Summary
When you store customer billing data in Knock, you are the controller (a data fiduciary under India's DPDP Act) and Knock acts as your processor. This page summarises the processing terms that apply. It is a plain-language summary, not a negotiated contract. If you need a signed agreement, contact us.
Details of processing
- Subject matter: hosting and processing of billing records on your instructions.
- Data types: names, email addresses, tax and billing details, invoices, subscriptions and payment records.
- Data subjects: your staff and your customers.
- Duration: while your account is active, plus any period needed to delete data afterwards.
Our commitments
- We process personal data only to provide the service and on your documented instructions.
- People with access to data are bound by confidentiality.
- We apply the safeguards listed on the Security page.
- We help you respond to access, correction and deletion requests from data subjects.
- We will notify you without undue delay if we become aware of a personal data breach affecting your data.
- On account closure we delete or return your data on request, subject to legal retention duties.
Sub-processors
These providers may process personal data on our behalf.
| Provider | Purpose | Data involved |
|---|---|---|
| MongoDB Atlas | Database hosting | All stored account and billing data |
| Resend | Transactional email delivery | Recipient email, name and email content |
| Hack Club AI or OpenAI (whichever is configured) | Pip AI responses | Pip messages, attachments and the billing context needed to answer |
| Application hosting provider (to be confirmed at launch) | Running the web application | Request data and logs |
We will update this list before adding a new sub-processor and keep the date above current.
International transfers
Some providers operate outside India and the EU. Where personal data is transferred, we rely on the safeguards permitted by applicable law, and we choose providers with published data protection commitments.
Audits and questions
Contact us for information that shows we comply with this summary. As a hackathon project we have no third-party audit reports yet.