Privacy
Policy.

This Privacy Policy explains how Knockin, Lucius AI, Inc. (“Knockin,” “Lucius,” “we,” “us,” or “our”) collects, uses, stores, discloses, and protects information when you access or use our websites, personal AI profiles, AI agents, applications, and related products and services (collectively, the “Services”).

By using the Services, you acknowledge the practices described in this Privacy Policy.

Account and payment information

When you create or manage an account, we may collect your name, email address, login and authentication information, account preferences, subscription information, transaction records, and communications with us. Payment card information, where applicable, is processed by a payment provider; we generally receive limited billing and transaction details rather than complete card information.

Profile information

You may provide your name, photograph, biography, title, company, contact details, social links, portfolio items, projects, services, availability, media, booking links, and other information you choose to display. Information published on a public profile may be viewed by anyone with access to its link or QR code.

Knowledge and AI configuration

You may provide documents, files, notes, websites, imported content, AI instructions, tone and behavior settings, access permissions, disclosure boundaries, corrections, feedback, and approved answers. You are responsible for having the rights required to provide this material.

Visitor and conversation data

When someone interacts with a Knockin profile, we may collect questions, prompts, messages, AI answers, summaries, timestamps, viewed pages or links, referral source, engagement information, voluntarily submitted contact details, meeting or follow-up requests, and generated signals such as expressed interest. Conversation information and submitted details may be made available to the profile owner.

Google Account and Google Calendar data

If you choose to connect Google Calendar, Knockin uses Google OAuth to request only the permissions needed to identify the connected account and provide scheduling features. Depending on the permissions you grant, we may access:

• openid: a unique Google Account identifier used to associate the connection with your Knockin account;
• https://www.googleapis.com/auth/userinfo.email: your primary Google Account email address;
• https://www.googleapis.com/auth/userinfo.profile: basic Google profile information, such as your name, profile picture, and personal information you have made publicly available;
• https://www.googleapis.com/auth/calendar.freebusy: view your availability in your calendars;
• https://www.googleapis.com/auth/calendar.calendars.readonly: see the title, description, default time zone, and other properties of Google calendars you have access to; and
• https://www.googleapis.com/auth/calendar.events.owned: events on Google calendars you own, including the ability to view, create, change, and delete those events.

Calendar event data may include event titles and descriptions, dates and times, availability, attendees, locations, conference details, and related event identifiers. We may also store OAuth access and refresh tokens, granted-scope information, the connected account identifier and email address, and connection status so the integration can continue to operate until it is disconnected.

Technical data and communications

We may automatically collect IP address, browser and device type, operating system, language, general region, session duration, feature usage, link clicks, referring URLs, cookies, and diagnostic data. If you contact us, we collect the message and information you choose to provide.

We use information to:

• Create and manage accounts and profiles;
• Publish and operate personal AI profiles;
• Generate answers based on knowledge selected by a profile owner;
• Maintain context and create conversation summaries;
• Help profile owners understand visitor interest and follow up;
• Identify and display the Google Account connected to Knockin;
• Read relevant events and availability on Google calendars you own in order to offer available meeting times;
• Create meetings requested through Knockin, add attendees and conferencing details, and update or delete those meetings when needed to provide the scheduling feature;
• Process subscriptions and transactions;
• Provide support and service communications;
• Operate, secure, analyze, troubleshoot, and improve the Services;
• Detect fraud, misuse, and security incidents; and
• Comply with law and protect legal rights.

Knockin uses artificial intelligence to answer questions, organize user-provided knowledge, summarize conversations, and provide related features. We use the OpenAI API as an AI service provider. Relevant portions of selected knowledge, visitor messages, conversation context, and instructions may be transmitted to OpenAI to generate a response.

OpenAI’s current API data controls state that API data is not used to train or improve OpenAI models unless the API customer affirmatively opts in. OpenAI may temporarily retain or process API data for service delivery, security, abuse prevention, and legal compliance under its own terms and retention practices.

AI answers may be incomplete or inaccurate. Do not rely on Knockin as a substitute for legal, medical, financial, or other professional advice.

A profile owner determines what appears on their profile and how they use inquiries received through it. When you submit information to a profile, Knockin processes it to provide the Services, and the profile owner may receive it and contact you.

Lucius AI, Inc. operates the platform. A profile owner may be a separate data controller or responsible party for their later use of visitor information. Profile owners must use that information lawfully, give required notices, and honor applicable privacy and communication preferences.

Where applicable law requires a legal basis, we rely on one or more of the following:

• Contract: to provide Services you request;
• Legitimate interests: to operate, secure, improve, and support the Services;
• Consent: for a specific purpose where you give permission;
• Legal obligation: to comply with applicable law; and
• Protection of rights: to protect Knockin, our users, or others.

