Privacy Policy

This Privacy Policy explains how KnowAnt collects, uses, discloses, and protects your information when you use our services. KnowAnt is an all-in-one AI productivity and learning workspace that helps you chat, research, write, learn, create content, use voice tools, work with documents, and automate supported repetitive tasks. By accessing or using the platform, you agree to the practices described in this policy.

We may collect the following types of information:

• Personal information such as name, email address, and account profile details
• Account credentials and authentication data
• Payment and billing information processed through our payment provider
• AI inputs, including prompts, instructions, chat messages, study materials, writing drafts, reference content, and other information you submit to AI tools
• Documents, PDFs, images, screenshots, webpages, and other files or content you upload or submit for chat, summarization, analysis, research, learning, or other AI features
• AI-generated outputs and related interaction data, where stored as part of providing the requested feature (such as text, images, videos, slides, notes, quizzes, or speech)
• Voice-related input and output data when you use Voice or other voice-enabled features
• Information and instructions processed by Ant Agent when you use automated workflows or connected services
• Integration connection data when you connect third-party services such as Google (see Third-Party Integrations below)
• Usage data, logs, and device information

• To provide, operate, and maintain our AI workspace and related services
• To process AI prompts, instructions, text, reference materials, and other inputs to provide Chat, Create, Write, Learn, Voice, and other AI features you request
• To generate, deliver, and maintain AI-generated text, images, videos, slides, speech, study materials, and other outputs requested by you
• To analyze, summarize, translate, extract insights from, or answer questions about documents, webpages, images, and other content you submit
• To execute automated workflows and tasks through Ant Agent when you authorize or instruct the feature to do so
• To provide authorized Google integrations, including sign-in, Gmail-related productivity features, and Google Calendar features you enable
• To process transactions and manage subscriptions through our payment provider
• To improve product performance and user experience, subject to applicable law and the permissions or consents applicable to the relevant data
• To communicate updates, security alerts, and support messages
• To detect, prevent, investigate, and respond to fraud, abuse, security incidents, and violations of our terms or applicable policies

We use cookies and similar technologies to operate the platform securely and to keep you signed in. We do not use cookies for advertising or cross-site tracking.

Essential cookies

• Session cookie — Keeps you signed in after authentication. HttpOnly, Secure (in production), SameSite=Lax. Expires after 24 hours or when you sign out.
• CSRF cookie — Helps protect against cross-site request forgery on authenticated actions. HttpOnly, Secure (in production), SameSite=Strict.

OAuth security cookies

When you connect a third-party account (such as Google), short-lived cookies may be set during the authorization flow to validate the connection securely. These are HttpOnly, deleted after the flow completes, and are not used for tracking.

Managing cookies

Essential cookies are required for sign-in and core functionality. You can control cookies through your browser settings, but disabling them may prevent you from using parts of the service.

KnowAnt provides AI-powered tools for work, learning, writing, research, creativity, and productivity. Depending on the feature you select, your prompts, instructions, text, uploaded materials, images, audio, and other inputs may be processed by AI models, automated systems, or third-party technology providers in order to provide the requested functionality.

AI features

• Chat — Processes prompts and information you provide to generate AI responses, support research, and help you understand documents, webpages, images, and other content.
• Create — Processes instructions and reference materials to generate images, videos, slides, scripts, social content, and other creative assets for legitimate productivity, educational, and creative use.
• Write — Processes text you submit to correct, rewrite, summarize, expand, translate, or otherwise improve written content.
• Learn — Processes questions, study materials, and other inputs to provide explanations, learning assistance, language practice, homework support, notes, quizzes, and study-related outputs. Learn tools are intended as study aids, not as essay mills or ghostwriting services for academic misconduct.
• Voice — Processes text and, where applicable, voice-related inputs to generate speech using natural-sounding AI voices for accessibility, content consumption, and legitimate creative use.

AI features may use different models or providers, including models such as GPT, Claude, Gemini, and other models or services that may be available through the platform. The specific model or provider may vary by feature, configuration, availability, or subscription plan.

AI processing is feature-specific. Where required or appropriate, the relevant tool may display a separate consent notice before processing begins. When you select, confirm, submit, upload, or otherwise use the feature after that notice is presented, your action constitutes consent to the processing described in that notice, subject to applicable law. If you do not agree to the applicable processing, do not use that feature or submit the relevant information.

We do not state that your prompts, uploaded content, or other inputs are used to train third-party AI models unless the applicable feature or provider disclosure expressly states otherwise. Where third-party processing occurs, the provider may process the information according to its own applicable terms and privacy practices.

Some features allow you to upload or submit documents, PDFs, images, screenshots, webpages, study materials, or other files and content. We process these materials only as necessary to provide the feature you request, operate the service, maintain security, or comply with applicable legal obligations.

