Privacy Policy

About This Policy

This Policy explains how Getknockknock.live LLC, a Washington limited liability company, d/b/a "Knock Knock" ("Knock Knock," "we," "us") collects, uses, and shares personal information.

By using Knock Knock, you accept this Policy. It is part of our Consumer Terms of Use and Creator/Merchant Terms of Use. Each Creator may have their own privacy practices, which we do not control.

1. Age — 18 or Older

Knock Knock is an 18+ platform. We do not knowingly collect personal information from anyone under 18. If we learn we have, we will delete it and remove the account. (This is stricter than a general 16+ minimum and reflects the platform's 18+ eligibility.)

2. Personal Information We Collect

We do not include publicly available, aggregated, or de-identified information in "personal information."

• Identifiers — name, phone number, email, username, account/profile details, and (for Creators) business and payout-onboarding details.
• Sensitive personal information — government ID information (only if collected for Stripe/creator payout verification), precise geolocation (only if you enable it). We do not seek other sensitive categories.
• Commercial information — purchases, bookings, session history, listings, and transactions.
• Live session content — the audio and video of a live session (via our video provider, LiveKit), messages exchanged in threads, and, where all participants consent, session recordings (and, post-launch, clips generated from them).
• Internet & device activity — app/website interactions, device identifiers, model, OS, IP address, and generalized location.
• Inferences — limited profile information derived from the above to operate and improve the Services.
• Date of birth — collected from creators to verify they are 18 or older and for identity/payout verification. We do not collect date of birth from consumers.
• Content you upload — profile photos, room and listing images, and any digital goods or files you upload to sell or display.

3. How We Collect & Use Personal Information

We collect information you provide (signup, profile, listings, bookings, messages), information generated by your use (transactions, session participation), and technical/device data. We use it to: provide and operate the Services (sessions, bookings, messaging, payouts); process transactions through Stripe; provide customer support; send transactional/service communications; maintain safety, security, and integrity (including enforcing the Content Policy); comply with law; and improve the Services. Our legal bases include your consent, our legitimate interests, performance of our contract with you, and legal obligations.

Automated Processing & AI

We use automated systems, and may use artificial-intelligence tools, to operate, secure, and improve the Services — for example to help detect fraud and abuse, to enforce our Content Policy, and to run and support platform operations. Where we introduce AI features that process your content — such as generating short clips from a recorded session — we will describe them and obtain any required consent before they apply to you (see the recording and biometric sections). We do not make legally or similarly significant decisions about you solely by automated means without a way to reach a human, and we do not sell your personal information.

4. Live Video/Audio Sessions & Recordings

Live sessions are delivered through our real-time video/audio provider (LiveKit). As a core, KK-specific privacy area:

• Session audio/video is transmitted through LiveKit to connect participants. Recording is a feature of the platform, enabled per session and only with consent (below).
• Recordings occur only with the affirmative consent of all participants at the start of the session. Any participant may decline recording. This reflects all-party (two-party) consent requirements in states like CA, WA, IL, and FL.
• Where recordings are made, we store them to provide the Service (playback, delivery to the customer, dispute resolution, and — post-launch — clip generation). A recording may be delivered to the customer to download and keep; Knock Knock retains its copy for 30 days and then deletes it (a copy the customer downloads within that window is theirs and cannot be recalled by Knock Knock). See Section 9.
• Clips (post-launch). A Creator may generate short clips from a recorded session to share on social media, only including a Guest's image/voice with that Guest's consent.

5. Biometric Data (applies only when face/biometric features are enabled)

At beta, Knock Knock processes raw audio/video only and does not perform facial recognition or extract biometric identifiers. If and when we enable features that process biometric identifiers (for example, face-recognition-based clip generation), we will:

• Obtain any legally required written consent/release before collecting or using biometric identifiers;
• Publish a retention and destruction schedule for biometric data; and
• Not sell or profit from biometric identifiers.

6. Payment Information

All payments are processed and stored by Stripe (PCI-DSS compliant). Knock Knock does not process or store payment card data; we collect payment details only to pass to Stripe and are bound by Stripe's terms.

7. Communications & SMS

We use your contact information for account, transactional, service, and (with consent) marketing communications. SMS is consent-based; reply STOP to opt out, HELP for help. We do not share phone numbers with third parties for their marketing.

8. Cookies & Similar Technologies

We use cookies and similar technologies for essential functionality, preferences, security, and payments (Stripe). We do not currently use third-party analytics or advertising cookies; if we add analytics in the future, we will update this Policy and our subprocessor list. You can control cookies through your device/browser settings.

9. How We Share, Retention & "No Sale"

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We share only as needed:

Retention. We retain personal information as long as needed to provide the Services and for legitimate legal, security, and business purposes, or until you request deletion (subject to legal-retention and backup exceptions). Session recordings are retained for 30 days and then automatically deleted from Knock Knock's systems; a copy a customer downloads within that window is retained by the customer and is outside Knock Knock's control.

• Creators ↔ Guests — information necessary to connect you for a session, booking, or purchase (e.g., a Creator sees the Guest they're in a session with, and vice versa) and to fulfill the transaction.
• Stripe — to process payments and creator payouts.
• Service providers / subprocessors — under confidentiality obligations, to operate the Services: Stripe (payments), LiveKit (live video/audio), Twilio (SMS), Supabase (data storage), and Netlify (hosting). We do not currently use analytics providers. We will update this list if we add analytics, the future AI clip-processing vendor, or Instagram/TikTok integrations (post-launch).
• Legal / safety — to comply with law, respond to lawful requests, protect against fraud or harm, enforce our Terms, or in a business transition.
• Aggregated / de-identified — may be shared without restriction.
• What is public vs. private: your creator profile, room, and product images are publicly viewable — they appear on your public storefront. Session recordings and your account and identity data are private and access-controlled (recordings are shared only through time-limited links, with consent). We do not make your recordings, messages, or identity documents publicly readable.

10. Your Privacy Rights

Depending on where you live (e.g., California under the CCPA/CPRA, and — where applicable — other US state laws or GDPR), you may have rights to know/access, correct, delete, port, and opt out of sale/sharing (we do not sell or share for cross-context behavioral advertising), and to limit use of sensitive personal information. You have the right to request access to, a copy of, or deletion of your personal information. To make a request, contact hello@getknockknock.live and we will verify and process it as required by applicable law. We honor opt-outs for texts, push, and email. We do not respond to Do-Not-Track signals.

11. Data Security & Breach Notice

We maintain appropriate technical and organizational measures to protect personal information. No system is perfectly secure. In the event of a security incident, we will notify affected parties and partners as required by law and our agreements (our Creator/Merchant terms provide for partner notice within 48 hours).

12. Changes to This Policy

We may update this Policy from time to time. Material changes will be communicated per the notice terms in the Terms of Use, and continued use after the effective date is acceptance.

13. Contact

Privacy questions and requests: hello@getknockknock.live.