You may withdraw consent where consent is the applicable basis. Withdrawal does not affect processing that occurred beforehand.

We may share information:

• With the owner of a profile through which information was submitted;
• With Google when you direct Knockin to check your calendar or create, update, or delete a calendar event; event details submitted to Google may include the meeting time, title, description, attendees, and conferencing information;
• With providers supporting AI, hosting, storage, authentication, security, analytics, email, support, and payment processing;
• When reasonably necessary to comply with law, respond to lawful requests, protect rights or safety, prevent abuse, or enforce our agreements;
• As part of a merger, acquisition, financing, restructuring, bankruptcy, or asset sale, subject to applicable consent requirements for Google user data; and
• At your direction or with your consent.

Providers may process information only as needed to support the Services and remain subject to applicable contractual and legal obligations. We do not transfer Google user data to advertising platforms, data brokers, or information resellers.

We retain data as long as reasonably necessary to provide the Services, keep an account active, fulfill the purposes in this Policy, meet security and legal obligations, resolve disputes, and enforce agreements.

We retain Google OAuth tokens and connection metadata while your Google Calendar remains connected. When you disconnect Google Calendar or delete your Knockin account, we stop accessing your Google Account and delete the OAuth tokens from active systems. Residual encrypted copies may remain in backups for up to 90 days before deletion or overwriting, unless a longer period is required by law.

Disconnecting Google Calendar does not automatically remove events already created in your Google Calendar. You can manage or delete those events directly in Google Calendar. Information may also remain where you made it public outside Knockin, another person independently saved it, another user is entitled to retain it, or preservation is legally required. Providers may retain limited information under their own contractual, security, or legal obligations.

You may request a copy or export of available account and profile data by contacting [email protected]. We may verify your identity before completing a request.

We recommend requesting an export before deleting your account because some information may no longer be available after deletion is completed.

We use reasonable technical and organizational safeguards designed to protect personal data, including encryption in transit and at rest, restricted access controls, authentication measures, monitoring, secure development practices, and backup controls.

Lucius personnel do not routinely view user content stored in production systems. Exceptional access that is technically possible is restricted to authorized personnel and permitted only when reasonably necessary for security, support, incident response, legal compliance, or service maintenance.

No online system is completely secure. You are responsible for protecting your credentials and notifying us if you believe your account has been compromised.

Knockin serves users globally. Information may be processed or stored outside the country where you live, including in countries with different data protection laws.

Where required, we use appropriate safeguards for international transfers, including contractual protections or other recognized transfer mechanisms.

We may use cookies, local storage, pixels, and similar technologies to operate essential features, maintain sessions, remember preferences, prevent misuse, understand usage, and improve performance.

You may control cookies through your browser or device. Disabling them may affect functionality. Where required, we request consent before using non-essential cookies.

Depending on where you live, you may have the right to access, correct, delete, or obtain a portable copy of your data; restrict or object to processing; withdraw consent; opt out of certain communications; appeal a privacy decision; or complain to a data protection authority.

You may disconnect Google Calendar through your Knockin account settings or revoke Knockin’s access through your Google Account’s third-party connections page. Revocation stops future access but does not delete events already created in Google Calendar or information you separately submitted to Knockin.

To exercise a right, email [email protected]. We may verify your identity. We will not discriminate against you for exercising an applicable privacy right.

The Services are not directed to children under 13. You may not use the Services if you are under 13 or any higher minimum age required for digital services in your jurisdiction, unless a parent or legal guardian has provided legally valid authorization.

If you believe a child provided personal data without appropriate authorization, contact us so we can investigate and act.

Google API Services and Limited Use

Knockin’s use and transfer of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We limit Google user data to providing or improving the user-facing account connection and scheduling features described in this Policy.

We do not use or transfer Google user data for personalized, retargeted, or interest-based advertising; to determine creditworthiness or for lending purposes; or to sell that data. We do not permit humans to read Google user data except with the user’s affirmative consent for specific data, when necessary for security or abuse investigation, when required by law, or when the data has been aggregated and used for lawful internal operations.

Other third-party services

Profiles may link to social networks, calendars, payment services, websites, or other third parties. We do not control their privacy, security, or content practices. Information provided directly to them is governed by their terms and policies.

Changes to this Policy

We may update this Policy to reflect changes in our Services, technology, law, or practices. We will revise the effective date and, for material changes, may provide additional notice through the Services or by email. If we plan to use Google user data for a new purpose not previously disclosed, we will update this Policy and obtain any consent required before beginning that use.

For questions, concerns, data exports, or privacy requests:

Lucius AI, Inc.
Email: [email protected]
Website: https://knockin.info