• Uploaded documents and files may be parsed, analyzed, summarized, indexed, extracted, classified, translated, or otherwise processed to support document chat, research, learning, writing, and related features.
• Uploaded images may be analyzed for visible text, objects, layout, context, or other information relevant to the feature you select.
• Files and content may be transmitted to AI, storage, hosting, or other processing providers when required to provide the requested feature.
• Processing may create machine-readable text, structured data, embeddings, metadata, or other intermediate representations needed for the feature.
• Submitted materials may be temporarily stored while processing is performed and may be retained according to the retention provisions of this policy or the specific feature disclosure.

By uploading or submitting content, you represent that you have the rights and permissions necessary for KnowAnt and applicable service providers to process the material for the requested purpose. Do not upload another person's confidential or sensitive information unless you are authorized to do so.

The upload or submission interface may display a separate consent notice describing the applicable processing before content is submitted or processed. That notice forms part of the consent applicable to the feature.

AI-generated content may be produced from your prompts, uploaded files, images, text, reference materials, or other inputs. AI outputs are generated probabilistically and may contain errors, omissions, inaccuracies, inappropriate material, or information that is not current or suitable for your intended purpose.

• You should review AI-generated content before relying on it or sharing it.
• KnowAnt does not guarantee that AI outputs are accurate, complete, original, or fit for a particular purpose.
• AI outputs should not be treated as professional legal, medical, financial, or other specialized advice.
• You are responsible for verifying important facts, calculations, citations, decisions, and actions based on AI output.

Prohibited AI uses

KnowAnt's AI image, video, voice, writing, learning, and automation features are intended for legitimate creative, educational, accessibility, and productivity use. You may not use KnowAnt to:

• Engage in illegal activities, fraud, or deceptive practices
• Impersonate real people or create unauthorized deepfakes
• Clone another person's voice without authorization
• Use someone's likeness or generate content using a person's likeness without appropriate consent
• Create non-consensual or deceptive synthetic media
• Infringe copyrights, trademarks, or other intellectual property rights of others
• Provide or facilitate unauthorized access to accounts, systems, or data belonging to others
• Abuse websites or online services, including unauthorized scraping, bypassing authentication, or other prohibited automation
• Use learning tools as essay mills or ghostwriting services for academic misconduct

These restrictions are intended to align KnowAnt with applicable law, AI provider policies, and payment-provider acceptable use requirements, including restrictions on deceptive synthetic media and unauthorized voice or likeness use.

To provide certain AI, voice, image, video, hosting, or other features, KnowAnt may use third-party technology providers. These providers may receive and process the minimum information necessary to provide the feature you request.

Third-party providers may include AI model providers, speech providers, image or video generation providers, cloud infrastructure providers, and other processors. The applicable provider may change over time as we add, replace, or update services.

Where required, we will provide additional information or a feature-level disclosure identifying relevant third-party processing. Third-party providers may have their own privacy policies, security practices, retention periods, and legal obligations.

KnowAnt lets you connect third-party services so we can provide features you authorize. Connections are initiated by you and only access data you authorize.

Services you may connect

• Google — Sign-in, Gmail, and Google Calendar when you enable those integrations
• Payment provider (Stripe / Paddle)— Subscription billing and payment processing for KnowAnt's software-only SaaS offering

Google Workspace Data and Limited Use

We access Google Workspace data only to provide and improve the user-facing features you request, such as Google sign-in, Gmail-related productivity features, and Google Calendar features.

We access Google Calendar data only to provide and improve the calendar-related features requested by our users.

The use of information received from Google Workspace APIs / scopes will adhere to the Google API Services User Data Policy, including the Limited Use requirements, and the Google Workspace User Data and Developer Policy.

• We request only the minimum Google Workspace permissions necessary to provide user-facing features that are visible and prominent in the KnowAnt interface.
• We do not sell Google Workspace user data, and we do not use Google Workspace user data for advertising, including personalized or interest-based advertising.
• We do not use Google Workspace user data to create, train, or improve generalized or foundational machine learning or artificial intelligence models.
• Transfers of Google Workspace user data are limited to providing or improving the authorized user-facing features, security purposes, compliance with applicable law, or other Limited Use–permitted circumstances.
• Human access to Google Workspace user data is restricted except where permitted under Limited Use requirements, such as with user consent, for security, or to comply with law.

OAuth tokens and credentials

• When you authorize a connection, we receive OAuth tokens from the provider on your behalf. We use these tokens only to perform actions you request within the platform.
• Integration refresh tokens and related identifiers are encrypted at rest using industry-standard AES encryption before being stored in our database.
• We do not sell OAuth tokens or share them with unrelated third parties. Tokens are not exposed in the application interface or API responses.
• You can disconnect an integration at any time from your account settings. When disconnected, we revoke tokens with the provider where supported and remove or deactivate stored credentials.

Provider privacy policies

Connected services are governed by their own privacy policies and terms. We encourage you to review the policies of any provider you connect, including Google and Paddle.

KnowAnt is a software-only SaaS product delivered through a web application. Subscription payments are processed by Paddle, which acts as our payment provider / merchant of record for applicable transactions.

