At KNITLY INC. (“Knitly”, “Company”, "we," "us," or "our") a Canadian Federal Corporation we are committed to protecting the privacy of our users. This Privacy Policy explains how we collect, use, and share personal information when you use our platform, tools and related services (“Service”).
We may provide additional privacy notices or statements in connection with specific products, services, or features offered on our platform. If there is a conflict between this Privacy Policy and those additional notices or statements, the additional notices or statements will govern with respect to your personal information related to those products, services, or features.
By accessing and using our Service, you signify your acceptance to the terms of this Privacy Policy. If you do not agree with or you are not comfortable with any aspect of this Privacy Policy, you should immediately discontinue access or use of our Services.
As a data processor, Knitly is not able to provide notice to or obtain consent from Customer End Users. To the extent required by law, Knitly supports Customers’ data-protection compliance efforts, but it is up to the Customer to ensure the appropriate data protection safeguards are in place before processing Personal Information from Customer End Users.
In order for you to understand Knitly’s data protection obligations and your rights to your Personal Information under this Policy, it is important that you identify which relationship(s) you have with Knitly.
Hereinafter we may refer to Customers and Users collectively as “you.”
We collect Personal Information if you create an account to use our Services or communicate with us as follows:
Please note that when you connect your social media accounts to the platform, you are allowing us to access and collect your personal information from those accounts. You should review the privacy policies of the social media platforms you use to understand how they collect and use your personal information.
We may also collect personal information that you provide to us in the course of using the platform, such as when you post comments, participate in online communities, or send us feedback.
When you use the platform, we may automatically collect certain information about your device and usage of the platform. This may include:
We may use cookies and other tracking technologies to collect this information. A cookie is a small data file that is stored on your device when you visit a website. We may use cookies to personalize your experience on the platform, to understand how you use the platform, and to improve the platform. Find out more about cookies in our Cookie Policy.
We may now or in the future receive Personal Information about you from third parties. This information could include, but is not limited to, the user ID associated with your account, an access token necessary to access that service, any information that you have permitted the third party to share with us, and any information you have made public in connection with that third-party service. You should always review, and if necessary, adjust your privacy settings on third-party websites and services before linking or connecting them to the Service.
Knitly may also share Personal Information with its third-party service providers (such as its credit card processors and hosting partners) to provide the necessary hardware, software, networking, storage, and other services we use to operate the Service and maintain a high-quality user experience. We do not permit our service providers to use the Personal Information we share for their marketing purposes.
To facilitate the exchange of data between third-party SaaS applications, we may need to store certain information (“App Credentials”) that helps us access these third-party SaaS application accounts on your behalf. We store your App Credentials in an encrypted form.
When we access these third-party applications on your behalf, the third-party application provides us with access to certain data. We will use, store, and disclose this data in accordance with this Policy.
You should note that Knitly shall have no liability or responsibility for the privacy practices or other actions of any third-party applications for which you provide us with App Credentials.
Under the Data Protection Laws, we are required to notify you about our purposes of processing your Personal Information, as well as the legal basis for such processing. Unless otherwise permitted by law, we may process your Personal Information:
Purpose of processing: To ensure network and information security.
Legal basis: Processing is necessary for compliance with a legal obligation.
We process your Personal Information to:
Purpose of processing: To enforce Knitly’s terms and agreements.
Legal basis: Processing is necessary for the performance of a contract to which the Data Subject is party or to take steps at the request of the Data Subject prior to entering into a contract.
We have Terms of Service and other policies that define how you can use our Services. To ensure that you and others are using our Services in accordance with such terms and policies, we may process your Personal Information to:
The consequences of not processing your Personal Information for such purposes is the termination of your account, as we cannot perform our Services in accordance with our terms.
Purpose of processing: To provide our Services.
Legal basis: Processing is necessary for the performance of a contract to which the Data Subject is party or to take steps at the request of the Data Subject prior to entering into a contract.
