Privacy Policy

1. What we collect

Knok collects the minimum information needed to operate the service: your account details, resume/profile data, job interactions, application history, and usage of paid features.

2. How we use your data

We use this data only to power your personalized job feed, outreach, tracker, and billing. We do not sell your personal data.

3. Who we share with

We only share data with services required to run the product. Razorpay processes payments; Google or Nylas processes user-approved Gmail sending, depending on the configured connection; and Google Cloud Vertex AI processes the relevant resume/profile and job data needed to produce personalized matches. We do not send Gmail messages or Gmail account data to the matching provider.

If you separately opt in to product analytics, PostHog receives a pseudonymous internal identifier, the page path, and a small allowlisted set of event categories and counts. We do not send PostHog resume text, job descriptions, search terms, email addresses, Gmail data, message content, full URLs, or URL query strings. We do not enable session replay or automatic interaction capture.

Private invite pages record limited operational milestones such as invite sent, page opened, booking completed, account created, Gmail connected, first send, first reply, and paid conversion. These milestones use a one-way, invite-scoped pseudonymous identifier so we can measure whether the private invitation worked end to end. They do not include the invite token, your name or email, resume or search text, job or contact identifiers, mailbox or message content, or payment details. We do not use a cookie or a cross-site visitor identifier for this flow.

4. AI-assisted matching

Matching may use your resume text and the targeting details you confirm, including roles, skills, seniority and location, together with job descriptions. This processing starts only after you accept the current matching notice. You can stop future processing by deleting your account or contacting support to withdraw consent; previously generated scores may remain until they are refreshed or deleted.

5. Your rights

You can request deletion of your account and associated data at any time from your settings or by contacting support. You may also export your data on request.

If you received candidate outreach through Knok, you can suppress your work email across every Knok sender from our contact-removal page. You do not need a Knok account to use it.

6. DPDP notice for users in India

For users in India, we process your personal data based on your explicit consent under the Digital Personal Data Protection Act, 2023. We capture your consent, its purpose, and the time of acceptance. You can withdraw consent by deleting your account; this will stop further processing except where retention is required by law.

7. Data retention

We keep your data for as long as your account is active. After deletion, personal data is erased or anonymized within 30 days, except for payment records retained for legal and tax obligations.

8. Security

We use industry-standard measures to protect your data. However, no online service is completely secure, and you are responsible for keeping your credentials safe.

9. Changes

We may update this policy as the product evolves. Material changes will be notified via email or in-app notice.

10. Contact

For privacy questions or data requests, contact us at support@knok.work.