This Privacy Policy describes how Nell AI Labs LLC ("Nell AI Labs", "we", "our", "us") collects, uses, and shares information in connection with the Knops AI Platform and our website at https://knops.ai (collectively, the "Services").
By using the Services, you agree to this Privacy Policy. If you do not agree, please discontinue use.
Contact: sales@knops.ai
Address: Nell AI Labs LLC, 8 The Green, Suite A, Dover, DE 19901, USA
1. Information We Collect
1.1 Information You Provide
- Account details (name, email, password or SSO information, company name)
- Workspace configuration (team name, settings, preferences)
- Content you submit (prompts, documentation text, comments)
- Communications (support tickets, email messages, feedback)
1.2 Integrations & Connected Services
If you connect third-party services (e.g., GitHub, Google Drive, Zendesk):
- We receive OAuth tokens to access those services on your behalf.
- We may access repository metadata, file metadata, ticket content, and other information you configure the Services to process.
- We only access the scope of data required to provide features you enable.
- You can revoke access at any time through the third-party provider or within our product.
Google API Notice: Knops AI's use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.
1.3 Automatically Collected Information
- IP address, browser type, device type, operating system
- Log data (pages viewed, actions taken, timestamps, error reports)
- Authentication/session cookies and similar technologies (no ad tracking cookies)
2. How We Use Your Information
We use collected information to:
- Operate, maintain, and improve the Knops AI Platform
- Authenticate you and secure your account
- Generate and manage documentation, knowledge bases, support content, and related outputs.
- Provide customer support and respond to inquiries
- Monitor usage, diagnose issues, and perform analytics
- Enforce our Terms of Service and prevent abuse or fraud
- Comply with legal obligations and protect our legal rights
We may use de-identified, aggregated information for analytics, product improvement, and business intelligence, provided it cannot reasonably identify you or your organization.
3. AI Processing and Model Training
Knops AI uses AI models to generate articles, documentations from your repository and we take your code security seriously.
- We send only the minimum necessary snippets of Customer Data to AI models to generate the requested outputs.
- We do not use your Customer Data to train or fine-tune general-purpose AI models that are shared with other customers.
- Where configuration allows, we require third-party AI providers not to use your data to improve their models, except in de-identified, aggregate form.
🔒 Security Guardrails (Pre-Processing Protection)
Before any code is sent to AI models, we automatically:
- Secret Detection & Blocking, We scan for 50+ patterns including API keys, tokens, passwords, private keys, and cloud credentials (AWS, GCP, Azure). If secrets are detected, the request is blocked entirely, secrets are never sent to the AI.
- PII Detection & Blocking, We detect personally identifiable information (emails, phone numbers, SSNs, credit cards) and block requests containing PII.
- Dangerous File Filtering, Files like
.env, .pem, id_rsa, node_modules/, and other sensitive files are automatically excluded from processing. - Prompt Injection Protection, We detect and block malicious instructions embedded in code that attempt to manipulate AI behavior.
🛡️ Output Protection
- Output DLP Scan, Re-scan all generated content to ensure no secrets or PII leaked into the documentation.
- Clean Output Guarantee, Only verified-safe documentation is saved and displayed.
⚠️ AI outputs may be inaccurate, incomplete, or outdated. You are responsible for reviewing generated documentation before use.
4. Legal Bases (EEA/UK)
If you are in the European Economic Area (EEA) or the UK, we process personal data under the following legal bases:
- Contract performance - to provide the Services you request
- Legitimate interests - to improve the Services, secure them, and support business operations
- Consent - for optional communications or integrations you choose to activate
- Legal obligations - to comply with applicable laws and regulations
You may withdraw consent at any time, without affecting the lawfulness of processing based on consent before withdrawal.
5. How We Share Information
We do not sell personal data.
We may share information with:
- Service providers / sub-processors (e.g., cloud hosting, AI providers, email delivery, logging and monitoring) under contracts that restrict use to our documented instructions.
- Professional advisors (lawyers, accountants) when necessary.
- Authorities or law enforcement where required by law or to protect rights, property, or safety.
- Successor entities in connection with a merger, acquisition, or similar transaction.
6. Data Retention
We retain data for as long as necessary to:
- Provide the Services and fulfill the purposes described in this Policy
- Comply with legal obligations
- Resolve disputes and enforce our agreements
When you close your account or request deletion:
- We typically retain relevant account and log data for up to 90 days in active systems, then delete or anonymize it, subject to legal requirements.
- Backups may retain data for a limited period before automatic overwrites.
7. Security
We implement technical and organizational measures designed to protect information, including:
- TLS (HTTPS) encryption in transit
- Encryption at rest for sensitive data
- Access control and least-privilege principles
- Monitoring and logging of critical systems
- Regular updates and vulnerability remediation
Despite these safeguards, no system is completely secure.
8. Your Rights
Depending on your jurisdiction (e.g., EEA, UK, certain U.S. states), you may have rights to:
- Access personal data we hold about you
- Request correction or deletion of your data
- Request restriction or object to processing in certain cases
- Receive a copy of your data in a portable format
- Opt out of direct marketing
To exercise these rights, email sales@knops.ai. We may need to verify your identity before responding.
You can also:
- Unsubscribe from marketing emails using the link in the email
- Disconnect integrations (GitHub, Google Drive, Zendesk, etc.) from your workspace settings or within the third-party platform
9. Cookies & Similar Technologies
We use:
- Essential cookies to keep you signed in and maintain sessions
- Local storage or similar technologies to remember preferences
We do not use third-party advertising cookies or cross-site tracking pixels.
You can control cookies via your browser settings, but disabling essential cookies may impact functionality.
10. Children's Privacy
The Services are not directed to children under 13. We do not knowingly collect personal information from children. If you believe a child has provided information, please contact us and we will delete it.
11. International Transfers
We may process data in the United States and other countries where we or our service providers operate.
When transferring personal data from the EEA/UK to countries without an adequacy decision, we rely on appropriate safeguards (such as Standard Contractual Clauses) where required.
12. Do-Not-Track and State-Specific Rights
At this time, we do not respond to browser "Do Not Track" signals.
Residents of certain U.S. states (such as California or Virginia) may have additional rights under local privacy laws (e.g., CCPA/CPRA, VCDPA). We will honor these rights where applicable, and you can contact us at sales@knops.ai to exercise them.
We do not sell or share personal information as defined under the CCPA.
13. Changes to this Privacy Policy
We may update this Privacy Policy from time to time. If we make material changes, we will notify you by email or through the Services. The "Last Updated" date at the top indicates the latest version.
Your continued use of the Services after changes become effective constitutes acceptance of the updated Policy.
14. Contact Us
For any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact: