Privacy Policy

1. Who we are

Replient operates Knwlge and is the controller of the personal data described here. Contact: privacy@replient.com.

2. What we collect

Account data: your email, name, organization name, chosen plan, password (stored only as a salted scrypt hash), when you accepted these terms, and approval status.

Usage of the console: sign-in times, session identifiers, the browser's user-agent string, and an audit log of actions you take in the app (for example creating a project or rotating a token). Failed sign-in attempts are recorded against a hashed network address for throttling and pruned automatically.

Fleet data: which Enterprise Servers are enrolled, their heartbeat, version, seat counts and daily aggregate usage such as briefs served. These are counts, not content.

Site analytics: we use Google Analytics to see how knwlge.com and the app are used: the pages you open, how you arrived, your browser and device, and the approximate location Google derives from your network address. Google Analytics sets cookies to tell one visit from another. Pages whose address carries an invitation, or a sign-in request for your own server, are not measured.

3. What we do not collect

Your source code, your knowledge items, memories and the context served to developers do not pass through the Global control plane. They live on your Enterprise Server or, on the hosted plan, in the hosted data plane for your organization, and are governed by the agreement for that plan.

4. Why we use it

To run the service: authenticate you, enroll servers, issue licences, show your fleet, and keep the platform secure. To decide on waitlist approval. To contact you about your account, including approval and security notices. To understand how the site and the app are used, so we can improve them. We do not sell personal data and do not use it for advertising.

5. Sharing

We use infrastructure providers (cloud hosting, managed databases, secrets management) and an analytics provider (Google Analytics) that process data on our behalf under contract. We disclose data when the law requires it. If Replient is acquired, account data may transfer to the successor under this policy.

6. Retention

Account and audit data are kept for as long as your account exists and for a limited period afterwards for security and legal purposes. Sessions expire after 12 hours of inactivity and are revoked on sign-out, password change or suspension.

7. Your rights

Depending on where you live you may have rights to access, correct, export or delete your personal data, or to object to some processing. Email privacy@replient.com and we will respond within the period the law allows. You can change your name and password in the app at any time. You can keep Google Analytics from measuring your visits by blocking its cookies in your browser or with Google's opt-out add-on.

8. Security

Sessions use HttpOnly, SameSite cookies over HTTPS. Passwords are hashed with scrypt. Secrets never live in source control. Access to production is limited to the people who run it. No system is perfectly secure; tell us at security@replient.com if you find a problem.

9. Changes

We will post changes here and update the date above. Material changes are announced in the app or by email before they take effect.