Legal · KnowledgeEX
Privacy Policy
Last updated: 9 July 2026
This policy explains what personal data KnowledgeEX collects, how it is used, and the choices and rights you have. KnowledgeEX is operated for the INTENT Platform and processes data only to run the service.
1. Data we collect
Account data you provide — name, work email, organisation, role, and country. Usage data generated as you use the platform — pages viewed, searches, saved items, and Copilot interactions. Analytics events record only metadata and identifiers; the full text of documents and source content is never included in analytics.
2. How we use it
To authenticate you, provide and secure the platform, answer your questions through the AI Copilot, personalise learning journeys and recommendations, maintain human oversight of AI behaviour, and improve reliability. We do not sell your personal data or use it for third-party advertising.
3. AI processing
When you use the Copilot or FAQ, your query and the relevant approved source excerpts are sent to our language-model provider (OpenAI) solely to generate a grounded, cited answer. Only what is necessary to answer is transmitted; confidential material is not used to train external models. Queries are stored as hashed or metadata-only records for oversight, not as plain-text logs tied to your identity beyond what the service requires.
4. Cookies and sessions
We use a single, signed, http-only session cookie to keep you signed in. It is not used for tracking or advertising. Disabling it will prevent you from staying authenticated.
5. Retention and security
Personal data is retained for as long as your account is active or as required for legitimate operational and legal purposes. Data is encrypted in transit, access is role-restricted, and confidential content is held under strict controls. No system is perfectly secure, but we apply industry-standard safeguards.
6. Your rights
You can view and update your profile, export your personal data, and delete your account from Settings. On deletion, your personal data is anonymised in place while required audit records are retained without identifying you. Where applicable law (such as the GDPR) grants further rights, you may exercise them by contacting the administrator.
7. International transfers and contact
The platform and its providers may process data in jurisdictions outside your own; we rely on appropriate safeguards where required. For any privacy request, contact the platform administrator via the channel provided by INTENT.