Privacy policy

1. Two kinds of data

Account data is your email address, your licence and your payment record. If you join the waitlist, it is your email address and nothing else. NextGen Software Ltd decides how it is used and is the controller of it.

Workspace data is what your flows save for you: leads and contacts, posts, tasks, reports, targets and your business profile. You decide what is collected. We process it for you, on your instructions, and you are the controller of it. Section 6 is the data processing agreement that covers it.

To keep the flows working, we count runs across all workspaces: whether each one went well, failed, was blocked or never reported, the reason code and step it stopped at, and the flow version. These counts never include the text of a report or anything from your records. Feedback you send us from the dashboard or through your Claude is account data, and we use it to decide what to fix and build next.

Instagram comments and the starter pack

When you comment the word KNORRA on one of our Instagram posts, we send you one direct message offering a link, send the link when you tap the button or reply, and post a short public reply under your comment. We store the comment id, your Instagram user id and username, the comment itself cut to 200 characters, and whether each message was sent. Comments without the word are not stored. We do not message you again unless you write to us.

When you leave your email on the starter pack page, we store the address, the page that sent you and whether you ticked the box for more emails, and we email you the pack once. We only email you again if you ticked the box, and you can stop that at any time.

NextGen Software Ltd is the controller of this data. To have it deleted, write to the privacy address on this page.

2. Where data lives

Each kind of data has one home.

• Leads, contacts, posts, tasks, reports, targets and business profile: our database, kept apart per workspace.
• Mailbox contents, advertising accounts and social accounts: your own tools, reached only by your own Claude. They never reach Knorra.
• Bank statements and Finance Manager output: your own Claude only. Never sent to Knorra.
• Account email, licence and payment record: Knorra and our payment provider.

3. What we never receive

The Knorra connector sends method and takes back records and reports. It never asks for, and flows are instructed never to send, mailbox contents, passwords, tokens, payment details or anything from the Finance Manager.

4. Why we use account data

We use a waitlist address only to write once, when Knorra opens to buyers, and delete it on request. We use your email to sign you in, to send receipts and renewal notices, to answer support messages and, if you turn it on, to send the daily brief. We use your licence and payment record to provide what you bought. We do not sell data and we do not use it for advertising.

5. Who else processes data

These companies process data for us:

• Vercel: hosting of the site, the dashboard and the connector, and counting visits to the public pages without cookies.
• Neon: the database.
• Resend: sending email.
• Stripe: taking payment.
• Meta: measuring our adverts on Facebook and Instagram, only for visitors who accept advertising cookies on the public site, and carrying the Instagram messages described above.

6. Data processing agreement

For workspace data, where you are the controller and we are your processor, we agree that we:

• process it only to provide the product to you, on your instructions through the product;
• keep each workspace's data apart from every other workspace's;
• require confidentiality from anyone who can access it;
• use the sub processors listed above and tell you before adding one;
• help you answer requests from the people whose data it is, by letting you export, correct and delete records;
• tell you without undue delay if we become aware of a breach affecting your workspace data;
• delete it six months after your licence expires, or sooner if you ask.

7. How long we keep data

Workspace data is kept while your yearly plan is paid and for six months after it ends, then deleted. You can export it at any time and ask us to delete it sooner.

Account data is kept while you have an account. Payment records are kept for as long as tax law requires.

Sign in links expire after 15 minutes. Emails we send are logged so support can see what you were sent.

Instagram comment records are deleted after 12 months. A starter pack request is kept until you ask us to delete it.

8. Your rights

You can ask for a copy of your data, ask us to correct or delete it, and object to how it is used. Export is built in to settings. For anything else write to the privacy address on this page. You can also complain to the Information Commissioner's Office in the UK.

9. If something goes wrong

If we become aware of a personal data breach, we tell the affected customers without undue delay and, where the law requires it, the Information Commissioner's Office within 72 hours of becoming aware.

10. Cookies

We set one cookie to keep you signed in and one to remember your light or dark theme. A third remembers your answer to the cookie banner.

We count visits to our public pages with Vercel Web Analytics. It sets no cookies and does not identify you; it records the page, the referring site, and the browser and country in general terms.

If you accept advertising cookies, our public pages load the Meta pixel. It sets cookies and tells Meta which pages you visited and whether you started or completed a purchase, so we can see which of our adverts on Facebook and Instagram work. It never loads inside the signed in product, and nothing loads until you say yes. You can change your answer at any time from Cookie settings at the foot of every public page.

Contact

NextGen Software Ltd. privacy@knorra.ai