Privacy Policy

1. Introduction

Knewcleus ("we", "our", "us") operates the AI-powered knowledge platform at knewcleus.app. This Privacy Policy describes how we collect, use, store, and protect your information when you use our Service. It also explains how we access and use data from Google (Gmail, Google Drive) and Slack when you choose to connect those accounts.

By using Knewcleus, you agree to the practices described in this policy. If you do not agree, please do not use the Service. Our Terms of Service govern your use of the Service and are incorporated by reference.

2. Data We Collect

2.1 Account information

When you sign in with Google, we receive your email address, name, and profile picture from Google. We use this to create and manage your account and to display your identity within the Service.

2.2 Billing information

If you subscribe to a paid plan, payment is processed by Stripe. We do not store your full credit card number. We store billing-related identifiers (e.g. Stripe customer ID and subscription ID) to manage your plan and provide support.

2.3 Data from connected sources

When you connect Gmail, Google Drive, or Slack, we access and process data from those services as described in sections 3 and 4 below. We only access data you explicitly authorize via OAuth. You can disconnect a source or delete your account at any time.

3. How We Use Google User Data (Gmail & Drive)

We request access to your Google account only to provide the core functionality of Knewcleus. Our use of Google user data is limited to what is described here and is consistent with our OAuth consent screen and Google API policies.

3.1 Gmail

We use the Gmail API with read-only access (gmail.readonly). We:

• Read the subject and body text of your emails to index them in our search system.
• Store a processed copy of this content (e.g. truncated text and metadata) in our secure database so you can search and ask questions about your email via our AI.

We do not send, delete, modify, or share your emails. We do not use your Gmail data for advertising, and we do not use it to train AI models for purposes unrelated to serving your queries.

3.2 Google Drive

We use the Google Drive API with read-only access (drive.readonly). We:

• Read file metadata and file content (e.g. Google Docs, Sheets, Slides, and PDFs) that you have connected.
• Extract text from these files, index it, and store it in our secure database so you can search and ask questions about your files via our AI.

We do not create, edit, delete, or share your Drive files. We do not use your Drive data for advertising or to train AI models for purposes unrelated to serving your queries.

4. How We Use Slack Data

When you connect Slack, we request permission to read messages and files from channels and conversations you authorize. We:

• Read message content and relevant metadata to index them in our search system.
• Store processed content (e.g. text and metadata) in our secure database so you can search and ask questions about your Slack data via our AI.

We do not post messages, modify channels, or share your Slack data with third parties. We do not use it for advertising or to train AI models for purposes unrelated to serving your queries. You can revoke Slack access at any time from your Connection settings.

5. Storage & Security

We store your data on infrastructure provided by Google (Firebase/Firestore and Google Cloud). Data is stored in a way that associates it only with your account. We use industry-standard security practices, including:

• Encryption in transit (HTTPS) and at rest where supported by our providers.
• Secure storage of OAuth tokens (e.g. via Google Secret Manager and secure application configuration).
• Access controls so that only your account can access your indexed data.

We do not sell your personal data or your content from Gmail, Drive, or Slack to anyone.

6. Data Retention & Deletion

We retain your indexed content and account data for as long as your account is active and your connections are enabled. When you:

• Disconnect a source (e.g. Gmail or Drive): We delete the indexed data we obtained from that source.
• Delete your account: We delete your account information and all indexed data associated with your account within 30 days.

You may request account deletion or a copy of your data by contacting us at hello@knewcleus.app.

7. Sharing & Disclosure

We do not sell, rent, or share your personal data or the content of your emails, files, or messages with third parties for their marketing or advertising purposes.

We may share data only in the following circumstances:

• Service providers: With trusted providers who help us operate the Service (e.g. hosting, payment processing, email). These providers are contractually required to protect your data and use it only for the services they provide to us.
• Legal requirements: When required by law, court order, or government request, or when we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.
• Business transfer: In connection with a merger, acquisition, or sale of assets, in which case we will notify you and any successor will be bound by this Privacy Policy.

8. Cookies & Similar Technologies

We use cookies and similar technologies to keep you signed in, remember your preferences, and operate the Service securely. We do not use cookies for third-party advertising or tracking across other sites. You can control cookies through your browser settings, though disabling them may affect your ability to use the Service.

9. Your Rights

Depending on your location, you may have the right to:

• Access the personal data we hold about you.
• Correct or update that data.
• Request deletion of your data.
• Object to or restrict certain processing.
• Data portability (e.g. a copy of your data in a machine-readable format).

To exercise these rights, or if you have questions about our practices, contact us at hello@knewcleus.app. We will respond within a reasonable time. If you are in the European Economic Area or UK, you also have the right to lodge a complaint with your local data protection authority.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page and update the "Last updated" date. For material changes, we will notify you by email or through a notice in the app. Your continued use of the Service after changes take effect constitutes your acceptance of the revised policy.

11. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

• Email: hello@knewcleus.app
• Website: knewcleus.app

This Privacy Policy is governed by the same jurisdiction as our Terms of Service.