• Payment and billing information may be collected and processed by Paddle to complete purchases, manage subscriptions, handle taxes where applicable, and provide related billing support.
• KnowAnt does not sell physical products or provide human services unrelated to our software offering.
• KnowAnt is intended for legitimate AI productivity, learning, writing, research, content creation, voice, and automation use cases consistent with Paddle's Acceptable Use Policy.
• KnowAnt does not intend to facilitate prohibited or restricted content generation practices such as unauthorized deepfakes, voice impersonation, unauthorized use of a person's likeness, essay mills or ghostwriting services for academic misconduct, unauthorized access tools, or other categories forbidden under Paddle's Acceptable Use Policy.

For more information about Paddle's restrictions, see Paddle's Acceptable Use Policy. Paddle may also process personal data according to its own privacy policy and terms.

We do not sell your personal data. We may share information only in the following circumstances:

• With trusted service providers acting on our behalf (hosting, infrastructure, email delivery, payment processing)
• With AI, speech, image/video generation, storage, and other processing providers when necessary to provide a feature you request or authorize
• With third-party services you explicitly connect through integrations, solely to provide the features you authorize
• To comply with legal obligations or lawful requests
• To protect the rights, safety, and security of our platform

We follow industry-standard practices to protect your data across its lifecycle — from transmission to storage and access.

Secure Data Transmission

All data transmitted between your browser and our platform is encrypted using HTTPS (TLS 1.2/1.3). HTTP requests are redirected to HTTPS in production. This helps keep sensitive information protected while in transit.

Secure Data Storage

Your data is stored on secure servers with strict physical and technical access controls. Infrastructure is monitored, and access is limited to authorized personnel on a need-to-know basis.

Data Classification

• Public – Marketing and publicly available content
• Internal – Internal documents and operational data
• Sensitive – User account data, AI interaction data, and uploaded content
• Highly Sensitive – Passwords, OAuth tokens, and API keys

Data Encryption

• Encryption in transit via HTTPS (TLS 1.2/1.3)
• Encryption at rest for databases and backups
• OAuth integration tokens encrypted at rest with AES-256 before storage
• Session data protected via signed, HttpOnly cookies

Network & Infrastructure Security

• Firewalls and network isolation
• API authentication and authorization controls
• Secure HTTP headers (including HSTS, X-Content-Type-Options, and X-Frame-Options in production)
• Cache-control policies on authenticated pages and API routes
• DDoS protection through our hosting provider

Access Control & Authentication

• Role-Based Access Control (RBAC)
• Least privilege access principle
• Secure password hashing for account credentials
• Secure session management with HttpOnly cookies
• Signed OAuth state parameters for third-party authorization flows

Application Security

• Strict input validation and server-side file type checks on uploads
• Protection against SQL injection through parameterized database queries
• Protection against cross-site scripting (XSS)
• Protection against CSRF attacks on authenticated API and form actions
• Validated redirect URLs to prevent open redirect abuse
• Secure coding practices and regular security reviews

Employee Security Practices

• Strong password policies
• Device and endpoint security enforcement
• Immediate access revocation upon role change or exit
• Ongoing security awareness training

We process your data to operate KnowAnt's AI workspace features — including chat, research, writing, learning, content creation, voice, document understanding, and authorized automation — as well as billing and security functions.

• Data is securely ingested and processed within our systems and, where necessary, by authorized service providers.
• Automated systems may analyze, summarize, translate, extract, transform, or otherwise process data to provide the features you request.
• AI-based processing may be used to generate responses, insights, suggestions, images, videos, slides, speech, study materials, and other requested outputs.
• Ant Agent may process relevant data and instructions to execute workflows you request or authorize.
• Data is exchanged with connected third-party services only when you authorize an integration and only as needed to provide that feature.

• Data is stored on encrypted servers with strict access control.
• Retention period depends on your selected plan (maximum 30 days), except where a different period is required or permitted by law or technically necessary for backups or third-party processing.
• Prompts, uploaded documents, images, AI inputs, generated outputs, and related processing data may be retained for as long as reasonably necessary to provide the requested feature, maintain security, comply with law, resolve disputes, or as otherwise disclosed.
• Third-party providers may retain data according to their own applicable retention and deletion processes where their systems are used to provide a feature.
• Users can request deletion of their data at any time, subject to applicable legal, contractual, security, and technical limitations.
• Requested deletions are processed within 48 hours where reasonably practicable; deletion from backups or third-party systems may follow their applicable technical retention cycles.

• Right to access, update, or delete your personal data
• Request a copy (data export) of your stored information
• Request account deletion at any time
• Disconnect third-party integrations and revoke associated tokens
• Withdraw consent where applicable, including consent for feature-specific processing where technically and legally possible
• Choose not to use AI, document-upload, image-processing, voice, or agent features that require processing you do not wish to authorize

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date. Material changes may also be communicated through the platform or by email where appropriate.

If you have any questions about this Privacy Policy, please contact our support team through the platform.