Knowledge Company Privacy Policy

Knowledge Layer Labs Inc., doing business as Knowledge Company (“Knowledge Company,” “we,” “us,” or “our”), respects your privacy. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you visit knowledgecompany.ai, contact us, complete a Stripe checkout, subscribe to or use our services, or otherwise interact with us (collectively, the “Services”).

This Policy applies to website visitors, prospective customers, customers, and individuals who communicate with us. It does not apply to information processed solely on behalf of a business customer, as explained in Section 10, or to third-party websites and services governed by their own policies.

1. Personal Information We Collect

The information we collect depends on how you interact with the Services.

1.1 Information you provide

We may collect:

• Contact and business information, such as your name, business email address, telephone number, company, job title, and business address;

• Account and subscription information, such as your selected plan, trial status, subscription status, billing contact, and account preferences;

• Communications, including messages, meeting notes, support requests, survey responses, and other information you choose to provide;

• Client materials, such as website URLs, company information, approved claims, content, files, instructions, analytics exports, and information needed to perform the Services; and

• Access information, such as the fact that you granted named-user access to an analytics, search-console, cloud, or content-management account. We do not ask you to send shared passwords or full payment-card information.

1.2 Payment and transaction information

Payments are processed by Stripe. We may receive limited transaction information from Stripe, such as your name, email address, billing address, payment-method type, the last four digits of a payment card, subscription plan, discount, payment status, invoices, and transaction identifiers. We do not receive or store your full payment-card number or card security code.

1.3 Information collected automatically

When you use our website or online Services, we and our service providers may automatically collect:

• IP address and approximate location derived from it;

• browser, device, operating-system, and language information;

• pages viewed, links clicked, referring pages, timestamps, and session activity;

• cookie, local-storage, analytics, and similar identifiers; and

• diagnostic, security, error, and access logs.

1.4 Information from other sources

We may receive information from:

• the company or person that invited you to use the Services;

• payment, hosting, analytics, communications, and identity providers;

• integrations you or your organization authorize;

• public websites, search engines, public business directories, and other publicly available sources; and

• referral partners or professional contacts.

2. How We Use Personal Information

We may use personal information to:

• provide, operate, personalize, and support the Services;

• create and administer accounts, subscriptions, trials, discounts, and payments;

• perform onboarding, research, visibility analysis, content strategy, reporting, and other contracted work;

• authenticate users and manage authorized access and integrations;

• communicate about inquiries, subscriptions, deliverables, support, security, and service changes;

• send marketing communications where permitted by law, with an unsubscribe option;

• understand website and product usage and improve functionality and performance;

• protect the Services, our customers, and others from fraud, abuse, security threats, and unlawful activity;

• enforce agreements, resolve disputes, and collect amounts due;

• comply with legal, tax, accounting, regulatory, and reporting obligations; and

• establish, exercise, or defend legal claims.

We may create aggregated or de-identified information that cannot reasonably identify an individual and use it for lawful business purposes. We will not attempt to re-identify information that applicable law requires us to maintain as de-identified.

3. Legal Bases for Processing

Where European Economic Area, United Kingdom, or similar law requires a legal basis, we process personal information as necessary to:

• perform a contract or take requested steps before entering one;

• pursue legitimate interests, such as operating, securing, improving, and marketing the Services, where those interests are not overridden by individual rights;

• comply with legal obligations; or

• act with consent, where consent is required.

You may withdraw consent at any time, but withdrawal does not affect processing already completed lawfully.

4. How We Disclose Personal Information

We may disclose personal information to:

• Service providers and processors that support payments, billing, cloud hosting, website delivery, analytics, communications, scheduling, customer support, security, search measurement, content management, and AI-assisted service delivery;

• Authorized integrations and business customers when you or your organization directs us to connect, publish, report, or share information;

• Professional advisers, including attorneys, accountants, auditors, insurers, and financial institutions;

• Government authorities or other parties when reasonably necessary to comply with law, legal process, or valid governmental requests; protect rights, safety, and security; investigate fraud or abuse; or enforce agreements; and

• Transaction participants in connection with a proposed or completed financing, merger, acquisition, reorganization, bankruptcy, or sale of all or part of our business, subject to appropriate confidentiality protections.

Our providers may include Stripe for payments, Framer for website delivery, Cloudflare for network and security services, and other providers enabled for analytics, communications, search, cloud infrastructure, and AI functionality. Their processing is also governed by their own privacy terms.

We do not sell personal information for money. We do not knowingly share personal information for cross-context behavioral advertising. If these practices change, we will update this Policy and provide any legally required notices and choices.

5. AI Systems and Client Information

We may use artificial-intelligence systems to support research, analysis, drafting, classification, measurement, and quality control. When non-public Client information is processed through an AI or infrastructure provider, we use it only to provide the Services and apply available business or enterprise protections appropriate to the engagement.

We do not use a Client’s non-public business information to train publicly available third-party AI models. Clients should not provide sensitive personal information, regulated records, passwords, private keys, or payment-card details unless we have expressly agreed in writing to appropriate safeguards.

AI-generated output may be reviewed by personnel or contractors involved in delivering the Services. We do not use solely automated decision-making to make decisions about individuals that produce legal or similarly significant effects.

6. Cookies and Similar Technologies

We and our providers may use cookies, pixels, local storage, and similar technologies to:

• keep the website and checkout functioning;

• remember settings and preferences;

• protect against fraud and abuse;

• understand traffic and engagement; and

• improve the Services.

