Draft

Privacy Policy

Last updated: March 2026

1. Data Controller

Knowledge Raven is the data controller for personal data processed through the Service. Contact: hello@knowledge-raven.com

2. Data We Collect

We collect: account information (name, email), uploaded documents and their metadata, usage analytics (search queries, feature usage), and technical data (IP address, browser type).

3. How We Use Your Data

Your data is used to provide and improve the Service: indexing documents for search, authenticating users, and generating usage analytics. We do not use your documents to train AI models.

4. Data Storage and Security

Documents are stored in Supabase Storage with encryption at rest. Vector embeddings are stored in Weaviate. All data is transmitted over TLS. Access is controlled via multi-tenant isolation.

5. Your Rights (GDPR)

Under GDPR, you have the right to: access your data, rectify inaccurate data, request deletion, restrict processing, data portability, and object to processing. Contact us to exercise these rights.

6. Data Retention

We retain your data for as long as your account is active. Upon account deletion, all documents, embeddings, and personal data are permanently removed within 30 days.

7. Third-Party Services

We use: Supabase (database and storage), Weaviate (vector database), Google (embedding API). These providers process data according to their own privacy policies and our data processing agreements.

8. Changes to This Policy

We may update this Privacy Policy. Material changes will be communicated via email or in-app notification.