Effective October 11, 2026

Privacy Policy

1. Who we are and what this covers

Knock-King is operated by Knock King Company, 3725 Thistledown Ct., Reno, NV 89512 (“Knock-King,” “we,” “us”). This policy describes personal information handled through our marketing website, sales-tracking application, account administration, and support. Contact: support@knock-king.com.

For website visitors, account contacts, billing contacts, and our own business operations, we determine how personal information is used. When a business customer enters information about prospects, leads, or its team, we generally process that information to provide the service for that customer. The customer determines the purpose of its lead collection, outreach, team access, and recordkeeping. A signed data-processing agreement, if applicable, supplements this policy.

2. Information we handle

• Account and team information: name, email, authentication information, company details, role, invitations, permissions, and account settings. Authentication is handled through Supabase.
• Lead and activity information: contact names, email addresses, telephone numbers, street addresses, map coordinates, assignments, dispositions, notes, visit history, follow-up dates, uploaded CSV contents, and customer-defined fields.
• Location information: when you permit browser location access, the app uses your device’s location to center the map. Addresses and coordinates used for map display and address lookup are sent to the mapping service. Location information you save in a lead becomes part of that lead.
• Billing information: Stripe processes checkout and payment methods. We receive or store subscription identifiers, customer identifiers, seat counts, trial and billing status, and related billing records. Do not put card numbers in lead fields or support messages.
• Technical and support information: IP address, browser or device information, requests, error or security logs generated by our infrastructure, and the contents of communications you send us.

3. How we use information

We use information to create and authenticate accounts; provide maps, lead records, team access, imports and exports; administer subscriptions and trials; respond to requests; maintain and troubleshoot the service; detect abuse and unauthorized access; and comply with legal obligations. We may use aggregated or de-identified information to understand performance where individuals cannot reasonably be identified, and do not attempt to re-identify it except as legally permitted.

Customers must collect and upload information lawfully, provide required notices, obtain required permissions, and honor opt-outs. Knock-King is not a source of consent for sales calls, emails, messages, or door-to-door visits.

4. Who receives information

• Your organization: administrators can access company records and manage team permissions. Other reps may see records according to assignments and sharing settings. Ask your administrator about your organization’s access practices.
• Service providers: Supabase supports authentication and data storage; Vercel hosts the website and application; Stripe processes payments and subscriptions; Mapbox provides mapping and address lookup. Their access depends on the service they provide. Other approved providers may support communications, security, or operations when engaged.
• Services you choose: exports downloaded from Knock-King can be uploaded to a CRM by you or your administrator. External directions links, where available, send route locations to the destination mapping service. Those services have their own terms and privacy practices.
• Legal, safety, and business events: we may disclose information when required by law, to respond to lawful process, protect rights or safety, investigate fraud, or evaluate or complete a merger, financing, sale, or similar transaction with appropriate safeguards.

We do not sell personal information or share it for cross-context behavioral advertising. Service-provider processing and customer-directed exports still occur as described above.

5. Browser storage and tracking

The app uses browser storage for authentication/session information, preferences, and locally cached company or lead data. Preview offline features may store pending edits on the device until synchronization. Clearing browser data or losing a device can destroy unsynced changes. Devices shared with other people require particular care; use device locks and avoid saving company data on untrusted devices.

The redesigned marketing page itself does not add advertising pixels, third-party analytics scripts, or an externally embedded video player. Hosting and app providers may still process technical requests or use their own necessary technologies. Browser settings let you control cookies, site storage, and location permissions, but blocking necessary storage can prevent app functions. The service does not currently implement a distinct response to browser Do Not Track signals. Legally required opt-out signals must be honored where applicable before any covered selling or sharing is introduced.

6. Retention and deletion

We retain information for the period reasonably necessary to provide the service, support customer instructions, maintain security, resolve disputes, and meet legal or accounting obligations. Different categories may have different retention periods. Canceling a paid subscription does not itself constitute a request to erase all company information.

Request deletion using the contact above. For customer-controlled lead information, contact the business that collected it; we can help identify or route the request where appropriate. Deletion may be limited by legal holds, accounting duties, security needs, or others’ rights. Backup records may remain until the relevant backup cycle expires, subject to restricted access. Copies exported to another system or retained on a customer’s device are outside our direct control.

7. Security and security incidents

We will maintain reasonable administrative, technical, and organizational safeguards appropriate to the personal information we process and the risks involved. Safeguards reduce risk; no online system, transmission method, or storage system can be guaranteed completely secure. This is not a promise that unauthorized access, loss, or disclosure can never occur.

If we discover a suspected security incident, we will take reasonable steps to investigate, contain it, protect affected systems, and assess notification obligations. Where required by applicable law or a signed data-processing agreement, we will notify affected customers, individuals, regulators, or other parties within the applicable deadlines and provide the required information. A notification does not, by itself, constitute an admission of fault or liability. We may supplement notices as reliable information becomes available.

Customers must keep administrator contact details current, protect credentials and devices, promptly report suspected unauthorized access, and cooperate with reasonable containment steps. Customers remain responsible for notifications legally assigned to them concerning information they control; we will provide legally required assistance. Neither this policy nor the Terms waives required safeguards, notification duties, or rights that cannot lawfully be waived.

Report concerns to the contact above with a description and relevant non-sensitive details. Do not email passwords, payment card numbers, or an entire lead database. Unauthorized testing, exploitation, or accessing other customers’ records is not permitted.

8. Requests and choices

Depending on your location and the law that applies, you may have rights to access, correct, delete, or receive a copy of personal information; restrict or object to some processing; withdraw consent; opt out of certain uses; or appeal a denied request. Send requests to the contact above with enough information to identify your account or relationship. We may verify identity and authority using proportionate information. We respond within the time required by applicable law and explain a denial where required. We do not unlawfully discriminate for exercising privacy rights.

For customer-managed records, the customer generally decides how to respond, and we assist as required. You can revoke location permission through your browser or device, update available account fields, and use authorized exports. Service and billing notices may still be sent even if you opt out of optional marketing communications.

9. Children, sensitive information, and international use

The service is intended for adult business users, not children under 18. Do not upload government identifiers, complete financial account details, payment card numbers, protected health information, biometric templates, or other highly sensitive data. Custom note fields are not intended for such records. Contact us if you believe a child’s information has been submitted improperly.

Providers may process information in countries other than yours. Where required, we will use a legally valid transfer mechanism. This policy does not itself create such a mechanism or claim certification under a privacy framework.

10. Changes and contact

This policy is effective October 11, 2026. We will post future revisions and provide additional notice or obtain consent where required for material changes. Contact the legal operator at the address and monitored email listed in section 1.