Privacy Policy

Last Updated: 09 Sept, 2026 Effective: 8 Sept, 2026

Knockio, LLC, doing business as Knockio ("Knockio," "we," "us," or "our") respects the privacy of our users and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, transfer, and store your personal information when you visit our website, mobile application, or APIs, or otherwise use our products and services (the "Services").

This Privacy Policy is incorporated into the Knockio Terms and Conditions by reference. Please also see our Payment Processing Policy, which explains how payments are handled and the limited role Knockio plays in them.

Our Role: Controller and Processor

Knockio acts in two different capacities depending on whose personal information is involved. The distinction matters, because it determines who you should contact about your information.

We are a controller of personal information relating to our own customers and visitors. This includes account holders and their users, billing and subscription information, marketing and support communications, and information collected automatically from visitors to our website and application. For this information we determine the purposes and means of processing, and this Privacy Policy is our notice to you.

We are a processor of personal information that our customers upload to, generate in, or transmit through the Services about their own clients and contacts, including the contact details, invoice records, payment status records, and communications relating to the people and businesses our customers invoice. For this information our customer is the controller. They decide what is collected and why. We process it only on their documented instructions, in accordance with our agreement with them.

If you have received an invoice, payment link, or payment reminder from a business using Knockio and want to know how your information is handled, please see "Information for People Who Receive Invoices" below.

A data processing agreement is available to customers on request at support@knockio.com.

Information We Collect

This section describes information Knockio collects as a controller. Information our customers enter about their own clients is processed by us as a processor and is described under "Our Role" above and "Information for People Who Receive Invoices" below.

We collect personal information you provide directly to us, information collected automatically when you use the Services, and information from other sources.

Information you provide to us may include:

Contact details such as your name, address, phone number, and email address
Profile information such as username, password, preferences, and feedback
Demographic information such as age, gender, job title, and company name
Billing information as described under "Payment Information" below
Other information you choose to provide, such as survey responses

Information automatically collected:

Device data such as IP addresses, browser type, operating system, and other usage information
Location data such as GPS, WiFi, and carrier network data (if you enable location services)
Usage data such as app usage data, clicks, date and time stamps, cookies, and analytics data
Other technical data collected via cookies, web beacons, device fingerprinting, and other technologies

Information from other sources:

Business contact data providers. We obtain business contact information (such as name, job title, employer, business email address, and business phone number) from third-party data providers and from professional and business sources, so that we can contact people who may be interested in Knockio for their work. We use this only for business-to-business marketing. We do not build profiles of individuals for personal purposes, and we do not obtain information about anyone's personal life, interests, or activities. See "If You Received Marketing From Us" below.
Social login providers. If you choose to create an account or sign in using a third-party account such as Google, we receive basic profile information from that provider, typically your name, email address, and profile image. We receive this only because you chose to sign in that way, and only the information that provider's consent screen told you would be shared. We do not receive your password, your contacts, or your activity on that platform.
Event and webinar partners. Where we sponsor or co-host an event or webinar, we may receive the contact details of attendees who agreed at registration that their details could be shared with sponsors.
Other third parties with your consent

Payment Information

Your subscription payments to Knockio. When you pay for a Knockio subscription, your card or bank details are collected and processed by our billing provider. Knockio does not store your full card number or card verification value. We retain only limited information such as the card brand, the last four digits, the expiry date, and the billing contact and address, so that we can identify the payment method and manage your subscription.

Payments your customers make to you. When someone pays an invoice you issued through Knockio, their card or bank details are entered directly on a payment page hosted by number.tech, the payment processor our customers contract with. That information never passes through Knockio. We do not collect, transmit, or store your customers' card numbers, card verification values, or bank account details at any time.

What Knockio does store is descriptive record information about the invoice, such as the amount, currency, invoice reference, and status such as due, paid, partially paid, overdue, voided, or refunded, together with the contact details you supplied for that customer. We hold this as a processor on your behalf.

Further detail is set out in our Payment Processing Policy.

How We Use Your Information

We may use your information for purposes including:

Providing, operating, improving, and personalizing the Services
Sending you communications and direct marketing (with your consent)
Displaying customized advertisements and content
Conducting research, analytics, and data analysis
Debugging issues and performing security investigations
Complying with legal obligations and enforcing legal rights
Protecting against fraud, spam, or security risks
Completing corporate transactions such as mergers or acquisitions
Other purposes disclosed at the point of collection

We only process your personal information if we have a lawful basis for doing so, which may include:

Fulfilling contractual obligations to you
Compliance with legal obligations
Legitimate business interests
With your consent
To protect vital interests
Public interest

Whenever we process sensitive categories of personal data, we require an additional lawful condition such as explicit consent, protecting vital interests, or another statutory exemption.

