Privacy Policy — Knowledge Detective

01

Who We Are

Knowledge Detective is an independently operated service available at knowledgedetective.com. We are the data controller for personal information you provide when using this service.

For any data-related questions, contact us at privacy@knowledgedetective.com.

02

What Data We Collect

We collect only what is necessary to provide the service.

Data	Why we collect it	Legal basis
Email address	To verify your trial access or manage your subscription	Contract / Legitimate interest
Stripe customer ID	To link your subscription to your account	Contract
Subscription tier & usage	To enforce article limits and billing	Contract
Article topics you generate	To build your personal library and deliver results	Contract
Generated article content	To store articles in your library	Contract
IP address / request logs	Cloudflare infrastructure security and abuse prevention	Legitimate interest

We do not collect: your name, phone number, address, payment card details (handled entirely by Stripe), or any browsing behaviour beyond what Cloudflare logs as standard infrastructure.

03

How We Use Your Data

Your data is used to operate the service — nothing else. Specifically:

Email verification — to confirm your trial or subscription before granting access
Subscription management — to track your plan, article credits, and billing via Stripe
Article generation — your topic input is sent to the Anthropic Claude API to produce your deep-dive. It is not used to train AI models.
Library storage — your articles are stored in Cloudflare KV so you can access them again
Transactional email — verification links and account notifications sent via Resend

We do not use your data for advertising, profiling, or any purpose beyond what is listed above.

04

Third Parties We Share Data With

We share only what each processor needs to perform their function.

Processor	Purpose	Data shared
Stripe	Payment processing & subscription billing	Email address, payment details (Stripe handles directly)
Anthropic	AI article generation	Your topic input only. Not linked to your identity.
Cloudflare	Hosting, Workers, KV storage, CDN	All data processed on Cloudflare infrastructure
Resend	Transactional email delivery	Email address and verification token

We do not sell your data to any third party, ever.

05

How Long We Keep Your Data

Data type	Retention period
Trial tokens (unverified)	48 hours from creation
Trial tokens (verified / used)	30 days
Trial articles	30 days
Subscriber account & library	Duration of subscription + 30 days after cancellation
Stripe billing records	Retained by Stripe per their legal obligations (typically 7 years)

After these periods, data is deleted from our systems. Stripe's own retention is governed by their privacy policy.

06

Your Rights

Regardless of where you are located, we respect your right to control your personal data. The following rights apply to all users of this service:

Right of access — request a copy of the data we hold about you
Right to rectification — ask us to correct inaccurate data
Right to erasure — request deletion of your data ("right to be forgotten")
Right to restriction — ask us to limit how we process your data
Right to data portability — receive your data in a machine-readable format
Right to object — object to processing based on legitimate interest
Right to withdraw consent — where consent is the legal basis, you may withdraw it at any time

To exercise any of these rights, contact us at privacy@knowledgedetective.com. We will respond within 30 days.

If you are unsatisfied with our response, you have the right to lodge a complaint with the data protection authority in your country of residence. For UK users this is the ICO; for EU users, your national supervisory authority; for other regions, the relevant authority under applicable local law.

07

Cookies & Local Storage

We do not use tracking or advertising cookies. The app uses localStorage in your browser to remember your session token and last-generated topic — this data stays on your device and is never sent to us.

Cloudflare may set technical cookies for security and performance purposes as part of their infrastructure. These are strictly necessary and not used for advertising.

08

Security

All data is transmitted over HTTPS. Your articles and account data are stored in Cloudflare KV, which is access-controlled by your Stripe customer ID and not accessible without valid credentials. API keys and secrets are stored as encrypted environment variables and never exposed client-side.

In the event of a data breach that is likely to result in risk to your rights and freedoms, we will notify the relevant supervisory authority within 72 hours and inform affected individuals without undue delay.

09

Changes to This Policy

We may update this policy from time to time. When we make material changes, we will update the effective date at the top of this page. Continued use of the service after changes constitutes acceptance of the updated policy.