We process your Personal Information to provide the Services. For example, when you want to bill a client for your work, we collect registration, financial, transaction, and interaction data to send the bill to the client and obtain payment. We cannot provide you with Services without such information.
Purpose of processing: To provide Service communications.
Legal basis: Processing is necessary for the performance of a contract to which the Data Subject is party or to take steps at the request of the Data Subject prior to entering into a contract.
We may reach out to you to send you administrative or account-related information to keep you in the loop about our Services, alert you of relevant security issues or updates, or provide other transaction-related information to you. While we generally use your registration data for this purpose, we may send personalized Service communications to you based on other Personal Information, such as interaction, payment, or transaction data. Without such communication, you may miss out on important developments relating to your account that may affect how you can use our Services.
Purpose of processing: To ensure quality control.
Legal basis: Processing is necessary for the performance of a contract to which the Data Subject is party or to take steps at the request of the Data Subject prior to entering into a contract.
We process your Personal Information for quality control and staff training to make sure we continue to provide you with accurate information. Without our quality-control measures, you may experience issues while using the Services. For example, you may not be able to bill clients accurately or in a timely fashion, or you may encounter interruptions on our Services.
Purpose of processing: To provide customer service.
Legal basis: Processing is necessary for the performance of a contract to which the Data Subject is party or to take steps at the request of the Data Subject prior to entering into a contract.
When you contact our customer service channel, we process your Personal Information to respond to your questions, disputes, feedback, or issues with our Services. We may process your Personal Information in response to another customer’s request, as relevant. Without processing your Personal Information for such purposes, we cannot respond to your requests.
Purpose of processing: To enhance your experience on our Services.
Legal basis: Processing is necessary for the purposes of the legitimate interests pursued by Knitly.
We process your Personal Information to provide a personalized experience on our Services and to implement your feedback or the preferences you request. For example, you may share parts of your social media account information with us for authentication. Without such processing of your Personal Information, we may not be able to ensure your continued enjoyment of part or all our Services.
Purpose of processing: For research and development purposes.
Legal basis: Processing is necessary for the purposes of the legitimate interests pursued by Knitly.
We process your Personal Information to better understand you and the way you use and interact with our Services. For example, interaction data can provide helpful insights that assist us with measuring, customizing, or improving current Services. In addition, such information can help us develop new Services for your enjoyment. Without such processing, we cannot ensure your continued enjoyment of our Services.
Purpose of processing: To facilitate acquisitions, mergers, or other business transactions.
Legal basis: Processing is necessary for the purposes of the legitimate interests pursued by Knitly.
We may process any of your Personal Information as is necessary in the context of acquisitions, mergers, or other business transactions. We will try to notify you in advance if we intend to process your Personal Information for this purpose. You will have the option of terminating your account if you do not wish to have your Personal Information processed for such purposes.
Purpose of processing: To engage in marketing activities.
Legal basis: Processing is necessary for the purposes of the legitimate interests pursued by Knitly.
We may send you marketing communications from time to time. Such marketing communications may contain information about our events, partner events, or promotional offers. We may use your interaction and/or transaction data to provide you with targeted marketing communications. You can opt out of our marketing communications at any time and free of charge.
Aggregated or De-Identified Information. We may aggregate or de-identify Personal Information so that it may no longer be used to identify you and use such information to analyze the effectiveness of our Services, to improve and add features to our Services, to conduct research and for other similar purposes. In addition, from time to time, we may analyze the general behavior and characteristics of users of our Services and share aggregated information like general user statistics with third parties, publish such aggregated information or make such aggregated information generally available. We may collect aggregated information through the Services, through cookies, and through other means described in this Privacy Policy. We will maintain and use de-identified information in anonymous or de-identified form and we will not attempt to reidentify the information, unless required by law.
We will not use your personal information for any purpose other than those described in this Privacy Policy without your explicit consent.