You can control cookies through your browser or any consent controls we provide. Blocking certain cookies may affect functionality. We honor legally recognized opt-out preference signals, such as Global Privacy Control, where required by applicable law.

Because there is no universally accepted standard for browser “Do Not Track” signals, we do not respond to those signals unless required by law.

7. Data Retention

We retain personal information only for as long as reasonably necessary for the purposes described in this Policy. The retention period depends on:

• the duration of the customer or business relationship;

• the type and sensitivity of the information;

• contractual commitments and Client instructions;

• security, fraud-prevention, backup, and dispute-resolution needs; and

• applicable legal, tax, accounting, and regulatory requirements.

When information is no longer reasonably necessary, we delete, de-identify, or securely isolate it, subject to lawful backup and recordkeeping requirements.

8. Data Security

We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. These may include access controls, named-user permissions, encryption provided by our platforms, logging, limited personnel access, and service-provider review.

No system is completely secure, and we cannot guarantee absolute security. You are responsible for safeguarding your own accounts and promptly notifying us if you suspect unauthorized access.

9. Your Privacy Rights and Choices

Depending on your location and applicable law, you may have the right to:

• request access to or a copy of personal information about you;

• request correction or deletion;

• request portability of information you provided;

• object to or restrict certain processing;

• withdraw consent;

• opt out of the sale or sharing of personal information, targeted advertising, or certain profiling;

• appeal a decision concerning a privacy request; and

• receive equal service and pricing without unlawful discrimination for exercising your rights.

To submit a request, email leanid@knowledgecompany.ai with the subject line Privacy Request. Describe your request and the email address or account involved. We may need to verify your identity and authority before responding. An authorized agent may submit a request where permitted by law, but we may require proof of authorization and identity verification.

We will respond within the period required by applicable law. We may deny or limit a request where an exception applies and will explain the basis when required. You may also have the right to complain to your local data-protection authority.

You may unsubscribe from marketing emails using the link in the message or by contacting us. We may still send transactional or service-related communications.

10. Information We Process for Business Customers

When a business customer provides personal information for us to process solely on its behalf, the customer generally determines the purpose and means of that processing, and Knowledge Company acts as its service provider or processor. The customer is responsible for providing required notices, obtaining any required permissions, and giving lawful instructions.

If your personal information was supplied to us by one of our business customers, please direct your privacy request to that customer first. We will assist the customer as required by our agreement and applicable law.

We may process public website content and publicly available business information as part of search, GEO, AEO, content-integrity, and knowledge-management services. This Policy does not restrict lawful processing of information that is not personal information.

11. California Privacy Notice

The following summarizes the categories of personal information we may collect, the sources, the business purposes, and the categories of recipients. The examples describe possible practices during the preceding 12 months and do not mean that we collected every example about every person.

California disclosure categories

Identifiers — Name, email, telephone number, IP address, account or transaction identifiers. Sources include you, your organization, Stripe, and website technologies. Used for service delivery, billing, communications, and security; disclosed to service providers and authorized parties.

Customer and commercial information — Company, title, subscription, trial, discount, invoices, and purchase history. Sources include you, your organization, and Stripe. Used for subscription administration, accounting, and support; disclosed to payment and professional-service providers.

Internet or electronic activity — Browser, device, pages viewed, links clicked, logs, and cookie identifiers. Sources include the website, devices, analytics providers, and security providers. Used for website operation, analytics, and security.

Professional information — Employer, role, and business contact details. Sources include you, your organization, and public business sources. Used for sales, onboarding, service delivery, and communications.

Audio, visual, or communication content — Announced call recordings, meeting notes, messages, and support communications. Sources include you and communication tools. Used for support, documentation, training, quality, and dispute resolution.

Inferences — Business interests, likely service needs, and engagement patterns. Derived from the information described above. Used for personalization, sales, and service improvement.

Sensitive personal information — Account credentials or precise information only if incidentally provided. Sources include you or your organization. Used only for security and authorized service delivery; not used to infer characteristics and not sold or shared for advertising.

We do not use or disclose sensitive personal information to infer characteristics about individuals. We do not offer financial incentives in exchange for personal information. The exact rights available under California law depend on whether the applicable statutory requirements are met, but we will consider verified requests as described in Section 9.

12. International Data Transfers

Knowledge Company is based in the United States. If you access the Services from another country, your information may be processed in the United States and other locations where our providers operate. Where required, we use recognized safeguards for international transfers, such as contractual protections, and take steps designed to protect information consistently with this Policy.

13. Children’s Privacy

The Services are intended for businesses and are not directed to children under 18. We do not knowingly collect personal information from children. If you believe a child provided personal information to us, contact us so we can review and delete it as appropriate.

14. Third-Party Services and Links

Our website and Services may link to or integrate with third-party services. We do not control their privacy practices. Review the privacy policies of Stripe and any other third-party service you choose to use.

15. Changes to This Policy

We may update this Policy as our practices, technology, or legal obligations change. We will post the updated version at this URL and update the “Last updated” date. If a change materially affects how we use previously collected personal information, we will provide additional notice or obtain consent where required.

16. Contact Us

For privacy questions or requests, contact:

Knowledge Layer Labs Inc. Doing business as Knowledge Company Email: leanid@knowledgecompany.ai Website: https://knowledgecompany.ai