Privacy Notice

Version 2026-09-20 · Effective 27 August 2026

1. Controller

The controller of your personal data is Konrad Ciurkiewicz, conducting business under the name Konrad Ciurkiewicz - Web Solutions, registered in the Polish Central Register and Information on Economic Activity (CEIDG), NIP 7952583478, REGON 529617426, place of business: ul. Przemyska 13A, 37-750 Dubiecko, Poland, correspondence address: ul. Małopolska 1/192, 35-620 Rzeszów, Poland, operating the KnownAt service.

Privacy requests may be sent to privacy@knownat.com.

2. Data we process

account data, including email address, display name, user identifier and authentication provider;
account and legal records, including document versions accepted, optional consents granted or withdrawn, and their timestamps;
technical and security data, including session, request, device, IP and diagnostic information generated when the Service is used;
product usage data, including API requests, queried tools and model outputs, quotas and billing events;
communications sent to support, privacy or other KnownAt contact channels.

3. Purposes and legal bases

PurposeLegal basis

Create and operate your account; provide market tools, APIs and supportPerformance of a contract — Article 6(1)(b) GDPR

Secure the Service, prevent abuse, diagnose failures and establish legal claimsLegitimate interests — Article 6(1)(f) GDPR

Accounting, tax and regulatory obligationsLegal obligation — Article 6(1)(c) GDPR

Optional product marketingConsent — Article 6(1)(a) GDPR; only where separately requested

Optional website analytics (Google Analytics)Consent — Article 6(1)(a) GDPR; only where accepted in the cookie banner

4. Recipients and processors

We disclose data only where needed to operate the Service, comply with law or protect legal rights. Current service categories include database and authentication infrastructure (Supabase), website hosting and delivery infrastructure (OpenAI Sites and Cloudflare), transactional email infrastructure (Cloudflare), website analytics where you consent to it (Google Ireland Limited), and professional advisers or public authorities where legally required.

Processors act under contractual and data-protection obligations. We do not sell personal data.

5. International transfers

Some providers may process data outside the European Economic Area. Where required, transfers rely on an adequacy decision, the European Commission’s Standard Contractual Clauses or another mechanism permitted by Chapter V GDPR.

6. Retention

Account data is retained while the account remains active and is deleted or anonymized after account deletion unless continued retention is required by law or necessary for legal claims. Transaction and accounting records are retained for periods required by Polish law. Security and diagnostic records are retained only for the period reasonably necessary to protect and operate the Service. Consent evidence may be retained as necessary to demonstrate compliance.

7. Your rights

Subject to the conditions in applicable law, you may request access, rectification, erasure, restriction, portability or objection. You may withdraw consent at any time without affecting processing performed before withdrawal. Optional marketing consent can be granted and withdrawn at any time in Dashboard → Settings → Email preferences, and each grant and withdrawal is recorded with its timestamp. Account deletion is available in Dashboard → Settings.

You may lodge a complaint with the President of the Personal Data Protection Office (Prezes Urzędu Ochrony Danych Osobowych) or another competent supervisory authority.

8. Automated decision-making

KnownAt does not currently make decisions producing legal or similarly significant effects about users solely through automated processing.

9. Cookies and local storage

KnownAt uses storage necessary for authentication, security, user-requested preferences such as color theme, and to record your own cookie decision. That storage cannot be switched off, because the Service cannot be provided without it.

We also use Google Analytics 4, provided by Google Ireland Limited, to measure how the Service is used so that we can improve it. It runs in consent mode: analytics and advertising storage are denied by default, so until you accept optional storage no analytics cookies or identifiers are placed on your device and measurement is limited to cookieless signals. If you accept, Google Analytics sets its own cookies (_ga and _ga_<property>) to distinguish sessions and returning visitors. We do not use advertising or marketing cookies, and we do not allow Google to use this data for advertising personalisation.

Optional analytics storage is used only with your consent, which you give or refuse in the cookie banner and may withdraw at any time by clearing site data for knownat.com in your browser; withdrawal does not affect processing carried out before it.

10. Security

We use access controls, encrypted connections, restricted administrative access and provider security controls appropriate to the nature of the Service. No system can guarantee absolute security; suspected incidents should be reported to security@knownat.com.

11. Changes

We may update this notice as the Service or legal requirements change. The current version and effective date appear at the top. Material changes will be communicated through the Service or by email where appropriate.