Privacy Policy

1. Who we are

Knownroute is a product of Nimavera, Inc. (in formation), a business that is being formed and is not yet incorporated. We are the controller for your account and profile data. For contacts you upload from your network, you are the controller and we act as your processor on your instructions (see the Contact Data Notice).

2. Data we process

• Account data: name, email, hashed password, language, and preferences.
• Career-profile data: work history, education, achievements, and the evidence you provide.
• Contact data: names, contact details, and relationship notes from your own network that you choose to upload.
• Generated content: résumés, cover letters, outreach drafts, and the applications you prepare.
• Usage data: technical events, IP address, device/browser type, and security and audit logs.
• Billing data: plan, subscription status, and payment identifiers (card details are handled by the payment provider, not us).

3. Where data comes from

Most data you give us directly when you register, complete your profile, or upload contacts. Some technical data is generated automatically as you use the service (for example, logs). When we discover vacancies from official or permitted sources, we process the public information in those listings.

4. How we use data

• Provide and operate the service and its features.
• Generate evidence-backed AI drafts, which you review and approve.
• Discover and match vacancies from permitted sources.
• Manage your account, billing, and support.
• Maintain security, prevent abuse, and meet legal obligations.
• Improve the service using aggregated or pseudonymised data.

5. Legal bases

• Performance of a contract: delivering the service you request.
• Consent: optional cookies and marketing communications, where applicable.
• Legitimate interests: security, fraud prevention, and improving the service, in a proportionate way.
• Legal obligation: accounting, tax, and responding to lawful requests.

6. AI and your data

Text we generate with AI is anchored to the evidence you provide, with provenance and a confidence level. We do not invent employers, dates, titles, or metrics, and nothing is sent on your behalf. Requests to models are routed through OpenRouter to inference providers; see the AI Usage Notice and the sub-processor list.

7. Contact data you upload

When you upload contacts from your network, we process them only to help you prepare outreach that you send. We do not sell them, use them for advertising, or combine them across accounts. See the Contact Data Notice.

8. Who we share with

We do not sell your personal data. We share it only with the processors we need to deliver the service (hosting, storage, email, AI via OpenRouter, and payments), described by category in the sub-processor list, under data-processing contracts. We may also disclose data where the law requires it or to protect rights and safety.

9. International transfers

Some processors may handle data outside the European Economic Area (for example, in the US). Where they do, we apply appropriate safeguards, such as the EU Standard Contractual Clauses, to protect your data.

10. Retention

We keep data while your account is active. After closure it is soft-deleted and purged after 30 days, unless we are legally required to retain it. Security audit logs are kept for up to 730 days. Billing data is kept for as long as tax law requires.

11. Security

We encrypt data in transit, isolate data per workspace, enforce access control, and log security-relevant activity. No measure is infallible; report any incident to security@knownroute.com.

12. Your rights

• Access to the data we hold about you.
• Rectification of inaccurate data.
• Erasure (“right to be forgotten”).
• Portability: export your data in a readable format.
• Objection to and restriction of processing.
• Withdraw consent at any time, without retroactive effect.

13. How to exercise your rights

You can exercise many of these rights directly from your account (export and deletion). For the rest, email privacy@knownroute.com. We respond within the timeframes applicable law sets. We may ask you to verify your identity before acting on a request.

14. Cookies

We use cookies and local storage as described in the Cookie Policy. We do not load optional cookies before you give consent.

15. No automated decisions

We do not make automated decisions producing legal or similarly significant effects about you. AI only drafts suggestions that you review and approve.

16. Children

The service is intended for adults. We do not knowingly collect data from anyone under 18; if you believe a minor has given us data, contact us and we will delete it.

17. Complaints

You can raise any concern with us at privacy@knownroute.com. If you are in the EEA or the UK, you also have the right to lodge a complaint with your data-protection supervisory authority.

18. Changes to this policy

We may update this policy. We will post the new version with its effective date and, for material changes, notify you by a reasonable means.