Privacy Policy

Last updated: July 2026

1. Who we are

Known. is an AI-native org design tool built for founders. It is operated by Known. ("we", "us", "our"), a sole trader registered in Australia (ABN 47 360 586 979). If you have questions about this policy, contact us at contact@makeitknown.com.au.

2. What we collect

  • Account data: your name and email address, provided when you sign up or sign in with Google.
  • Preview data: if you generate a free genome preview and give us your email to reveal or save it, we keep that email and the context you entered (your goal and company details) to send you the genome and, only if you opt in, to contact you about Known. You can ask us to delete it at any time (see below).
  • Workspace data: the goals, context, capabilities, and org design content you create inside Known.
  • Usage data: pages visited, features used, and session activity collected automatically to improve the product.
  • Billing data: when you subscribe to a paid plan, our payment processor (Stripe) collects and processes your payment details. We do not store your full card number; we receive only your subscription status and limited billing information needed to manage your plan.
  • Connected-service data: if you choose to connect a third-party service (for example, Slack), we access only the data from that service that you authorise, solely to provide the features you request.
  • Google sign-in data: when you authenticate via Google OAuth, we receive your name, email address, and profile picture from Google. We do not access your Google Drive, Gmail, Calendar, or any other Google services unless you explicitly connect them.

3. How we use your data

  • To provide and operate the Known. service.
  • To authenticate you and maintain your session.
  • To send transactional and service emails (e.g. account confirmation, password reset, and workspace activity digests) via our email provider (Resend). We do not send marketing emails without your consent.
  • To process payments and manage your subscription through our payment processor (Stripe) when you are on a paid plan.
  • To improve the product based on aggregated, anonymised usage patterns.
  • To pass relevant workspace context to AI models (Anthropic Claude) solely to generate the responses you request. We do not use your data to train AI models.

4. Third-party services

  • Supabase: database, authentication, and file storage. Data is stored in Sydney, Australia (ap-southeast-2).
  • Lovable: application hosting and delivery. Your requests and data pass through Lovable's infrastructure to run the Service.
  • Anthropic: AI inference for capability graph generation, goal assessment, and design packages. Prompts and responses are processed in transit and are not retained by Anthropic for training.
  • Stripe: payment processing for paid plans. Stripe handles your card details directly under its own privacy policy; we do not receive or store your full card number.
  • Resend: delivery of transactional and service emails (sign-in confirmation, password reset, and activity digests).
  • Slack: optional integration. If you connect Slack, we access the workspace data you authorise (such as messages and channels) to provide the connected features. You can disconnect it at any time.
  • Google OAuth: optional sign-in method. Governed by Google's Privacy Policy.

We do not sell your data to any third party.

5. Data retention

We retain your data for as long as your account is active. You can delete your workspace and account at any time by contacting us at contact@makeitknown.com.au. We will delete all associated data within 30 days of the request.

6. Security

All data is encrypted in transit (TLS) and at rest. Access controls are enforced at the database level using row-level security. We use industry-standard practices and review them regularly.

7. Your rights

You have the right to access, correct, or delete the personal data we hold about you. To exercise any of these rights, email us at contact@makeitknown.com.au. If you are in Australia, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC). If you are in the EU or UK, you also have the right to lodge a complaint with your local data protection authority.

8. Changes

We may update this policy from time to time. When we do, we will update the date at the top of this page. Continued use of Known. after changes are posted constitutes acceptance of the updated policy.