Privacy Policy

This Privacy Policy explains what information KiteKnot, operated by Monklit LLC ("we," "us"), collects when you use our customer-relationship and team-management application (the "Service"), how we use it, who we share it with, and the choices you have. By creating an account you agree to this policy.

1. Information we collect

Account information. Your full name, email address, and password. Your password is stored only as a salted hash — we cannot read it.

Workspace content. The records you and your team create in the Service: contacts, prospects, pipeline deals, appointments, follow-ups, notes, genealogy relationships, rank and compensation data, and team membership. You control this content. If you import contacts, you are representing that you have the right to upload that data.

Billing information. We collect billing country, plan, and subscription status. Card numbers are collected and processed directly by Stripe — we never see or store your full card number.

Usage and log data. IP address, browser type, pages visited, and feature interactions, collected for security, abuse prevention, and service reliability.

Cookies. We set strictly necessary cookies to keep you signed in and to secure your session. We do not run advertising or cross-site tracking cookies, and we do not sell or share your personal information for targeted advertising.

Optional integrations. If you connect Google (sign-in or calendar), we receive your Google account identifier and the calendar data you authorize. You can disconnect at any time from Settings.

2. How we use your information

We use the information we collect to:

• Provide, operate, and maintain the Service
• Create your account, authenticate you, and secure your session
• Process subscriptions and send transactional receipts
• Send service messages — verification, reminders, and notifications you trigger
• Detect, prevent, and respond to fraud, abuse, and security incidents
• Improve the product and understand feature usage in aggregate
• Comply with legal obligations

We do not sell your personal information. We do not use your workspace content to train machine-learning models.

3. Who we share it with

We share data only with service providers who process it on our behalf:

• Supabase — authentication and database hosting (data stored in their cloud infrastructure)
• Vercel — application hosting and delivery
• Stripe — payment processing
• Google — optional sign-in and calendar sync, only if you connect it
• Our email provider — transactional email delivery (verification, receipts, reminders)

We may also disclose information if required by law, or to protect the rights, safety, and property of KiteKnot, our users, or the public. If KiteKnot is involved in a merger, acquisition, or asset sale, your information may transfer — we will notify you before it becomes subject to a different policy.

4. Retention and deletion

We keep your information only as long as needed to provide the Service:

• While your account is active, we keep your workspace data so the Service works.
• If your subscription ends: 7 days of full access, then read-only until day 30.
• After day 30 read-only, your account is scheduled for permanent deletion 90 days after cancellation — unless you ask us to retain it earlier or longer where a legal obligation requires.
• You can request deletion of your account at any time.
• Some records (for example, payment receipts) are retained for the period required by tax and accounting law.

When you delete a contact or record inside the product, it is removed from your workspace. Backups age out on a rolling schedule, so residual copies may persist briefly before being overwritten.

5. Your rights and choices

Depending on where you live, you may have the right to access, correct, export, or delete your personal information, and to object to or restrict certain processing. To exercise any of these rights, email legal@kiteknot.com. We will respond within the period required by applicable law.

If you are a California resident, we do not "sell" or "share" your personal information as those terms are defined by the CPRA. We honor Global Privacy Control signals where applicable.

You can unsubscribe from promotional email at any time using the link in any message. Transactional messages (receipts, security alerts, service notices) are part of the Service and are not promotional.

6. Security

We protect information with encryption in transit (TLS) and at rest, role-based access controls, password hashing, audit logging of sensitive actions, and rate limiting on authentication endpoints. No system is perfectly secure — if we become aware of a breach affecting your personal information, we will notify you and the relevant authorities as required by law.

7. International transfers

Monklit LLC is registered in the State of New Mexico, United States. Our service providers host and process information in the United States and potentially other countries. If you are located outside the United States, your information will be transferred to the United States, where privacy laws may differ from those in your jurisdiction. Where required, we use contractual safeguards for these transfers.

8. Children

The Service is a business product and is not directed to children under 16. We do not knowingly collect personal information from children.

9. Changes to this policy

We may update this policy from time to time. If we make material changes, we will notify you by email or through the Service before the changes take effect. The effective date at the top shows when this policy was last revised.

10. Contact us

Monklit LLC (operator of KiteKnot)
Email: legal@kiteknot.com
Mailing address: [TODO — add Monklit LLC mailing address before launch]