Privacy Policy

knovaly provides a revenue intelligence application that analyses data in a customer's connected HubSpot portal and returns an executive report. In this policy, "knovaly", "we" and "us" refer to the operator of the knovaly service; "you" refers to the customer account holder.

For personal data contained in your CRM, you are the data controller and knovaly acts as a data processor, processing that data only on your instructions.

Account data. Your email address, authentication credentials handled by our authentication provider, and workspace settings.

CRM data. When you connect HubSpot, we read deals, companies, contacts, owners, line items, quotes and engagement timestamps. This can include business contact details such as names, job titles, company names and email addresses held in your CRM.

Connection data. Encrypted HubSpot OAuth tokens, your portal ID, granted scopes and connection status.

Usage and diagnostic data. Scan run metadata, product events such as which report sections were opened, and technical error records used to operate and improve the service.

Billing data. Plan, subscription status and the Stripe customer and subscription identifiers. Card details are handled by Stripe and never reach knovaly.

• To produce, store and re-open the revenue reports you request.
• To authenticate you and keep your workspace separate from every other workspace.
• To operate billing, enforce plan eligibility and provide support.
• To detect, investigate and fix faults, abuse and security issues.

We do not sell personal data, we do not use your CRM data to advertise to your contacts, and we do not use one customer's CRM data to serve another customer.

Where the GDPR applies, we rely on: performance of a contract (providing the service you signed up for), legitimate interests (securing and improving the service), and legal obligation (financial record keeping). Where you are the controller of CRM personal data, you are responsible for having a lawful basis for that processing.

We use a small number of service providers to run knovaly:

• HubSpot — the source CRM system you choose to connect.
• Supabase — managed database, authentication and storage.
• Cloudflare — application hosting and content delivery.
• Stripe — payment processing and subscription billing.

These providers process data only to deliver their part of the service. We will update this list before adding a sub-processor that handles customer data.

Scan reports and their supporting evidence are retained in your workspace until you delete them or close your account. Disconnecting HubSpot deletes the stored credentials for that portal and stops all further reads. On account deletion, workspace data, reports and credentials are deleted; limited billing records are retained where required for accounting and tax purposes.

Depending on your jurisdiction, you may have the right to access, correct, export, restrict or delete personal data we hold about you, and to object to certain processing. To exercise any of these, use the Data Deletion Request page or email privacy@knovaly.com. If a request concerns personal data inside a customer's CRM, we will refer the request to that customer as the controller and assist them in responding.

Our providers may process data in the United States and the European Union. Where personal data is transferred out of the EEA or the UK, our providers rely on standard contractual clauses or an equivalent approved transfer mechanism.

knovaly uses cookies and browser storage that are strictly necessary to keep you signed in and to secure the application. We do not use advertising cookies or third-party behavioural tracking on the product.

We will post any material change to this policy on this page and update the date above. Questions about this policy can be sent to privacy@knovaly.com.