WhoWeKnow Privacy Policy

1. Who we are and how to contact us

WhoWeKnow operates the WhoWeKnow app and related support pages from the United States for users in the USA and globally. This policy explains how we handle information when you use the service.

For privacy questions, access or correction requests, or help with account or data removal, email jerrydarko@gmail.com. You can initiate full account deletion in the app through Settings → Delete account. Deletion is reviewed and completed manually within seven days; we may need to verify other privacy requests.

2. Information you provide

Account information includes your account identifier, name and email address, authentication and verification information, and organization memberships and roles. Clerk provides our account authentication, including sign-in, verification and password recovery. Our application database stores your account identifier and display name alongside your app records; authentication credentials and sessions are handled through Clerk.

Your personal network can include saved people and companies, profile and website URLs, names, employers, job titles, email addresses, phone numbers, relationship descriptions or strength, company connections, personal groups and private notes that you choose to enter.

Organization records can include organization names and descriptions, invitations, members and administrator roles, tags, prospects, campaigns or projects, suggestions, shared notes, requests for help, commitments, review responses, status and request histories, and outcomes. Administrators can record internal notes and outcome or fundraising details. We also receive the information you send when you contact support.

Safety records include content reports, your explanation and a limited snapshot of the shared content you report, personal blocks, and moderation decisions. Service operators can review reported content and deletion requests to protect users and handle removal. A report does not copy your private notebook notes or unrelated contact fields.

3. Information about other people and imports

Users may enter information about other people through saved contacts, company connections, nominations, suggestions and organizational imports. These records can include contact or professional details, relationship information, source identifiers and organization-entered context. Provide only information you are entitled to use and share; do not submit unnecessary sensitive information.

An administrator can select CSV or Excel files for importing prospects. Files may be copied to the device's temporary cache. Excel worksheets are read on the device and the selected tabular content is sent to our backend for preview and import. Imported records are stored in the organization database. The import feature does not execute spreadsheet macros or formulas or establish a live connection to your CRM.

4. Technical information and device storage

Running the service produces technical records such as request identifiers, request paths, response status, timing and error details. Hosting and authentication providers can also process IP addresses, browser or device information and security or diagnostic information to operate their services.

The app stores authentication session information using Clerk and secure device storage where supported. Browser versions can use browser cookies or storage. The device also stores preferences such as your selected workspace. If you opt into draft recovery, unfinished form data is stored locally so you can return to editing. Local storage, temporary files and device backups are subject to your device and browser settings. Restoring a draft does not submit it or provide consent to share.

The in-app browser connects to third-party websites, which have their own privacy practices. It enables shared and third-party cookies, allowing those sites to maintain sign-in and other sessions on your device. Information you enter there, including sign-in information, is processed by those websites and their browser storage. Signing out of WhoWeKnow does not sign you out of these websites or clear their cookies.

The app observes the browser's current URL and document title to recognize the page and help with a user-initiated save. Suggested names or titles can be unverified and should be reviewed. Saving sends the link and the fields you confirm to our backend; ordinary browsing is not a background contact-network import. The browser does not extract password fields or cookie values into our application database or run a page-scraping or enrichment integration.

Notifications about organizational activity are stored in the app's database and shown in the app. Account verification and recovery messages are handled through the authentication provider. This policy webpage does not add analytics, advertising, tracking scripts or a contact form.

5. How we use information

We use information to create and secure accounts, keep your personal network available, manage organization access, display relevant opportunities, record your chosen contributions and requests, coordinate follow-up and outcomes, provide support, and diagnose or prevent service problems.

WhoWeKnow does not use app data for selling or licensing data, advertising, AI model training or other unrelated purposes. The current service does not implement AI enrichment or background importing of third-party contact networks. Third-party websites and providers have their own practices, described below.

6. Personal privacy and organization visibility

Personal contacts, companies, groups and private notes start in your own account. Organization membership alone does not give an organization access to your private notebook. When you make an ordinary contact share, organization administrators receive selected information such as the person's name, profile link, employer and job title, your connector name, chosen organization tags, your shared note and your willingness to help. Ordinary contact shares do not include your private notes, relationship groups or strength, email address or phone number.