With Your Consent: We may share your information with third parties if you have given us your explicit consent to do so. For example, if you opt in to receive marketing communications from a partner, we may share your information with that partner in order to send you those communications.
With Service Providers: We may share your information with third-party service providers who perform services on our behalf, such as hosting, data storage, and analytics. These service providers are required to maintain the confidentiality of your information and are prohibited from using it for any purpose other than providing services to us.
In Aggregate or De-Identified Form: We may share aggregated or de-identified information about our users with third parties for research, business, or marketing purposes. This information will not personally identify you.
In Connection with a Change of Control: If we sell, merge, or otherwise transfer control of our business to another company, we may share your information with that company as part of the transfer.
As Required by Law: We may be required to share your information in response to a subpoena, court order, or other legal process. We will only do so to the extent required by law, and we will take steps to notify you if we are required to share your information in this manner.
With Channels: Our marketing platform may integrate with Channels such as Facebook, Twitter, and LinkedIn. If you choose to use these integrations, you may be sharing your information with those platforms. We encourage you to review the privacy policies of these platforms to understand how they may use your information.
You have the rights to your Personal Information that are described below. You can exercise your rights by contacting us at contact@knitly.app so that we may consider your request under applicable law. When we receive an individual rights request via email, we may take steps to verify your identity before complying with the request to protect your privacy and security.
Right to withdraw consent. When we rely on your consent for processing of your Personal Information, you have the right to withdraw your consent at any time. However, the withdrawal of your consent will not affect the lawfulness of Webflow’s processing based on consent before your withdrawal.
Right of access to and rectification of your Personal Information. You have a right to request a copy of your Personal Information stored with Webflow. We will provide a copy to you without undue delay subject to some fee associated with gathering of the information (as permitted by law). We may limit or deny your request if providing you with a copy could adversely affects the rights and freedoms of others. You may also request us to correct or update any inaccurate Personal Information stored by us.
Right to erasure (or, “The right to be forgotten”). You have the right to request erasure of your Personal Information that: (a) is no longer necessary in relation to the purposes for which it was collected or otherwise processed; (b) was collected in relation to processing that you previously consented to, but no longer consent to; or (c) was collected in relation to processing activities to which you object, and there are no overriding legitimate grounds for our processing. Your right to erasure is subject to limitations by relevant Data Protection Laws.
Right to data portability. If we process your Personal Information based on a contract with you or based on your consent, or the processing is carried out by automated means, you may request to receive your Personal Information in a structured, commonly used, and machine-readable format, and to have us transfer your Personal Information directly to another data controller, where technically feasible, unless exercise of this right adversely affects the rights and freedoms of others.
Right to restriction of processing. You have the right to restrict our processing of your Personal Information where one of the following applies:
You contest the accuracy of your Personal Information that we processed. In such instances, we will restrict processing during the period necessary for us to verify the accuracy of your Personal Information.
The processing is unlawful and you oppose the erasure of your Personal Information and request the restriction of its use instead.
We no longer need your Personal Information for the purposes of the processing, but it is required by you to establish, exercise, or defend legal claims.
You have objected to processing, pending the verification of whether the legitimate grounds of Webflow’s processing override your rights.
Restricted Personal Information shall only be processed with your consent or for the establishment, exercise, or defense of legal claims or for the protection of the rights of another natural or legal person or for reasons of important public interest. We will inform you if the restriction is lifted.
Notification of erasure, rectification, and restriction. We will communicate any rectification or erasure of your Personal Information or restriction of processing to each recipient to whom your Personal Information has been disclosed, unless this proves impossible or involves disproportionate effort. We will inform you about those recipients if you request this information. If we have made your Personal Information public and we are required to erase the Personal Information, we will, taking account of available technology and the cost of implementation, take reasonable steps, including technical measures, to inform other parties that are processing your Personal Information that you have requested the erasure of any links to, or copy or replication of your Personal Information.
