PRIVACY POLICY

1. Introduction

Thank you for choosing to be part of our community at Camplight Ltd ("Company," "we," "us," or "our"), doing business as KnowledgePlane. We are committed to protecting your personal information and your right to privacy.

This Privacy Policy describes how we collect, store, use, and share your information when you:

• Visit our website at https://www.knowledgeplane.io/ (the "Website").
• Apply for Beta Access.
• Request a Product Demo.
• Engage with us in other related ways, including sales, marketing, or events.

Legal Entity & Data Controller:

Camplight Ltd

Registered in Bulgaria (EU)

Address: 150 Deseti Decemvri Str., Et. 2, 5800 Pleven, Bulgaria.

If you have any questions or concerns about this privacy notice or our practices with regard to your personal information, please contact our Data Protection Officer at assista@camplight.net.

---

2. Summary of Key Points

• Analytics: We use Google Analytics (GA4) to understand how visitors use our site. GA4 sets cookies on your device to measure traffic and usage patterns. You can opt out using a browser extension or by blocking cookies.
• Advertising: We use the Reddit Pixel to measure the effectiveness of our advertising campaigns on Reddit. The pixel collects data about page visits and may set cookies on your device. You can opt out via Reddit's advertising preferences.
• B2B Service: We only accept "Work Emails" to ensure our services are used for business purposes.
• US Hosting: Your data is stored securely in the United States via our infrastructure partners (Replit and Neon).
• Google Fonts: We use Google Fonts to render the website, which involves a technical transfer of your IP address to Google.

---

3. What Information Do We Collect?

We collect information that you voluntarily provide to us when you express an interest in obtaining information about us or our products and Services.

A. Information You Provide (Forms)

We collect specific data points through our "Apply for Beta Access" and "Book a Demo" forms. All data is submitted directly to our API (/api/leads) and stored in our secure database.

1. Beta Access Form:

• Name: (Required) To identify you.
• Work Email: (Required) We validate this field to block personal email providers (e.g., @gmail.com) to ensure we are building a professional network.
• Company Name: (Required) To understand the organizational context.
• Use Case: (Optional) To prioritize teams with immediate needs for shared memory.

2. Book a Demo Form:

• Name & Work Email: (Required)
• Company Name: (Required)
• Team Size: (Required) You select a range (1-10, 11-50, 51-200, 201-1000, 1000+) so we can tailor the demo to your scale.
• Demo Preferences: (Optional) What specific features you would like to see.

B. Information Automatically Collected (Server Logs)

In Short: We collect technical data (IP address, browser type) via server logs to ensure security.

While we do not use client-side tracking cookies, our hosting provider (Replit, Inc.) maintains standard server logs. This information does not reveal your specific identity (like your name) but may include:

• Log Data: IP address, browser type, device characteristics, operating system, language preferences, referring URLs, and timestamps.
• Purpose: This data is strictly used for security (DDoS protection), diagnostics (fixing crashes), and performance monitoring.

---

4. How Do We Use Your Information?

We process your personal information for purposes based on legitimate business interests, the fulfillment of our contract with you, compliance with our legal obligations, and/or your consent.

We use the information we collect or receive:

1. To Evaluate Beta Applications (Legitimate Interest): We review the "Use Case" and "Company Name" you provide to prioritize teams that will benefit most from our current feature set.
2. To Schedule Demos (Consent): We use your email and team size information to schedule and prepare a personalized demonstration of KnowledgePlane.
3. To Communicate with You (Consent): We may send you an invitation email if your beta application is accepted, or follow-up emails regarding your demo request.
4. To Protect Our Services (Legitimate Interest): We use server logs to monitor for suspicious activity, fraud, and technical issues.

Note: We do not use your data for automated decision-making or profiling that produces legal effects concerning you.

---

5. Will Your Information Be Shared With Anyone?

In Short: We only share information with the specific third-party service providers necessary to run our infrastructure. We do not sell your data.

We may share your data with the following categories of third parties:

A. Infrastructure & Sub-Processors

Our Website is hosted on Replit. To provide our service, data is processed by the following providers:

B. Camplight Team

Your data is accessible to authorized employees and contractors of Camplight Ltd (the creators of KnowledgePlane) for the purpose of reviewing applications and conducting demos. All personnel are bound by confidentiality agreements.

C. Business Transfers

We may share or transfer your information in connection with, or during negotiations of, any merger, sale of company assets, financing, or acquisition of all or a portion of our business to another company.

---

6. International Data Transfers (EU to US)

Attention for European Users:
Camplight Ltd is located in Bulgaria (EEA). However, our infrastructure providers (Replit and Neon) are located in the United States.

By submitting your data (e.g., joining the waitlist), you explicitly acknowledge and consent that your personal information will be transferred to, stored, and processed in the United States.

Safeguards:

We ensure that our vendors adhere to strict security standards. For transfers to the US, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission, ensuring your data receives an equivalent level of protection in the US as it does in the EU.

