Private project data, handled with explicit boundaries.

Knoy works with environmental and technical project material that can carry commercial, personal, cultural and regulatory sensitivity. This page explains the product and operating approach reflected in the current codebase, together with the arrangements that still need to be confirmed before sensitive use.

Information Knoy may handle

The application may handle:

• Account details, project membership and named reviewer roles.
• Project documents, submissions, correspondence and field material.
• Extracted text, evidence excerpts, citations, requirements and findings.
• Draft reports, review decisions, commitments and exported outputs.
• Project activity records, support requests and service diagnostics.

Customers and users must only upload material they are authorised to process.

Project access and boundaries

Report reviews can belong to an individual account or a shared team. Team owners manage single-use invitations and membership; members can read and edit the team’s reviews. The server checks signed-in membership on each request. Membership does not verify professional qualifications. Legacy local notes and files remain browser-local.

AI processing and model routes

Review and RFI drafting send extracted source text, project context and supplied requirements to Anthropic on request. Saved records retain the returned model, purpose and time. The general agent has its own provider/tool route. Processing location, provider retention and contractual terms must be confirmed for your organisation; Australian-only processing is not promised.

Review sources are limited to 20 documents, 3 MB per upload and 160,000 extracted characters in total. Original documents and immutable review snapshots are retained in access-controlled storage. Extraction warnings are visible before AI review.

Human-controlled outputs

AI-assisted material remains draft material. Environmental obligations, citations, conclusions and exported outputs require professional interpretation, verification and approval before use or submission. Knoy is not intended to make final planning, legal, cultural heritage, ecological or regulatory decisions.

Product analytics and diagnostics

Knoy uses PostHog US Cloud to measure page visits, feature usage, performance and errors. Signed-in activity is linked using your account identifier; names and email addresses are not included. AI diagnostics contain model, token counts, duration and outcome, without your prompts or responses. Session replay masks text, form inputs and content-bearing attributes and blocks document embeds and media. Network bodies, headers and console logs are excluded. Analytics uses a browser identifier to connect visits.

Activity, retention and deletion

Report reviews retain original documents, saved versions, reviewer decisions and an actor-attributed activity record. These records are not a certified or tamper-proof audit system. Archiving hides a review from active work; it does not delete its data.

Self-service permanent deletion of the new review workspace is not provided. Contact Knoy for deletion scope, timing and backup-retention arrangements. Local workspace reset does not delete cloud reviews. A final retention schedule and customer-specific processing terms remain to be agreed.

Cross-border processing and service providers

Project data may be processed outside Australia when the selected hosting, model or support route uses an overseas provider or region. Knoy will need to document the applicable subprocessors, regions and contractual safeguards for each agreed deployment.

Questions and requests

Contact founders@knoy.app for privacy questions or to request access, correction or deletion. The scope of rights, response periods and data ownership position must be confirmed in counsel-approved privacy and customer terms.