Legal
Privacy Policy
1. Who we are
Knownbase is operated by ZS Cloud Systems (SMC-Private) Limited, trading as “ZsTechLabs”. This policy explains what we collect, why, and your choices. Contact us at hello@knownbase.dev.
2. Information we collect
- Account data: email address and hashed password.
- Workspace content: the notes, projects, and tags you or your agents store.
- Usage and security data: session metadata, IP address, and user agent, used for authentication, rate limiting, and audit logging.
- Billing data: our order process is conducted by Paddle.com, our online reseller and Merchant of Record for all orders; we never see or store your card details.
3. Cookies
We use one strictly-necessary cookie, knownbase_session, to keep you signed in; it carries no advertising or tracking data and is never shared with third parties. Your light/dark theme choice is stored in your browser’s local storage, not a cookie. The login, signup, and contact forms load Cloudflare Turnstile, a bot-protection widget that may set its own cookie for that purpose (see Subprocessors).
This site also uses Google Analytics, Microsoft Clarity, and Crisp live chat, each of which sets its own cookies. None of these load until you accept them in the cookie banner shown on your first visit; if you decline, only the strictly-necessary cookies above are set. You can change your choice at any time from the “Cookie preferences” link at the bottom of this page. Ahrefs Web Analytics (see Subprocessors) is cookieless by design and is not gated by this banner.
4. How we use it
To provide and secure the Service, process payments, send transactional email (verification, password reset, invitations), and respond to support requests. We do not sell your personal data.
5. Subprocessors
We operate the Service database on our own application infrastructure. We rely on other service providers including Paddle (payments), Cloudflare (Turnstile bot/abuse protection on login, signup, and the contact form), and an email delivery provider. On our marketing and content pages we also use Ahrefs Web Analytics (cookieless site analytics), Google Analytics, Microsoft Clarity (session-replay analytics), and Crisp (live chat), the latter three only after you accept them in the cookie banner (see Cookies, above). Each processes data only to provide their part of the Service.
6. Retention
We keep your data for as long as your account is active. When you delete a workspace or account, associated data is removed from our systems, subject to routine backup rotation.
7. Your rights
You can access, export, correct, or delete your data at any time from within the app. Depending on your jurisdiction you may have additional rights under laws such as the GDPR or CCPA; contact us to exercise them.
8. Security
Passwords are hashed with PBKDF2, sessions and API keys are stored hashed, transport is encrypted in production, and each workspace is strictly isolated.
9. Governing law
This policy is governed by the laws of Pakistan. If you are located in the EEA, UK, or California, the rights described above (GDPR/CCPA) apply to you regardless of this governing-law clause.
10. Changes
We may update this policy; material changes will be posted here with a new date.