Privacy Policy

1. Who we are

KnownShift is a brand operated by AKS Enterprises. In this policy, "we" and "us" mean AKS Enterprises, which decides why and how the personal information described here is processed. You can reach us at support@knownshift.com. Our business identity and grievance process are set out in Legal & Business Information.

2. What we collect

We collect the following, and nothing else:

• Account information. Your name, email address and a hashed password. We do not collect your date of birth, postal address or telephone number.
• Enquiries and support. The name, email address and message you send through our contact form, and the details of any complaint you raise, including its category, subject and description.
• Purchase records. What you bought, the amount and currency agreed, and the reference numbers our payment provider gives us for the order, the payment and any refund.
• Content you submit to the products. Requirements, user stories, project information, and documents you upload for analysis.
• Output. The analysis, scores, refined text and documents the products generate from what you submit.
• Usage and technical records. Which product operations ran, when, which AI model was used, token counts and cost, and whether the operation succeeded.

We never receive your payment details.Card numbers, UPI credentials and banking passwords are entered on our payment provider's own checkout, not on our website, and are not transmitted to us or stored by us in any form.

We do not store your IP address. Where we need to enforce a rate limit or a free daily allowance, we derive a salted, shortened one-way fingerprint of the network address and store only that. It is designed not to be linkable back to an address, it is not combined with any other data, and it is used for no other purpose.

3. Why we use it

• To create and secure your account, and to sign you in.
• To deliver the product or service you bought, and to keep track of what you are entitled to.
• To process the content you submit and return the requested output.
• To take payment, reconcile it, and handle refunds and payment disputes.
• To answer your enquiries and resolve complaints.
• To detect and prevent fraud, abuse and security incidents.
• To meet legal, accounting and tax obligations.

We do not sell personal information, we do not share it for advertising, and we do not use it to build a profile of you for marketing purposes.

4. Artificial intelligence

Several products use large language models. When you use one, the content you submit, for example a user story, a set of requirements, or context you have supplied, is sent to our AI provider, Anthropic, so that the requested analysis or refinement can be produced and returned to you.

What we can tell you about our own systems: we do not log the content you submit or the output produced. Our logs record only technical facts such as which operation ran, how long it took, the model used, and whether it succeeded. We do not use your content to train any model of our own, and we do not have any model of our own.

What happens to data on our AI provider's systems is governed by our commercial agreement with that provider and by their published terms, not by our code. If your material is confidential and you need contractual assurances covering onward processing, contact us at support@knownshift.com before submitting it.

Some tools run entirely in your browser and send nothing to us or to an AI provider. Where that is the case, the tool says so on its own page.

5. Free tools used without an account

Some tools, including the Story Health Checker, work without signing in and do not ask you to identify yourself.

• The text you submit is sent to our AI provider to be analysed. We do not write it to our database and it does not appear in our logs.
• We keep the resulting analysis for 14 days, filed under a one-way fingerprint of your input rather than the input itself, so that the same requirement returns the same assessment rather than a different one each time. The analysis quotes short fragments of your text where the evidence has to be specific. It is stored with no account, no session and no network identifier attached.
• We record a salted, shortened fingerprint of the network address to enforce the daily free allowance and the rate limit, as described in section 2.

Please do not paste material into a free tool that you are not permitted to disclose to a third-party processor.

6. Who processes your information

We use a small number of service providers, each for one job, under their respective terms:

• Vercel hosts the website and runs the application.
• Neon provides the PostgreSQL database where your account, purchase and product data is stored.
• Razorpay processes payments and holds the payment details we never see.
• Resend delivers our transactional email, such as sign-in, activation and purchase messages.
• Anthropic provides the AI models described in section 4.

These providers process data outside India. We do not use advertising networks, and we have no analytics or tracking product installed on this website.

7. Cookies and browser storage

We set no cookies of our own for analytics, advertising or tracking. The cookies present on this site are:

• Session and security cookies set by our authentication library when you sign in. They keep you signed in and protect the sign-in forms against cross-site request forgery. Without them the product cannot work.
• Razorpay's cookies, set by our payment provider's checkout when it loads on a purchase page. These are governed by Razorpay's own privacy policy.

We also use your browser's own storage for two things that never reach us: your light or dark theme preference, and work in progress in a tool so that it survives a page refresh in that tab.

8. How long we keep it

• AI Story Fix packs, including the story text you submitted and the refined output, expire 7 days after creation and are not readable after that.
• Free tool analyses expire 14 days after creation and are not readable after that.
• Account, purchase and entitlement records are kept for as long as you have an account, and afterwards for as long as we are required to keep financial and tax records.
• Estimator inputs and uploaded workspace evidence are kept for as long as your account exists. They do not currently expire on a timer, so delete anything you no longer want us to hold.
• Administrative audit records, which record actions taken on accounts and entitlements, are kept indefinitely so that the trail cannot be edited away.

Where an obligation to retain financial or legal records applies, that obligation overrides a request to delete, for as long as it lasts.

9. Security

Passwords are stored only as salted one-way hashes and are never recoverable, by us or by anyone else. Links we email for activation, verification and password reset are stored only as hashes, can be used once, and expire. Access to your data is checked on every request against the account making it. Our database and hosting are managed services with access restricted to the operator of this business.

We hold no security certification and we do not claim one. No online service can promise absolute security, and we do not.

10. Your rights

You can ask us to give you a copy of your personal information, correct it, or delete it. There is no self-service control for this yet, so email support@knownshift.com and we will action it manually. We may need to confirm your identity first, and we may have to keep records the law requires us to keep.

You can withdraw consent to non-essential communications at any time.

11. The law this sits under

India's Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025 are being brought into force in stages. The provisions in force today are the definitional ones and those establishing the Data Protection Board of India. The provisions that would place data fiduciary obligations on us, and that create the matching statutory rights for you, are scheduled to commence eighteen months from the notification dated 13 November 2025. That schedule can be changed by further notification, so we describe it as scheduled rather than fixed.

Until those provisions commence, the operative framework for this policy is section 43A of the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011, both of which remain in force. The provision that will repeal section 43A is itself part of the later stage, so the two regimes change over together rather than leaving a gap.

We have not waited for that date. The rights and safeguards described in this policy are offered now as a matter of practice, not because a statute presently compels each of them, and we will extend them as each stage takes effect.

12. Children

KnownShift is a professional product intended for people aged 18 or over. It is not directed at children, and we do not knowingly collect their personal information. If you believe a child has provided us with information, tell us and we will remove it.

13. Personal information in what you submit

Requirements, evidence and project documents often name real people, such as stakeholders and team members. When you submit that content you are asking us to process it on your behalf, and you are confirming you are entitled to share it. Please do not submit personal information beyond what the task needs.

14. Data breaches

If a breach affects your personal information, we will act on it and notify you and the relevant authority where applicable law requires it, within the timeframes that law sets.

15. Changes

This policy is versioned; the version and effective date are shown at the top of this page. If we change how we use personal information in a way that materially affects you, we will say so rather than rely on a silent update.

16. Contact and complaints

Email support@knownshift.com with any privacy question or request. If you are not satisfied with our response, you can raise a formal grievance through our support and grievance process, which gives you a reference and a tracked response, and you retain the right to complain to the relevant supervisory authority.