---

7. Cookies and External Connections

In Short: We use Google Analytics cookies to measure site usage, and Google Fonts for typography.

A. Google Analytics (GA4)

We use Google Analytics 4 to understand how visitors interact with our Website. GA4 collects data such as pages visited, time spent on pages, referral sources, and general geographic location (country/city level).

• Cookies Set: GA4 places cookies on your device (such as _ga and _ga_*) to distinguish unique visitors and sessions. These cookies expire after up to 2 years.
• Data Collected: Page views, session duration, device and browser type, approximate location, and referral source. GA4 does not collect personally identifiable information unless you voluntarily submit it through our forms.
• IP Anonymization: GA4 does not log or store full IP addresses.
• Data Processor: Google LLC acts as a data processor. Data may be transferred to and processed in the United States.
• Legal Basis: We rely on Legitimate Interest (GDPR Art. 6(1)(f)) to understand how our Website is used and improve our content.
• Opt-Out: You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on, or by configuring your browser to block cookies from googletagmanager.com.

B. Reddit Pixel (Advertising)

We use the Reddit Pixel to measure the effectiveness of our advertising campaigns on Reddit and to understand how visitors who click our Reddit ads interact with our Website.

• Cookies Set: The Reddit Pixel may place cookies on your device (such as _rdt_uuid) to track conversions from Reddit ads.
• Data Collected: Page visits, referral information, and conversion events. The pixel does not collect personally identifiable information unless you voluntarily submit it through our forms.
• Data Processor: Reddit, Inc. acts as a data processor. Data may be transferred to and processed in the United States.
• Legal Basis: We rely on Legitimate Interest (GDPR Art. 6(1)(f)) to measure the performance of our advertising campaigns.
• Opt-Out: You can opt out of Reddit's interest-based advertising by visiting your Reddit Privacy Settings, or by blocking cookies from redditstatic.com in your browser settings.

C. Google Fonts (Web Typography)

We use Google Fonts (specifically Inter and Space Grotesk) to ensure our Website looks consistent across all devices.

• How it works: When you load our site, your browser requests font files from Google's servers (fonts.googleapis.com and fonts.gstatic.com).
• Privacy Impact: To send you the font file, Google must receive your IP address. Google states they do not use this data to create visitor profiles, but the transfer of the IP address occurs.
• Legal Basis: We rely on Legitimate Interest (GDPR Art. 6(1)(f)) for the uniform and professional presentation of our website.

---

8. How Long Do We Keep Your Information?

We keep your information only as long as necessary to fulfill the purposes outlined in this privacy notice unless otherwise required by law.

• Beta/Demo Data: Retained for the duration of the beta program or until you request deletion. If you become a customer, this data will be transferred to your customer account profile.
• Server Logs: Typically retained for a short period (e.g., 30-90 days) by our hosting provider for security audits, then automatically deleted.

---

9. Security of Your Information

We have implemented appropriate technical and organizational security measures designed to protect the security of any personal information we process.

• Encryption: Data transmitted to our website is encrypted via SSL/TLS (HTTPS).
• Database Security: Form data is stored in a secure PostgreSQL database hosted by Neon with restricted access credentials.

However, please remember that no electronic transmission over the Internet is 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security.

---

10. Your Privacy Rights

A. European Economic Area (EEA) and UK (GDPR)

You have the following rights:

1. Right of Access: Request a copy of the personal data we hold about you.
2. Right to Rectification: Ask us to correct inaccurate data (e.g., update your team size or email).
3. Right to Erasure: Ask us to delete your data ("Right to be forgotten").
4. Right to Restriction: Ask us to limit how we use your data.
5. Right to Object: Object to our processing of your data.

To exercise these rights, please email us at assista@camplight.net.

B. California Residents (CCPA/CPRA)

If you are a resident of California, you have specific rights regarding access to your personal information.

1. Right to Know: You may request information about the categories of personal information we have collected, used, or shared in the past 12 months.
2. Right to Delete: You may request that we delete your personal information.
3. Non-Discrimination: We will not discriminate against you for exercising your privacy rights.

Verification: We may need to verify your identity before processing your request.

---

11. Controls for Do-Not-Track Features

Most web browsers include a Do-Not-Track ("DNT") feature. Google Analytics respects the DNT signal when supported. We do not otherwise track your browsing activities across other websites.

---

12. Updates to This Policy

We may update this privacy notice from time to time. The updated version will be indicated by an updated "Last Updated" date. If we make material changes, we will notify you either by prominently posting a notice of such changes or by directly sending you a notification.

---

13. Contact Us

If you have questions or comments about this notice, or wish to exercise your privacy rights, you may contact us via email or post.

For Legal/Privacy Inquiries:

Email: assista@camplight.net

For Product Inquiries:

Email: humans@knowledgeplane.io

Postal Address:

Camplight Ltd

150 Deseti Decemvri Str., Et. 2

Pleven 5800

Bulgaria