Data Handling and Retention Policy

At Knool, we prioritize the security and privacy of your data. This policy outlines how we collect, store, and process your information to ensure the highest standards of security and compliance.

 

Data Hosting and Storage

• All original files are securely hosted within a cloud environment with no public access. Our cloud infrastructure is designed to ensure that only authorized personnel can access the data.

• Data storage and access is separated by Customer

• Generated data, including work products and reports, is securely stored in encrypted storage. We employ encryption at rest, ensuring that your data is protected even when not actively in use.

 

Data Encryption

• We use state-of-the-art encryption protocols to protect your data. All data is encrypted in transit using SSL/TLS to safeguard it during transfer between you and our servers.

• Encryption at rest ensures that all data, including sensitive documents, remains protected against unauthorized access.

 

Access Control

• Only authorized personnel have access to the live production environment where user data is stored and processed. Access is strictly monitored, and our team follows a rigorous permission model to ensure data confidentiality.

• Our access control protocols include multi-factor authentication and role-based access control to prevent unauthorized access.

 

Data Processing

• Knool uses Large Language Models (LLMs) to process your case documents and assist in generating insights. The data processed by these models remains secure, and we adhere to stringent privacy standards in handling your information.

• For more information on how our data processing provider handles privacy and security, please refer to OpenAI’s Enterprise Privacy Policy.

 

Data Retention & Removal

• Knool securely stores your data until a deletion request is submitted by the user via email. Upon receiving a deletion request, we will facilitate the removal of your data within 10 business days.

• Deleted data is not recoverable after deletion

• All deletion requests must be made via email at support@knool.ai.

 

User Control

• Users retain control over their data, including access to all files and generated data. We provide transparency into how data is used, and we enable users to request access, rectification, or deletion of their personal information at any time.

 

Third-Party Sharing

• Knool does not share your data with any third-party entities except when necessary to provide our services or comply with legal obligations. Any third-party providers we engage with, such as cloud service providers or processing partners, are required to meet strict security and privacy standards.