Sharing Your Information

We do not sell your personal information, and we do not share it for cross-context behavioral advertising as those terms are defined under California law. We only disclose personal information to service providers we work with, when required by law, or with your consent. Disclosure may include:

Affiliates for business purposes such as analytics, fraud prevention, and corporate transactions
Service providers under contract who help operate the Services, such as analytics, storage, hosting, communications delivery, and marketing providers
Legal and regulatory authorities when compelled by subpoena, court order, or other legal process
Law enforcement agencies to report suspected illegal activity or assist investigations
Other third parties to protect legal rights, property, or safety
Third parties as part of any corporate transaction
Other third parties with your consent or direction

Payment Processing

Payments made against invoices issued through the Services are processed by number.tech, an independent third-party payment processor. Our customers contract with number.tech directly.

Number.tech collects and processes payment information as an independent controller under its own terms and privacy notice. It does not act as a processor for Knockio and does not process payment information on our instructions. Knockio does not receive payment credentials from number.tech. We receive only transaction status information, which we record against the relevant invoice.

Knockio receives compensation from number.tech in connection with customers who process payments through number.tech. This is disclosed in our Payment Processing Policy, which also explains that Knockio makes no representation that number.tech offers the best available rates or terms.

Information for People Who Receive Invoices

If you have received an invoice, payment link, or payment reminder that was created using Knockio:

Knockio is not the business invoicing you. We are the software that business uses. Your relationship, and any amount owed, is with the business named on the invoice.

How we got your information. That business provided it to us so it could send you an invoice or a reminder. We did not obtain it from you, and we did not obtain it from any other source.

What we hold. Typically your name, the contact details that business gave us, the invoice details, and whether the invoice is recorded as due, paid, overdue, voided, or refunded.

What we do not hold. We do not hold your card number, card verification value, or bank account details. Payments are processed by number.tech on pages we do not operate.

Who to contact. The business named on the invoice is the controller of your information and is the right place to direct questions about the invoice, the amount, a refund, or your privacy rights. If you contact us instead, we will pass your request to that business, and where we are able to, we will act on their instructions.

To stop receiving messages, use the opt-out option in the message or contact the business named on the invoice. You may also email us at support@knockio.com and we will pass on your request and may suspend further messages to you.

Phone Numbers (Texts and Calls)

If you provide your phone number, we use it to call or text you to respond to your requests, provide account and service updates, and, with your consent, send promotional messages. We share your number with message and voice service providers solely to deliver communications on our behalf.

Opt-out: Reply STOP to any text to unsubscribe (HELP for help), ask our support team to add you to our do-not-call list, or email support@knockio.com. We honor opt-out requests promptly and within 72 hours.

Regional notes:

United States: marketing texts and calls are sent only with your prior consent; you may withdraw consent at any time.
United Kingdom and EEA: we send marketing texts and calls only after you consent; you can withdraw consent at any time.
Canada and Australia: we follow applicable consent and unsubscribe rules; each message identifies us and includes an opt-out method.

Messages to your customers. This section governs messages Knockio sends to you. Messages sent through the Services to your customers, including invoices, payment links, and payment reminders, are sent by you, on your behalf and at your direction, and are governed by the Payment Processing Policy. You are responsible for having any consent required by applicable law before providing your customers' contact details or enabling messages to them.

Email Addresses (Marketing and Transactional)

If you provide your email address, we use it to respond to your inquiries, operate your account, and, with your consent or as otherwise permitted by law, send marketing emails. We share your email with email service providers solely to send communications on our behalf.

You can unsubscribe at any time via the link in our emails or by emailing support@knockio.com. We honor requests promptly; transactional and service emails may continue.

Business-to-business marketing. We also send marketing emails to business contacts who are not yet customers, using business contact information obtained as described under "Information We Collect." We send these only to people in their professional capacity, at their work contact details, about a product relevant to their work.

Regional notes:

United States: every marketing email identifies us, states our postal address, and includes a working unsubscribe link, which we honor promptly.
United Kingdom and EEA: where we contact a business at a corporate address, we rely on our legitimate interests in business-to-business marketing, and we tell recipients at first contact where we obtained their details. Where consent is required — including for sole traders and partnerships in the United Kingdom — we obtain it first. You can object or withdraw consent at any time.
Canada: we send commercial electronic messages only where we have express or implied consent as required by Canadian anti-spam legislation, and every message identifies us and includes an unsubscribe mechanism.
Australia: we follow applicable consent and unsubscribe rules; each message identifies us and includes an opt-out method.

Suppression. When you unsubscribe or ask us to stop contacting you, we retain the minimum information needed to keep you on our suppression list so that you are not contacted again. We do not use suppression list data for any other purpose.

If You Received Marketing From Us

If we contacted you about Knockio and you are not a customer, this section explains what we hold and what you can do about it.

Where your details came from. We obtained your business contact details from a third-party business contact data provider, from a professional or business source, or from an event or webinar at which you agreed your details could be shared with sponsors. We did not obtain them from your personal social media accounts, and we do not hold information about your personal life.

What we hold. Typically your name, job title, employer, business email address, and business phone number, along with a record of what we sent you and whether you responded.

Why we hold it. To tell businesses about a product that may be relevant to their work. Where applicable law requires a lawful basis, we rely on our legitimate interests in business-to-business marketing, or on your consent where consent is required.

What you can do. You can unsubscribe using the link in any message, or email support@knockio.com and ask us to stop contacting you and to delete your details. We will action the request promptly and add you to our suppression list so you are not contacted again. You can also ask us for a copy of what we hold, ask us to correct it, or object to our use of it.

Retention. We delete business contact details that have not resulted in any engagement within a reasonable period, and we delete them on request.

Session Analytics (Microsoft Clarity)

We use Microsoft Clarity to understand how visitors interact with our Services (for example, clicks, scrolls, and pages viewed) so we can improve usability and troubleshoot issues. Clarity uses cookies and similar technologies to set identifiers and provide session replays and heatmaps. We configure Clarity to mask input fields and sensitive content and to avoid recording keystrokes or information that could directly identify you.

Legal basis and reliance:

United States: legitimate interests in measuring and improving the Services.
United Kingdom, EEA, and Switzerland: Clarity runs only after you consent to analytics cookies via our Cookie Settings.
Canada and Australia: we provide clear notice and obtain consent where required.

Controls: You can change preferences at any time in Cookie Settings or through browser-level controls; where supported, we honor applicable global privacy and opt-out signals, including Global Privacy Control.

Retention: Clarity retains session recordings for approximately 30 days and certain aggregated analytics (such as heatmaps and labels) for up to approximately 13 months.

Cookies, Consent, and Google Consent Mode

We honor your choices using a consent banner and Google Consent Mode (v2). In the UK, EEA, and Switzerland, non-essential storage (for example, analytics and advertising) is denied by default and is enabled only after you consent. You can update preferences at any time in Cookie Settings. Some vendors receive consent signals (for example, analytics_storage and ad_storage) to operate in a limited, cookieless mode until consent is granted.

International Transfers

Where we transfer personal information internationally (including to the United States), we rely on recognized transfer mechanisms, such as the EU–U.S. Data Privacy Framework (and, where applicable, the UK Extension) for certified recipients, or Standard Contractual Clauses and comparable safeguards for other transfers.

Security of Your Information

We use administrative, technical, and physical safeguards to protect your personal information against unauthorized or unlawful processing and accidental loss, destruction, or damage. However, no method of transmitting or storing data online is completely secure. We cannot guarantee absolute security of your personal information.

If we become aware of a security incident affecting your personal information, we will notify you and any relevant supervisory authority where required by applicable law.

Retention of Your Information

We retain your personal information only as long as needed for the purposes described in this Policy, or for business, tax, or legal purposes. In determining retention periods we consider the amount and sensitivity of the information, the purposes for which we process it, whether those purposes can be achieved by other means, and applicable legal, accounting, and reporting requirements. We periodically review our data retention policy and procedures.

Analytics. Microsoft Clarity retention is described above.

Integrations. Google Calendar access tokens and event data are deleted as described below.

Business contact and prospect data. Business contact details obtained from third-party providers or event partners are deleted where they have not resulted in engagement within a reasonable period, and are deleted on request. Where someone has asked not to be contacted, we retain the minimum information needed to honor that request on our suppression list.

Invoice and payment records. Records of invoices and payment status are retained for as long as the customer's account remains active, and afterwards for the period described in our agreement with that customer, or for longer where we are required to retain them by law. Because these records are held on our customers' behalf, customers are responsible for exporting the records they need before closing an account. Deleting a record in Knockio does not delete or alter any corresponding record held by number.tech.

Your Choices and Rights

You may opt out of receiving promotional communications such as marketing emails and newsletters by following the unsubscribe instructions. You may access, amend, or request deletion of your personal information through your account settings or by contacting us. You can manage cookies and adjust privacy settings on your browser and device. You can choose not to share certain information with us, but doing so may affect the functionality available to you.