Right to object to processing. Where the processing of your Personal Information is based on consent, contract, or legitimate interests, you may restrict or object, at any time, to the processing of your Personal Information as permitted by applicable law. We can continue to process your Personal Information if it is necessary for the defense of legal claims, or for any other exceptions permitted by applicable law.
Automated individual decision-making, including profiling. You have the right not to be subject to a decision based solely on automated processing of your Personal Information, including profiling, which produces legal or similarly significant effects on you. There may be exceptions or limitations to this right as defined under relevant Data Protection Laws.
This section applies only to California residents. Pursuant to the California Consumer Privacy Act of 2018 (“CCPA”), below is a summary of the Personal Information categories, as identified and defined by the CCPA (see California Civil Code section 1798.140 (o)), that we collect, the reason we collect your Personal Information, where we obtain the Personal Information, and the third parties with whom we may share your Personal Information.
We generally collect the following categories of Personal Information about you when you use our Site or services:
identifiers such as a name, address, unique personal identifier, email, phone number, your device’s IP address, software, and identification numbers associated with your devices;
protected classifications, such as gender;
commercial information such as records of products or services purchased, obtained, or considered by you;
Internet or other electronic information regarding your browsing history, the webpage visited before you came to our Site, length of visit and number of page views, click-stream data, locale preferences, your mobile carrier, date and time stamps associated with transactions, and system configuration information;
audio recordings of your voice to the extent you call us, as permitted under applicable law;
professional or employment-related information.
We generally do not collect education-related or biometric information, geolocation information, or inferences about your preferences, characteristics, behavior and attitudes. For more information about the Personal Information we collect and how we collect it, please refer to Sections 1 and 2, above.
We collect your Personal Information for the business purposes described in Section 2, above. The CCPA defines a “business purpose” as the use of Personal Information for the business’s operational purposes, or other notified purposes, provided the use of Personal Information is reasonably necessary and proportionate to achieve the operational purpose for which the Personal Information was collected or another operational purpose that is compatible with the context in which the Personal Information was collected.
The categories of third parties with whom we may share your Personal Information are listed in Section 2, above.
Privacy Rights
If you are a California resident, you have rights in relation to your Personal Information; however, your rights are subject to certain exceptions. For instance, we cannot disclose specific pieces of Personal Information if the disclosure would create a substantial, articulable, and unreasonable risk to the security of the Personal Information, your account with us or the security of our network systems.
Right Against Discrimination - You have the right not to be discriminated against for exercising any of the rights described in this section. We will not discriminate against you for exercising your right to know, delete or opt-out of sales.
Right to Know - You have the right to request in writing: (i) a list of the categories of personal information, such as name, address, email address, that a business has disclosed to third parties during the immediately preceding calendar year for the third parties' direct marketing purposes, and (ii) the names and addresses of all such third parties. In addition, you have the right to request: (i) the categories of personal information we have collected about you, (ii) the categories of sources from which personal information is collected, (iii) the business or commercial purpose for the information collection, (iv) the categories of third parties with whom we have shared personal information, and (v) the specific pieces of personal information we hold about an individual. You have the right to request a copy of the specific Personal Information we collected about you during the 12 months before your request.
Right to Delete - You have the right to request us to delete any Personal Information we have collected from you or maintain about you, subject to certain exceptions.
To assert your right to know or your right to delete your Personal Information, please contact us according to the “Contact Us” section below. To verify your identity, we may ask you to verify Personal Information we already have on file for you. If we cannot verify your identity from the information we have on file, we may request additional information from you, which we will only use to verify your identity, and for security or fraud-prevention purposes.
• Right to Opt-Out of Selling. As described in this Privacy Policy, in certain situations we may share your Personal Information with certain third parties for our marketing or other purposes. To the extent such sharing is considered a “sale” under the CCPA, as a California resident you have the right to opt-out of such sharing. If you would like us to no longer share your Personal Information in this way, you can opt-out by visiting the following web page: Do Not Sell My Info. If you opt-out, we may be unable to offer you some of our Services which require sharing of Personal Information.
