Privacy Policy

Knownly is a B2B website visitor identification tool. Website owners install a small tracking snippet on their site, and Knownly reports which companies visited. You can reach us at hello@knownly.io.

We are the controller for the account data of our own customers (the people who sign up for Knownly). We act as a processor for the visit data collected through the snippet on our customers' websites — in that case the website operator is the controller and decides why the data is collected. Visitors of those sites should contact the site operator first, though we will always help.

When you create a Knownly account we store your email address, and optionally your display name and company name, together with the version and date of the Terms and Privacy Policy you accepted at signup. Authentication is handled by our backend provider; we never store your password in readable form.

We store the email address and optional website you submit to the waitlist only to contact you about access to Knownly. We delete this information on request via hello@knownly.io.

On websites that install Knownly, each page view sends the following to our servers:

• The IP address of the request
• The URL of the page being viewed
• The browser user agent string
• A tracking key identifying the website owner

Knownly does not set advertising cookies, does not fingerprint devices, and does not attempt to identify individual people.

The IP address is used solely to look up the organisation that owns the network. Traffic identified as coming from consumer internet providers, hosting providers, anycast networks or bots is rejected and not shown as a company. Knownly reports company names, domains and approximate locations — never names, emails or personal profiles of the individuals browsing.

For account data, we process on the basis of performing our contract with you and, where relevant, our legitimate interest in operating and securing the service. For visit data, the website operator determines the basis; in practice it is the legitimate interest of a business in understanding which organisations engage with its website. We limit that processing to network-level, organisation identification, discard consumer and bot traffic, and never build profiles of individuals — which is why we consider the balance of interests to favour this use. Website operators must still disclose Knownly in their own privacy notice.

The Knownly snippet sets no cookies and stores nothing in the visitor's browser. On our own app, a single session cookie keeps you signed in. We run no advertising or cross-site tracking cookies.

To run the service we rely on a small number of providers: a managed cloud backend and hosting provider (database, authentication and serverless functions) and an IP intelligence provider used to look up the organisation behind an IP address. Some of these providers may process data outside Switzerland and the EEA; where they do, transfers rely on the EU Standard Contractual Clauses and equivalent safeguards recognised under Swiss law. We can share the current list of sub-processors on request.

Data is encrypted in transit and at rest. Access to each customer's data is isolated at the database level by row-level security rules tied to the account, and administrative access is limited to what is strictly needed to operate the service. No system is perfectly secure, but we treat any suspected incident seriously and will notify affected customers without undue delay.

Visit records and derived company records are retained for up to 24 months from collection, and while your account is active. When you delete your account, your account data and all associated tracking data are deleted within 30 days. You can also request deletion at any time by writing to hello@knownly.io. We action such requests within 30 days.

Depending on where you live — including under the GDPR, the UK GDPR and the Swiss Federal Act on Data Protection — you may have the right to access, correct, export, restrict or delete data we hold about you, and to object to its processing. Write to us and we will respond within 30 days. You also have the right to lodge a complaint with your supervisory authority, such as the Swiss Federal Data Protection and Information Commissioner (FDPIC) or your national data protection authority.

If you landed here because a website you visited uses Knownly: that website's operator receives the name of the organisation whose network your request came from, together with the pages viewed and the times of the visits. No personal identity, name, email address or account is derived or shared.

If you would like your organisation's data removed, or your organisation's IP ranges excluded from future collection, contact the website operator or write to hello@knownly.io with the domain or IP range concerned. Standard privacy tools — corporate VPNs, proxies and script blockers — also prevent identification.

We will update this page when our practices change and revise the version and date above. Material changes are notified to account holders by email.