Privacy & usage policy

What we collect

We only collect what's needed to build, run, and protect your agent.

• Account data: name, email, profile image, account type (candidate or hiring), and authentication identifiers from your sign-in provider.
• CV content: the file you upload and the text we extract — projects, skills, roles, dates, and outcomes used to ground your agent's answers.
• Agent usage: questions asked of your agent, the answers it produced, ratings, and search activity by hiring teams.
• Technical data: device, browser, IP address, and basic logs needed for security, abuse prevention, and reliability.

How your agent uses your data

Your agent only speaks from what's in your own CV and the public profile fields you've approved. It does not invent facts, scrape the web for you, or pull data from other candidates.

When a recruiter asks a question, we send your structured CV, a short conversation history, and the question to a language model to compose an answer. The model returns text only — it has no access to your account, files, or other users' data.

Visibility and sharing

You decide what's public. Your share link (/p/your-handle) is only visible if your profile is set to Public and your agent is Live. You can switch to Private at any time and the page returns 404.

Hiring teams can save candidate agents to a shortlist. We do not sell your data, do not run third-party advertising, and do not share your CV with companies you haven't interacted with.

Data retention and deletion

We keep your account, CV files, and agent data for as long as your account is active. You can delete a CV, deactivate an agent, or close your account from the dashboard. Deletion is permanent within 30 days, with backups purged on rolling cycles.

Your controls

You have direct controls in the product, plus rights under applicable laws (GDPR, CCPA and similar).

• Edit your summary, skills and visibility from the dashboard.
• Switch between Public, Private and Live states for each agent.
• Request a copy of your data or full deletion via privacy@known.run.
• Withdraw consent at any time by closing your account.

Security

Data is encrypted in transit (TLS) and at rest. Access to production data is limited to a small set of engineers and audited. We rotate secrets, scope third-party access, and monitor for abuse.

Cookies and analytics

We use strictly necessary cookies for authentication and session safety. We use minimal, privacy-respecting analytics to understand which features actually help — without ad tracking or cross-site profiling.

AI model providers

Known uses third-party large language model providers to generate agent answers. We send only the data needed to answer the question (your structured CV slice and the conversation), under data-processing agreements that prohibit training on your content.

Acceptable use

Don't upload content you don't have rights to share. Don't use Known to harass, deceive, or impersonate someone else. Don't try to extract other users' private data, scrape the platform, or break our rate limits.

We may suspend agents that violate these rules, generate clearly false claims, or are reported repeatedly.

Changes to this policy

We'll update this page when we change how data is handled and adjust the "Last updated" date above. Material changes will be announced in-product before they take effect.