Knoty Network

Legal 01

Privacy policy.

What we collect, why we hold it, how long it stays, and how to have it deleted.

Version 1.0 · Last updated 13 November 2026

01 Who we are

Knoty Network is a software development studio. It is a sole proprietorship operated by Trevor Sachs, based in the United States. For the purposes of data protection law, we are the controller of the information described on this page.

There is no separate data protection officer. Write to hello@knotynetwork.com with Privacy in the subject and it reaches the person responsible.

02 The short version

  • We collect very little, and only what a task actually needs.
  • No advertising, no tracking pixels, no session recording on this site.
  • We do not sell your information, and we do not pass it to data brokers.
  • If you join the waitlist, we hold one email address.
  • If you are a client, your project data stays yours.
  • You can ask us to delete what we hold, and we will.

The rest of this page is the detail behind those six lines.

03 What we collect

If you email us

Your name, your email address, what you write, and any file you attach. We use it to reply, and if it turns into work, to prepare a quote. The legal basis is our legitimate interest in answering enquiries, and, once you ask for a proposal, taking steps towards a contract.

If you join the ArriveIQ waitlist

Your email address, which button you used, the date and time, whether you confirmed, and a hashed form of your IP address that we keep only to investigate abuse. We keep it with Brevo, our email provider, which sends the confirmation and the updates. We use it to send one message when there is a build to try, then occasional updates. The legal basis is your consent, and you can withdraw it from any email.

If you are a client

Your name, work email, company, role, a phone number if you give one, and the record of the work: project notes, files, messages, milestones, invoices and payment status. If you use the client portal, we also hold your sign-in activity and the one-time codes we send, in hashed form. The legal basis is the contract between us, and our legitimate interest in running the work properly.

If you pay us

Card payments are processed by Stripe on our own payment page. Your card details go from your browser to Stripe, not to us. We receive the result of the charge, the card brand, the last four digits, the expiry month, the billing name and country, and a reference. We never receive or store the full card number or the security code. Bank transfers show the payer name and reference your bank sends.

Technical data

Our host records the IP address, browser, requested page, timestamp and response for every request. We keep those logs for 30 days and use them to keep the site up and to investigate abuse. We do not build profiles from them.

Analytics

This site runs no analytics today. If we add any, it will be cookieless and aggregate, and this page will say so before it goes live.

We do not use your information for automated decisions that have legal or similarly significant effects on you.

04 Cookies and browser storage

The marketing site sets no cookies. There is no Google Analytics, no advertising pixel and no third-party tracker. That is why there is no consent banner.

The site stores a few small values in your browser's local storage, so it does not ask you the same thing twice: for example, that you have already joined the waitlist. Those values stay on your device and are not sent to us.

The client portal, when it opens, will use one strictly necessary cookie to keep you signed in. A cookie that only does that does not need consent. We will not add analytics or marketing cookies to the portal without asking you first.

05 Who we share it with

We do not sell personal information. We share it only with service providers who need it to run the site or the work, and only for that purpose. The role column says which parts of the service each one touches. This site makes no third-party requests at all: the typefaces are served from our own domain.

ServiceRoleWhat it receives
CloudflareHosting and DNS for this siteIP address, page requested, browser
Google WorkspaceOur mailboxEmail you send to hello@, including attachments
BrevoWaitlist and email updatesEmail address, signup source, confirmation state
StripeCard payments and receiptsCard details, billing name, address, amount
ResendSign-in codes and receipts by emailEmail address and the message we send
NeonWaitlist and client portal databaseEmail address, account, project and invoice records
VercelClient portal hostingIP address, page requested, browser
SentryError reportsError details, page, browser, sometimes an account identifier
GitHubSource code and release historyRepository names and commit metadata

We may also disclose information if the law requires it, if a court orders it, or to protect someone from harm. If the studio is ever sold or merged, client records would transfer with it, and we would tell you before that happened.

We may publish aggregate figures that describe the service, such as uptime percentages. Those never identify a person.

06 Where your information goes

Most of our providers are in the United States. Brevo, which holds the waitlist, is in the European Union. If you are in the European Economic Area, the United Kingdom or Switzerland, information held by the US providers leaves those regions; where it does, we rely on the provider's standard contractual clauses, the UK Addendum, or an equivalent safeguard. You can ask for a copy of the relevant terms.

07 How long we keep it

WhatHow long
Waitlist addressUntil you unsubscribe, or 24 months with no activity
Unconfirmed waitlist address30 days, then deleted
Emails to hello@24 months after the last message in the thread
Client account and project recordsThe engagement plus 12 months, then returned or deleted
Invoices and payment records7 years, because tax law requires it
Server logs30 days
Error reports90 days
Backups30 days, rolling

Where a contract says we keep something longer, or the law requires it, we keep it for that period and then delete it.

08 Your rights

Wherever you live, you can ask us to:

  • tell you what we hold about you, and give you a copy;
  • correct anything that is wrong;
  • delete it, unless we have to keep it for tax or legal reasons;
  • stop using it for a particular purpose, or restrict what we do with it;
  • send it to you or another provider in a portable format;
  • withdraw consent you gave earlier, such as for the waitlist.

Email hello@knotynetwork.com with Privacy request in the subject. We answer within 30 days. We may ask one question to confirm who you are, and we will not use that as an excuse to collect more. If we refuse a request, we will tell you why and how to challenge it.

If you are in the EEA or the UK, you also have the right to complain to your local supervisory authority. If you are in the United States, you can contact your state attorney general. We would rather you came to us first.

We do not sell personal information, and we do not share it for cross-context behavioural advertising. There is therefore nothing to opt out of. You can still ask us to delete or correct what we hold. We will not treat you differently for exercising any of these rights.

09 Security

Every page is served over TLS. Access to client systems is limited to the people doing the work, with two-factor authentication on the accounts that hold it. Provider accounts use two-factor authentication. Backups are encrypted. Card numbers never reach our systems. When an engagement ends, we remove the access that was created for it.

No system is perfect. If a breach affects your information, we will tell you and the relevant regulator where the law requires it, without undue delay.

10 Children

This site and the client portal are for businesses. They are not directed at anyone under 16, and we do not knowingly collect information from children. If a child has sent us something, email us and we will delete it.

12 Changes to this policy

We update this page when what we do changes. The version and date at the top are the current ones. If a change materially affects you, we will email the waitlist and our clients before it takes effect.

13 Contact

Questions about this page, or about anything above: hello@knotynetwork.com. We reply within a couple of days.

That's the lot.