Company shares expose selected company and connector information, organization tags, the shared note and willingness to help, rather than your private company notes or your list of personal contact identifiers.

Organization administrators can manage membership and see information deliberately shared or submitted to their organization, along with its workflow records and internal notes. Members see opportunities made available to them and their own responses, requests, contributions and approved updates, not the administrator's full records. Administrator access applies to the relevant organization; changing between Member and Admin views does not grant a new role.

Submitting a suggestion, relationship response or other contribution is different from an ordinary revocable notebook share. These submissions can create a separate organization record containing the fields you review and submit. Do not place private notebook information into a shared note or submission unless you intend to disclose it.

7. Providers and other disclosures

We use Replit for hosting and database infrastructure and Clerk for authentication and associated account messages. Information necessary for those functions is processed by these providers. Your device's operating system and development or distribution tools can also process information needed to run or deliver the app.

Information you deliberately share or submit is available within the relevant organization according to its roles and audiences. If you contact us by email, your message is handled through email services. We may also disclose information when required by applicable legal process or when necessary to address security incidents or protect the service and its users.

Provider and third-party privacy notices describe their own practices. Our statements about WhoWeKnow's use of data are not promises about every independent website you visit or a provider's separate services.

8. Storage, security, retention and deletion

App records are stored in our hosted database; preferences, authentication sessions, optional drafts and cached import files can also be stored on your device. We use HTTPS and account, ownership, membership and role checks to protect access. No storage or transmission method can be guaranteed completely secure. Device-local drafts and caches are not a substitute for secure account storage.

Records generally remain while your account and organizational workflows use them, unless you delete a supported personal record or a removal request is handled. We have not set a single fixed retention period for all information. Initiate full account deletion through Settings → Delete account. An accepted request is pending, not completed deletion. We manually remove your sign-in account and associated personal app data within seven days and send a completion email.

Deleting a personal contact or company removes that personal record and its ordinary shares from active app access. Revoking an ordinary share removes the organization's current access through that share. Leaving an organization revokes ordinary shares and membership access and cancels active requests addressed to you, but deliberate contributions and related organizational history can remain. Removing a personal source record does not automatically erase a separately submitted organizational contribution.

Full account deletion removes your private notebook, groups, ordinary shares, memberships and associated personal contributions, responses and messages. Older or copied shared records are reviewed and your personal content is removed or de-identified. Unrelated records belonging to other people are not deleted. Organization history is not a blanket exception that lets us retain your personal submissions. No specific legal-retention exception is currently configured; if one actually applies, we will identify the information, reason and duration.

Your deletion request clears that account's optional recovery drafts, temporary picker flows and saved workspace choice on the requesting device. It does not erase another account's device data or independent website sessions. A minimal work record and completion address are retained while erasure and notification are pending and then removed. Backup copies and provider logs remain under their applicable retention processes; removal from active records does not promise immediate erasure from every backup.

We cannot recall information that another person or organization has already copied, exported, recorded or otherwise obtained outside the app.

9. Your choices and requests

You can choose what to save, keep notes private, decide whether to share or submit information, edit or delete supported personal records, revoke ordinary shares and leave an organization. Optional draft recovery is a separate choice. You can manage website sign-ins and cookies using the website, device and browser controls available to you.

Email jerrydarko@gmail.com to ask about your information, request access or correction, or request account or data removal, including if you are a person described in someone else's record. We will assess and respond to the request after appropriate verification and explain any limitations. Contact the relevant organization as well for questions about its independently maintained records.

10. Adults only

WhoWeKnow is intended for people aged 18 or older. It is not intended for children or anyone under 18. If you believe information about a person under 18 has been provided to the service, contact jerrydarko@gmail.com so we can review it and take appropriate action.

11. International processing

WhoWeKnow operates from the United States and serves users globally. Depending on where you and our providers are located, information may be processed or stored in the United States or other countries whose privacy rules differ from those in your location.

12. Policy updates

We may update this policy when our service or practices change. The published version will show its effective date. Please review it periodically and contact us if you have questions.