Privacy Policy

01Information we collect

The only personal information this website asks for is what you submit through the demo form on our contact page: your name, work email address, company name, the area you want to discuss, an optional description of the workflow you want to improve, and a record of the consent you gave when submitting.

We do not take payments on this website, and it has no accounts, no logins and no user profiles. There is nothing to sign up for, so there is nothing we hold about you unless you write to us.

02Website use information

Vercel, the platform that hosts this site, keeps the standard server logs any website generates in the course of being served: IP address, the pages requested, and timestamps. We use them to keep the site running and to investigate faults or abuse.

We measure the site with five products. Vercel Web Analytics counts page views: with each one it records the time, the page, the referring page, filtered query parameters, an approximate location from the request, and the browser, operating system and device type. Vercel Speed Insights records how quickly pages load for real visitors — the loading and responsiveness measurements browsers expose, plus route, connection speed, browser, device type and country. Google Analytics 4 counts visits and how people move through the site: pages viewed, how they arrived, roughly where they are, and what device and browser they used. PostHog does the same job in more detail — page views, and which links and buttons get used — against a randomly generated visitor identifier that is not connected to your name or your email.

Microsoft Clarity does something the other four do not: it records your session. That means a replay of how you moved through the site — pages, scrolling, mouse movement, where you clicked — and aggregate heatmaps built from many visitors doing the same. It is how we find the page that quietly loses people.

What it does not get is what you type. Clarity masks the contents of every input box and dropdown in all of its modes, with no setting that turns that off, and we have additionally marked the whole demo form as masked, so the labels and messages around the fields are hidden from the replay too. Your name, work email, company and the workflow you describe reach our support inbox and go nowhere near a recording.

PostHog can also record sessions. We keep that one switched off, and Clarity is the only recorder running here.

One thing about PostHog is worth saying plainly, because your browser cannot tell you: its measurement reaches it through d.vknowlabs.com, a subdomain of this site that forwards to PostHog. It is our subdomain, but it is not our server and we do not read what passes through it — the arrangement exists so that the measurement is not blocked before it is counted, which also means it is not obvious from the address that PostHog is involved. It is, and now you know. Blocking cookies for this site, or blocking that subdomain, stops it either way.

The two Vercel products use no cookie and store nothing on your device; Web Analytics identifies a visit by a hash of the incoming request that is discarded after 24 hours. Google Analytics and PostHog do use cookies, which the cookies section below sets out in full, along with how to refuse them.

None of this tells us who you are. We see totals and patterns — which pages people read, which ones are slow, which routes people arrive from — not named individuals, and we do not try to connect this measurement to the enquiries you send us. No heat-mapping tool, advertising pixel or web beacon runs on these pages, and we do not run advertising or share this data with advertisers.

03What you send us

The workflow description in the demo form is a free-text field, so what it contains is your choice. Please keep it to the business problem you want to discuss, and leave out personal details about other people, customer records, and anything your organisation treats as confidential. If we need that detail to help you, we will agree in writing how it should be shared first.

04Information in client engagements

This policy covers this website. Data you entrust to us during a project — the records inside a lending workflow, the documents in a processing pipeline, the systems we integrate with — is governed by the contract and data processing terms we sign with you, not by this page. In that work we act on your instructions as a processor, and the terms of that engagement take precedence.

05How we use information

We use what you submit to answer your enquiry, arrange a demo, and follow up on the conversation that starts from it. We do not sell personal information, rent it, use it for advertising, or make automated decisions about you with it.

This website is aimed at people buying technology for their organisation. It is not directed at children, and we do not knowingly collect information from them.

06Legal basis for processing

We process form submissions on the basis of the consent you give when you submit, and of our legitimate interest in responding to an enquiry you have made of us. You can withdraw consent at any time by writing to us, and we will stop.

We keep server logs and measure the site on the basis of our legitimate interest in running it, keeping it secure and making it faster. The measurement is aggregate and does not identify you. Where the law that applies to you treats analytics cookies as needing your consent instead, and you have not been asked for it, the cookies section below tells you how to refuse them — see also the note there about the consent banner this site does not yet have.

07Sharing and processors

Five service providers process data on our behalf. Vercel hosts this website, keeps its server logs, and runs the cookieless page-view and performance measurement described above. Resend delivers your submission by email to support@vknowlabs.com. Google provides Google Analytics and PostHog provides product analytics; both count visits and both set cookies. Microsoft provides Clarity, which records the sessions described above.