You also have the right to:

Request information about how your personal information is being used, and request a copy of what we store
Have inaccuracies in your personal information corrected
Request that we restrict processing if your personal information is inaccurate, unlawful, or no longer needed
Request the portability of your personal information to another provider
Object to processing of your personal information when it is based on legitimate interests
Withdraw your consent at any time where processing is based on consent
Lodge a complaint with a supervisory authority if you believe your privacy rights have been violated

We will not discriminate against you for exercising any of these rights.

To exercise these rights, please contact our Data Protection Contact using the details at the end of this Policy. We will process all requests in compliance with applicable laws and may need to verify your identity before responding.

If your information was provided to us by a business using Knockio, please see "Information for People Who Receive Invoices" above — your request should be directed to that business, which is the controller of your information.

Children's Privacy

The Services are intended for business use by adults. Consistent with our Terms and Conditions, users must be at least 18 years old. We do not knowingly collect personal information from children. If we become aware that we have collected personal information from a child, we will delete it. If you believe a child has provided us with personal information, please contact us at support@knockio.com.

Integrations With Other Services

Knockio offers optional integrations that let you connect Knockio to services you already use. These currently fall into four groups: calendar services, email services, customer relationship management and sales platforms, and automation and webhook services. We add and retire integrations over time. The current list is at knockio.com/integrations, and the principles below apply to all of them.

You choose to connect. An integration only operates after you authorize it, through the provider's own authorization process or by supplying credentials. You can disconnect it at any time in your Knockio settings or in your account with that provider. Disconnecting stops further synchronization.

Limited purpose and scope. We request only the access an integration needs to do what you asked it to do, and we use the data only for that purpose, such as creating and managing calendar events for appointments you schedule, sending and receiving mail through a mailbox you connected, or moving contact and lead records between Knockio and the platform you connected.

Access to a connected mailbox. Where you connect an email account, the connection may give Knockio access to messages and contacts in that mailbox, including correspondence with people who are not Knockio users. We access only what is necessary to provide the feature you enabled, and we do not scan mailbox content for advertising.

Staff access. Human access to data obtained through an integration is limited to circumstances such as your explicit request or consent, investigating a security incident, complying with applicable law, or working with data that has been aggregated and anonymized for internal operations.

What we do not do. We do not use data obtained through an integration for advertising or profiling, we do not use it to develop, improve, or train generalized artificial intelligence or machine learning models, and we do not sell, rent, or otherwise monetize it. We do not share it with third parties except as needed to operate the integration you enabled, or where the law requires it.

Data Knockio sends out. Where an integration or webhook sends data from Knockio to another service (such as your CRM, an automation platform, or an endpoint you configure), that service receives the data as an independent controller under its own terms and privacy notice. We do not control how it is used, stored, or shared once it leaves the Services, and we are not responsible for it. You are responsible for choosing which services to connect, for the endpoints you configure, and for having any consent required to send personal information to them.

Security and retention. Access tokens and credentials are stored securely using industry-standard practices. We retain only the minimum data needed to operate the integration. When you disconnect an integration, or if your account is terminated, we delete the associated access tokens and credentials and stop all synchronization. Data already sent to a connected service stays with that service, so you would need to delete it there.

Your data in connected services. Where an integration imports personal information about your clients or contacts, that information is Customer Data and we process it as your processor, as described under "Our Role" above. You remain responsible for having the right to import it.

The provider's own terms. Each connected service has its own terms and privacy notice, which govern what it does with your data on its side. We do not control those services. Where a provider imposes additional requirements on how we handle data received through its platform, we comply with them.

Google APIs. Knockio's use and transfer of information received from Google APIs to any other app adheres to the Google API Services User Data Policy, including the Limited Use requirements. We do not use Google user data to develop, improve, or train generalized artificial intelligence or machine learning models, and we do not transfer it to any third party for that purpose.

Microsoft. Where you connect a Microsoft account, we access your calendar or mailbox only to provide the feature you enabled, in accordance with the permissions you granted and with Microsoft's applicable terms.

Changes to this Privacy Policy

We may amend this Privacy Policy from time to time. If there are material changes, we will notify you as required by applicable law. Your continued use of the Services after any changes indicates your acceptance of the updated Privacy Policy.

Contact Us

If you have any questions, comments, or concerns about our collection, use, disclosure, or other processing of personal information, or about the exercise of any rights conferred by applicable data protection laws, please contact:

Knockio, LLC Data Protection Contact 115 White Plains Rd, Pelzer, SC 29669, United States support@knockio.com

Knockio, LLC is the controller of the personal information described in this Policy, except where this Policy states that we act as a processor on behalf of our customers.