or Copilot Studio. Here is what happens.
- You connect the assistant through our sign-in screen and approve it. You can revoke it at any time.
- When you ask your assistant something, it may search your knowledge base on your behalf.
- We return the matching passages, their timecodes, and links to the screenshots and claims on knowsh.it.
- We never return the recording itself or a download link.
- Your assistant's provider then holds those passages under its own terms and your settings with it.
We cannot control what your AI provider does with data after it arrives. Check its privacy settings, and turn off training on your data there.
A workspace owner can see every connection and call in the workspace, and can revoke any connection.
8. How long we keep it
- Free plan recordings: moved to the trash 7 days after they are ready. Purged 180 days after that, unless you upgrade first.
- Paid plan content: kept while the workspace is on Premium or Team. Premium does not expire, so its content is kept until you delete it or delete the workspace.
- A recording you delete: kept in the trash for 180 days, so you can restore it, then purged.
- A workspace you delete: purged 30 days after you delete it.
- AI connector records: kept until you ask us to delete them. We plan an automatic limit and will update this policy when it is live.
- Email records: up to 13 months.
- Server and monitoring logs: 7 days. Performance metrics, which hold no personal data, are kept 30 days.
- Backups: database backups expire within 35 days. Purged data leaves backups when they expire.
- Account data: while your account is active. We delete it within 30 days after you close it, except what the law makes us keep.
- Purchase records: 7 years, as tax and accounting law requires.
9. How we protect it
- Each workspace is walled off in the database. One workspace cannot read another's rows.
- Files sit in private storage. We give out short-lived links to view them.
- Traffic between your browser and KnowShit is encrypted.
- Only staff who need access to run, support or secure KnowShit can reach your data.
No system is perfectly secure. If a breach affects your personal data, we will tell you and the authorities as the law requires.
10. Where your data is
Your recordings, transcripts, screenshots, knowledge base pages and outputs are stored and processed in the United States. Our servers, our file storage and the AI models we use are all there. SoftwareMovers is a US company. When personal data from the EU, UK or Switzerland goes outside those areas, we use the European Commission's Standard Contractual Clauses and the UK addendum to them.
11. Your rights
Depending on where you live, you can ask us to:
- show you the personal data we hold about you;
- correct it;
- delete it;
- give you a copy you can take elsewhere;
- stop or limit how we use it, or object to a use based on our legitimate interest; and
- withdraw a consent you gave.
You can download your recordings and outputs from the app yourself. You can delete recordings and workspaces yourself.
In the EU and UK, you can also complain to your data protection authority. In the UK, that is the ICO.
In California, you have the right to know, delete and correct your personal information, and to not be treated differently for using these rights. We do not sell or share personal information.
To use a right, email `[email protected]`. We may need to confirm who you are. We reply within the time the law sets. For content in a workspace you do not own, we may refer you to the business that owns it (section 2).
12. Children
KnowShit is not for anyone under 18. We do not knowingly collect a child's personal data. Recordings must not contain a child's personal data. If you think one does, email `[email protected]` and we will delete it.
13. Changes to this policy
We may update this policy. For a material change, we will email you or post a notice at least 30 days before it takes effect.
14. Contact
SoftwareMovers, Inc., PO Box 13, Mill Spring, NC 29766, USA
- Privacy: `[email protected]`
- Support: `[email protected]`
- Security: `[email protected]`