Privacy Policy

1. Who We Are

KnowThySelf360 LP is a Delaware limited partnership with its principal place of business at 874 Broadway, Unit 505, New York, NY 10003, USA.

2. Personal Information

We collect personal data directly from you and through automated technologies. This includes:

• Name and email address
• Google account details (if signing in with Google)
• IP address, device and browser data
• Feedback responses
• Feedback participant email addresses
• Site usage, browsing data, and analytics
• Marketing preferences
• Product-usage events (e.g., page views, clicks, feature-flag exposure) captured by PostHog in cookieless mode — no cookies or localStorage are written

3. Legal Basis for Processing

Under data protection laws, we rely on the following bases:

• Consent: for marketing communications and optional cookies
• Contract: to deliver services and process payments
• Legal obligation: to comply with laws and regulatory requirements
• Legitimate interests: to enhance our services, maintain security, and understand user behavior

4. How We Use Your Personal Information

We use your personal data to:

• Provide and personalize services
• Generate reports and insights
• Process payments
• Improve the Site and its features
• Communicate with you (e.g., support, notifications, marketing if opted in)
• Meet legal requirements
• Improve the Site and its features, including analysing user interactions through PostHog Cloud US (cookieless, pseudonymised event data only)

5. Sharing Your Information

We do not sell your data. We may share it with carefully selected service providers who help us operate, deliver, and improve the KT360 platform. These providers support functions such as secure hosting, encrypted communications, data processing, analytics, performance monitoring, and email delivery. We only share the minimum information necessary for these services to function. We work with vendors who are contractually obligated to follow applicable data protection laws. For vendors processing EU personal data, this includes GDPR compliance.

6. Data Hosting, Security and Infrastructure

• Vercel Serverless Functions: Secure, serverless infrastructure where no credentials are exposed in deployment.
• Neon PostgreSQL: Database hosted on AWS with encryption at rest and in transit.
• OpenAI: We use OpenAI's API to help transform qualitative feedback into structured insights. To do this, raw feedback data is securely transmitted for processing and anonymization. The data is not stored by OpenAI beyond the processing window, and is not used to train their models. All communication is encrypted in transit.
• Resend: Transactional email platform with end-to-end TLS encryption.
• PostHog Cloud US — product analytics — encrypted in transit and at rest; SOC 2 Type II and ISO 27001 certified

Additional security protocols include:

• TLS/SSL encryption for all data in transit
• Role-based access control (RBAC) for internal staff
• 2FA for all privileged accounts
• Continuous monitoring, logging, and alerting via Sentry

7. Cookies and Tracking Technologies

• Enable basic platform functionality (essential cookies)
• Analyze site usage and behavior (analytics cookies)
• Track advertising and campaigns (marketing cookies)

Analytics Providers:

Plausible Analytics: We use Plausible, a lightweight and privacy-friendly analytics tool that does not use cookies and does not collect personal data. All data is aggregated and anonymized. Plausible is hosted in the EU and compliant with GDPR. For more, visit Plausible's Privacy Policy.

Sentry: Sentry is an application performance monitoring tool provided by Functional Software, Inc. It helps us detect and resolve issues within our platform. Sentry collects technical error data (e.g., device, browser, session logs) but does not record personal user content. Learn more at Sentry's Privacy Policy. For detecting and resolving frontend/backend issues.

Users can manage cookie preferences through our cookie consent banner or browser settings.

8. International Data Transfers

Data may be transferred outside your country, including to the U.S. Where such transfers occur, we implement:

• Standard Contractual Clauses (SCCs)
• Adequacy decisions from the European Commission
• Vendor compliance certifications (e.g., SOC 2, ISO 27001)

9. Your Data Rights

Under applicable law, you may have rights to:

• Access personal data
• Correct inaccuracies
• Request deletion
• Restrict or object to processing
• Request data portability

To exercise these rights, contact: contact@knowthyself360.ai

We aim to respond within one calendar month of receiving your request.

10. Children's Privacy

KT360 is not intended for children under 13. We do not knowingly collect data from children under this age. Users must confirm they are 13 or older at sign-up.

11. External Links

Our platform may link to third-party sites. We do not control those sites and are not responsible for their content or privacy practices. Please review their policies before using them.

12. Updates to This Policy

We may revise this Privacy Policy to reflect changes in the law, our services, or technology. Updates will be posted on this page and, if material, notified via email or in-app notice.

13. Contact Us

If you have questions or want to exercise your rights, contact us:

Email: contact@knowthyself360.ai

Mail: KnowThySelf360 LP, 874 Broadway, Unit 505, New York, NY 10003, USA

BY USING OUR SERVICES, YOU ACKNOWLEDGE AND ACCEPT THIS PRIVACY POLICY AND CONSENT TO OUR PROCESSING OF YOUR DATA AS DESCRIBED ABOVE.