Google and Microsoft are both in the advertising business, so it is worth being specific about what we do and do not do with them. We use their products for statistics and session replay only. We run no Google Ads and no Microsoft Advertising, we have linked neither property to an advertising account, and none of Google, Microsoft or PostHog is sent anything you type into the demo form. What Microsoft additionally does with the data Clarity collects is governed by Microsoft’s own terms, and the cookies section below says plainly that some of them serve its advertising.

Beyond those two, we share personal information only where the law requires it, where we need it to establish or defend a legal claim, or where the business is reorganised or acquired — in which case the information moves with the part of the business that handles it, under this policy.

08Cookies

This website sets three cookies, all of them for visit statistics. Two belong to Google Analytics: _ga, which distinguishes one visitor from another, and _ga_H5NTD8NPP2, which holds the state of your current visit. Both expire on their own — on the current setting, about thirteen months after your visit, and never more than two years. The third belongs to PostHog: its name starts with ph_ and ends with _posthog, and it holds a randomly generated visitor identifier so that ten pages read by one person are not counted as ten people. PostHog keeps a copy of that identifier in your browser’s local storage as well.

Microsoft Clarity adds two more of its own: _clck, which lasts a year and ties your visits together, and _clsk, which lasts a day and holds the current session. Loading Clarity also causes Microsoft to set cookies on its own domains — CLID on clarity.ms, and MUID, MR, SRM_B, SM and ANONCHK across clarity.ms and bing.com, the longest of them lasting a bit over a year.

Be aware of what that last group is. Vknowlabs runs no advertising and buys no ads, but MUID is Microsoft’s own identifier and Microsoft states that some of the cookies Clarity brings with it serve advertising purposes of its own. We use Clarity to see how people read this site; Microsoft receives the data on its own terms, which are Microsoft’s to describe, not ours. If that trade is not one you want to make, the next paragraph is how to refuse it. There are no other advertising networks here and no social media trackers.

You can refuse all of it. Blocking cookies and site data for this site in your browser settings stops them; clearing site data removes them along with the local storage entries. Google publishes an add-on that opts you out of Google Analytics everywhere at tools.google.com/dlpage/gaoptout. Clarity honours the Global Privacy Control signal, which recent browsers and extensions can send automatically on every site you visit, and Microsoft can be opted out through the industry page at optout.aboutads.info. Nothing on this site stops working if you do any of it — no feature here depends on a cookie.

There is currently no cookie consent banner on this site. If you are in a place whose law requires your consent before analytics cookies are set, and you would rather not have them, use one of the options above until we add one.

09How long we keep it

We keep enquiry details for as long as it takes to handle the enquiry and any business relationship that follows from it, and for as long afterwards as we are required to keep business records. When neither reason applies any more, we delete them. You can ask us to delete them sooner.

Session recordings are not ours to keep: Microsoft deletes them 30 days after they are made, and holds a small sample, plus any recording somebody has marked as a favourite, for up to nine months. The measurement data behind the other four products is retained on each provider’s own schedule.

10Data security

Submissions travel over an encrypted connection and are delivered to a single support mailbox. This website stores nothing in a database of its own, so there is no store of enquiries on it to breach. Access to the mailbox is limited to the people who handle enquiries.

No organisation can promise that transmission over the internet is immune from interception, and we do not. What we can say is what we do: keep the attack surface small, and keep the number of people who can read your enquiry to the ones who need to.

11Where your information is processed

Vknowlabs operates from India. Vercel, Resend, Google, Microsoft and PostHog all run infrastructure in several countries, so your submission and the measurement data described above may be processed on servers outside the country you are in — with Google, Microsoft and PostHog, that means the United States. The d.vknowlabs.com subdomain described above does not change that: it forwards to PostHog in the United States, it does not keep anything in India. Wherever data is processed, it stays covered by this policy and by the terms we hold those providers to.

12Your rights

You can ask what personal information we hold about you, ask us to correct it, ask us to delete it, or ask us to stop using it. Write to us and we will act on the request as quickly as we can, and within any deadline the law that applies to you sets.

We may need to confirm who you are before we act, so that we do not disclose your information to somebody else asking on your behalf.

13Links to other sites

Some pages link out to sites we do not run. This policy stops at our own domain: once you follow a link, the privacy practices of that site apply, and we would encourage you to read them.

14Changes to this policy

When our practices change, we change this page and update the date at the top of it. If a change materially affects how we handle information you have already sent us, we will say so here rather than leave you to spot the difference.

15Contact

Questions about this policy, or a request to access, correct or delete your information, go to support@vknowlabs.com. One inbox, read by the people who can act on it.