Privacy Policy

1Two kinds of people, two kinds of data

Knollside serves service businesses, and those businesses put our quote widget in front of their own customers. That means this policy covers two relationships, and it matters which one you are.

2What we collect from businesses

• Account details — name, business name, email address, and the one-time codes we email you to sign in
• Configuration — your trade, pricing rules, service areas, and widget branding
• Billing — your plan, subscription status, and the last four digits and expiry of your card. Full card numbers go directly to Stripe and never touch our servers.
• Usage and technical data — pages visited in the dashboard, widget load counts, IP address, browser type, and error logs
• Correspondence — emails you send us and support conversations

3What the widget collects from quote requesters

When someone uses a quote widget, we collect the answers they give to the estimator questions along with the contact details the business asked for, typically name, email, phone number, and project address or ZIP code. We also record technical information such as IP address, the page the widget was embedded on, and timestamps, which we use for spam prevention and reliability.

The widget does not use advertising cookies and does not track people across other websites.

4Why we use it

• to run the service: generate quotes and deliver leads
• to authenticate you and secure accounts
• to process payments and manage subscriptions
• to send service email — sign-in codes, lead notifications, receipts, and important account notices
• to fix bugs, monitor performance, and prevent fraud and abuse
• to send occasional product updates or marketing to business account holders, which you can opt out of at any time
• to comply with legal obligations

We do not sell personal information, and we do not share it for cross-context behavioral advertising.

5Who we share it with

We use a small set of service providers, and only for the purposes below:

• Vercel — application hosting and delivery
• Supabase — database and authentication
• Stripe — payment processing
• Resend — transactional email delivery

We also share leads with the business whose widget captured them, which is the entire point of the product. Beyond that, we may disclose information if required by law or valid legal process, or in connection with a sale or transfer of the business, in which case we’ll notify account holders by email.

6How long we keep it

Account and configuration data is kept while your account is active. After you cancel, we keep it for 90 days so you can reactivate, then delete or anonymize it. Lead records are kept as long as the business’s account is active, or until the business deletes them. Billing records are kept as long as tax and accounting law requires, generally seven years.

7Security

Data is encrypted in transit with TLS and at rest by our infrastructure providers. Access to production data is limited and protected by multi-factor authentication. We use one-time email codes rather than passwords for sign-in. No system is perfectly secure, and we can’t guarantee absolute security, but if a breach affects your data we’ll notify you promptly and as the law requires.

8Your rights

Depending on where you live, you may have the right to know what personal information we hold, to get a copy of it, to correct it, to delete it, to opt out of sale or sharing (we do neither), and to not be discriminated against for exercising these rights. California residents have these rights under the CCPA as amended by the CPRA; residents of the EEA and UK have comparable rights under the GDPR.

To exercise any of them, email hello@knollside.com. We’ll verify your request by replying to the email address on your account and respond within 45 days. You may use an authorized agent, and we may ask for proof of their authority.

9Cookies

We use cookies that are strictly necessary to keep you signed in and to keep the service secure. We do not use advertising or cross-site-tracking cookies. Blocking necessary cookies will prevent you from signing in.

10Children

Knollside is a business tool and is not directed to anyone under 18. We don’t knowingly collect personal information from children. If you believe a child’s information has reached us, email hello@knollside.com and we’ll delete it.

11International transfers

We operate in the United States, and our providers store and process data there. If you access Knollside from outside the U.S., you understand your information will be transferred to and processed in the United States.

12Changes to this policy

We’ll update this page when our practices change and revise the effective date above. If a change is material, we’ll email business account holders before it takes effect.

13Contact

Privacy questions or requests: hello@knollside.com