Privacy Policy

Last updated: 2026-10-04

Knitly ("Knitly", "we", "us") is operated by Knitly.Knitly finds people you want to reach, researches them from public sources, drafts a short personal email to each one, and sends the emails you approve from your own Gmail account. This policy explains what we collect to do that, how we use it, and the choices you have. By using Knitly you agree to it.

What we collect

Account information. Your email address and, if you sign up with a password, a hash of that password. If you sign in with Google: your name, email address, profile photo, and Google account ID.
Gmail connection. When you connect Gmail, Google gives us an access token and a refresh token. We store them so Knitly can send email as you and check for replies without asking you to sign in every time. The section below on Google user data says exactly what we do with that access.
Your profile. What you tell us about yourself and your goals: your one-line background, the postal address you want in your email footer, and the writing rules you save.
Contacts and campaigns. The people you upload or that Knitly finds for you (name, title, company, email address), the research we gather about them from public web pages, the emails we draft, your edits, and send, reply, and unsubscribe activity.
Billing. Stripe handles payment. We store your plan, credit balance, and Stripe customer ID. We never see or store full card numbers.
Operational logs. Request logs, error reports, and a record of each AI call (model, token counts, cost, and the opening line of the system prompt). We do not run third-party analytics or advertising trackers.

Google user data

Knitly requests these Google permissions, and uses each one only for the purpose listed:

Basic profile (openid, email, profile). To create your account and show which Gmail address you are sending from.
Send email (gmail.send). To send an email only after you have approved it in Knitly, and to send the follow-ups and replies you have turned on. We never send anything you have not approved.
Read email (gmail.readonly). To check whether someone replied. We read only the conversation threads that Knitly itself started, by the thread ID we recorded when we sent the message. We do not list, search, or read any other part of your mailbox. When a reply arrives we store that message (sender, subject, body) so you can see it in Knitly's inbox, and we stop any scheduled follow-up to that person.

Knitly's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. In plain terms: we use Gmail data only to provide the features above; we do not sell it; we do not use it for advertising; no person at Knitly reads it except to fix a problem you ask us to fix, with your permission, or where the law requires; and we share it only with the service providers listed in Sub-processors, as needed to send and receive your email.

You can disconnect Gmail at any time from Settings → Sending, or revoke Knitly's access from your Google account permissions. Either one stops all sending and reply checks immediately. Disconnecting deletes the stored tokens.

How we use information

To find, research, and draft emails to the people you choose.
To send the emails you approve, on the schedule you set, from your Gmail.
To show you replies and stop follow-ups to people who have answered.
To honor unsubscribe requests across every campaign you run.
To bill you, keep the service running, and tell you about changes to it.
To comply with law and enforce our Terms.

We do not use your data, your contacts' data, or your Gmail data to train AI models. Our AI provider (Anthropic) does not train on data sent through its API.

Sharing

We do not sell personal information. We share data only with the providers listed at /legal/sub-processors, each under terms that limit them to processing it on our instructions. Each provider receives only what its job needs: our AI provider receives research and draft text, Gmail receives the emails you send, the email-finding service receives a name and company domain, and so on.

Your rights and choices

You can see and change your profile and campaigns in the app. You can delete your account from Settings → Account. Deletion removes your campaigns, contacts, research, drafts, inbox messages, Gmail tokens, and profile. We keep billing records as long as tax law requires, and we keep the unsubscribe list so that people who opted out stay opted out.

If you live somewhere with data-protection rights (for example the EU, UK, or California), you can ask us to access, correct, export, or delete your personal data, or object to how we use it, by emailing privacy@knitly.ai. We answer within 30 days.

If you received an email sent through Knitly and want to know what the sender has about you, or want to opt out of all future email from that sender, use the unsubscribe link in the email or write to privacy@knitly.ai. The sender is responsible for the content and the choice of recipients; we will pass your request to them and record the opt-out on our side.

Retention

Campaigns, contacts, research, drafts, and inbox messages: until you delete them or your account.
Gmail tokens: until you disconnect Gmail, revoke access at Google, or delete your account.
Unsubscribe list: kept indefinitely so opt-outs are honored.
Billing records: as long as tax law requires.
Request and error logs: a few days, per our hosting provider's retention.

Security

Data moves over TLS and is stored encrypted at rest. Gmail tokens are readable only by our server, never by the browser. Access to production systems is limited to the people who operate the service and is logged. No system is perfectly secure; if you think you have found a vulnerability, email privacy@knitly.ai and we will respond quickly.

Children

Knitly is not for anyone under 16, and we do not knowingly collect data from them.

Changes

If we change this policy in a way that matters, we will tell you in the app and by email at least 14 days before it takes effect.

Contact

privacy@knitly.ai