California consumers may also use the Digital Advertising Alliance’s tool to send requests under the California Consumer Privacy Act (“CCPA”) for a web browser to opt out of the sale of personal information by some or all of that framework’s participating companies by accessing the DAA’s tool here: https://www.privacyrights.info/, or by downloading the DAA’s AppChoices mobile application opt-out here: https://www.privacyrights.info/appchoices.
The AppChoices app is not limited to opt-outs for CCPA purposes and may be used by anyone to limit the collection of cross-app data for interest-based advertising purposes by participating DAA member companies.
In addition, under California Civil Code Sections 1798.83–1798.84, California residents are entitled to ask us for a notice identifying the categories of Personal Information which we share with our affiliates and/or third parties for marketing purposes, and providing contact information for such affiliates and/or third parties.
If you are a California resident and would like a copy of this notice, please submit a written request to: contact@knitly.app or KNITLY Inc., 1400-18 King Street East, Toronto, Ontario,
M5C 1C4.
Your rights to your Personal Information are not without limits. Access may be denied when:
At knitly, we retain your personal information for as long as necessary to provide you with the services you have requested, or as required by law. We are committed to keeping your Personal Information secure on our Services. We limit our storage of your Personal Information to the amount of time necessary to fulfill the purposes for which we collected the Personal Information, including for the purposes of satisfying any legal, accounting, or reporting obligations, or to resolve disputes. Although retention laws and requirements vary by jurisdiction, we have some standard retention periods for parts of your Personal Information which are described below:
If you have questions about retention periods that apply to any other data, please contact us at contact@knitly.app.
At knitly, we take the security of your personal information seriously and have implemented appropriate technical and organizational measures to protect it from unauthorized access, use, disclosure, or destruction.
Some of the measures we take to protect your information include:
Despite these efforts, no security measures are perfect or impenetrable, and we cannot guarantee the security of your personal information. We encourage you to take steps to protect your personal information, such as choosing strong passwords and keeping your personal information confidential.
We are based in Canada, but, unless we expressly agree otherwise (including through our Terms), we may host, transfer, and process data, including Personal Information, in Canada and in other countries through Knitly and third parties that we use to operate and manage the Service. These countries may have data protection laws that are different from those of your country of residence. Knitly uses a variety of safeguards, including contractual and technical measures, to protect the data we transfer.
We store your personal information on servers located in North America. If you are located outside of North America and choose to use our services, your personal information will be transferred to North America and processed in accordance with this privacy policy.
Our Service offers publicly accessible blogs and community forums. If you elect to post something in a public area of our Service, any Personal Information or content that you voluntarily disclose for posting to the Service, becomes available to the public, as controlled by any applicable privacy settings. If you remove information that you posted to the Service, copies may remain viewable in cached and archived pages of the Service, or if other users have copied or saved that information.
To request removal of your Personal Information from our blog or community forum, contact us at contact@knitly.app. In some cases, we may not be able to remove all your Personal Information.
From time to time, we post customer testimonials on the Sites which may contain Personal Information. We always obtain the customers’ consent prior to posting their names along with their testimonials.
We may update this Privacy Policy from time to time in order to reflect, for example, changes to our practices or for other operational, legal, or regulatory reasons. We encourage you to review this Privacy Policy periodically to stay informed about how we are collecting, using, and disclosing personal data.
We will post any changes to this Privacy Policy on this page and, if the changes are significant, we will provide a more prominent notice (including, for certain services, email notification of privacy policy changes). We encourage you to review the Privacy Policy whenever you access the services to stay informed about our information practices and the choices available to you.
If you disagree with any changes to this Privacy Policy, you will need to stop using our services and deactivate your account(s) if you have created any. Your continued use of the services after any changes or revisions to this Privacy Policy shall indicate your agreement with the terms of such revised Privacy Policy.