Privacy Policy
Last Updated: 2026-10-05 13:49:16
# Privacy Policy
**Last Updated: October 2026**
At **KNOTBIO**, protecting the privacy and security of creator profile data, captured prospect leads, and platform telemetry is our highest priority.
---
### 1. Information We Collect
- **Account Data:** Name, email address, password hash (BCrypt encrypted), and subscription tier.
- **Profile Data:** Display titles, bios, social links, theme preferences, and uploaded avatar/banner images.
- **Lead Capture Data:** Prospect names, email addresses, phone numbers, and notes submitted via gated lead magnet forms.
- **Telemetry & Revenue IQ Analytics:** IP geolocation, browser user-agent, HTTP referrer source, profile views, and CTA click events.
### 2. How We Use Information
- To deliver digital business cards, vCard downloads (.vcf), and vector QR codes.
- To process subscription transactions via secure Stripe and PayPal checkout APIs.
- To dispatch real-time lead notification emails when prospects submit lead forms.
- To compile real-time Revenue IQ analytics for your unified control center.
### 3. Lead Data Privacy & Gated Assets
- Leads captured on your profile card are stored strictly for your access and exported via CSV.
- We never sell, rent, or monetize captured prospect contact details to third parties.
### 4. Data Protection & Security Controls
- **SQL Injection Prevention:** 100% prepared PDO statement parameter binding across all database queries.
- **CSRF Protection:** Cryptographic token verification enforced on all state-changing POST endpoints.
- **XSS Prevention:** Strict HTML entity escaping (`htmlspecialchars`) and tag stripping.
- **File Upload Limits:** Avatar and banner uploads are capped at 2 MB with strict MIME type validation.
### 5. Your Rights (GDPR & CCPA)
You have the right to access, export, or permanently delete your account and associated lead records at any time.
### 6. Contact Privacy Officer
For privacy requests or data deletion inquiries, email **privacy@knotbio.com**.
**Last Updated: October 2026**
At **KNOTBIO**, protecting the privacy and security of creator profile data, captured prospect leads, and platform telemetry is our highest priority.
---
### 1. Information We Collect
- **Account Data:** Name, email address, password hash (BCrypt encrypted), and subscription tier.
- **Profile Data:** Display titles, bios, social links, theme preferences, and uploaded avatar/banner images.
- **Lead Capture Data:** Prospect names, email addresses, phone numbers, and notes submitted via gated lead magnet forms.
- **Telemetry & Revenue IQ Analytics:** IP geolocation, browser user-agent, HTTP referrer source, profile views, and CTA click events.
### 2. How We Use Information
- To deliver digital business cards, vCard downloads (.vcf), and vector QR codes.
- To process subscription transactions via secure Stripe and PayPal checkout APIs.
- To dispatch real-time lead notification emails when prospects submit lead forms.
- To compile real-time Revenue IQ analytics for your unified control center.
### 3. Lead Data Privacy & Gated Assets
- Leads captured on your profile card are stored strictly for your access and exported via CSV.
- We never sell, rent, or monetize captured prospect contact details to third parties.
### 4. Data Protection & Security Controls
- **SQL Injection Prevention:** 100% prepared PDO statement parameter binding across all database queries.
- **CSRF Protection:** Cryptographic token verification enforced on all state-changing POST endpoints.
- **XSS Prevention:** Strict HTML entity escaping (`htmlspecialchars`) and tag stripping.
- **File Upload Limits:** Avatar and banner uploads are capped at 2 MB with strict MIME type validation.
### 5. Your Rights (GDPR & CCPA)
You have the right to access, export, or permanently delete your account and associated lead records at any time.
### 6. Contact Privacy Officer
For privacy requests or data deletion inquiries, email **privacy@knotbio.com**.