Privacy Policy

KNIGHT-TECH AI PRIVATE LIMITED operates Knight, a research workspace for students, researchers, faculty and institutions.

• The AI model runs on a private deployment we operate on Yotta's Shakti Cloud in India. We do not send your work to OpenAI, Google, Anthropic or any other third-party AI provider.
• The model receives the text it is working on, never who you are: no name, email, account ID or payment details.
• We do not use your papers, drafts or prompts to train any model.
• There are no advertising, analytics or tracking scripts in Knight.
• We never sell or rent your information.

A workspace cannot work without keeping a few things. We store:

• Your account: email address, the name you give us, and your password, which is stored only as a hash by our authentication provider.
• Your work: the papers you upload, and the explanations, research directions, drafts and chats you create, so they are there when you come back.
• Usage counts: how many runs of each tool you have used, to apply your account's limits.
• Billing records: for an institutional licence, the institution's billing contact and invoice details. We never see or store card numbers or UPI credentials.

Your work is stored in our database with row-level security: each account can read only its own rows. It is used only to provide the service to you.

These are the only services that receive anything:

• Our model deployment (Yotta Shakti Cloud, India): the text of the paper or draft being worked on and the instruction for that step.
• Supabase: our database and sign-in provider. It stores your account and your work.
• Render: hosts the web application that serves the site.
• Scholarly indexes (Semantic Scholar, arXiv, OpenAlex, doi.org, Unpaywall): when a tool finds, fetches or cites papers, it sends search terms and paper identifiers, never your document or your identity.
• Overleaf: only if you press “Open in Overleaf” in Write. Your browser then sends that paper's or patent specification's LaTeX source, figures or drawing sheets and template files to Overleaf; Knight's server never contacts it.
• Legal authorities: only when the law requires it.

Signed-in users can see this list, with exactly what each service is sent and what it is not, on the in-app Privacy page.

We use only the cookie that keeps you signed in, and your browser's local storage for interface preferences. There are no advertising or analytics cookies.

Our servers keep short operational logs (errors, timings and model token counts) to keep the service running. Our hosting provider's standard request logs may include IP addresses. We do not use either to build a profile of you.

Some emails we send to researchers and institutions about Knightcontain a link that records a click, the browser type and a one-way hash of the IP address, so that we know the email was useful. We do not store the raw IP address.

You can delete drafts, saved research directions and chat papers inside the workspace. To see what we hold about you, correct it, delete anything else, or delete your whole account and everything in it, email us using the details below. We may keep payment records where tax or accounting law requires it.

We carry out access, correction and erasure requests within 30 days of receiving them. You may also nominate another individual to exercise these rights on your behalf if you cannot, by telling us the nomination in writing from your account email.

If you are unhappy with how your data is handled, write to ksi@knight-tech.in with the subject “Grievance”, or use the contact details below. A person responsible for grievance redressal responds to every grievance within 30 days. You may also escalate to the Data Protection Board of India once it is seized of the matter under the Digital Personal Data Protection Act, 2023.

Knight is meant for adults. If you are under 18, you may use it only with the permission and involvement of a parent, guardian, or an authorised institution, and we will seek verifiable consent from that parent or guardian before processing a child's data where we know the user is a child. We do not run advertising, behavioural monitoring or targeted advertising aimed at children — we run none at all.

We keep your account and work while your account is open, and delete them when you ask us to delete your account, apart from records the law requires us to keep.

Traffic is encrypted in transit, database access is restricted per account, and code you run in the analysis workspace executes in an isolated sandbox. No system is perfectly secure.

If a breach affects your personal data, we will notify you and the Data Protection Board of India without delay, as the Digital Personal Data Protection Act, 2023 requires, describing what happened, what data was involved, how we are containing it, and what you can do.

If we ever change where your data is processed, for example by adding a model provider, we will update this page before that change goes live. The date at the top shows the last revision.

For questions about these policies, billing, or your account, contact KNIGHT-TECH AI PRIVATE LIMITED:

• Email: ksi@knight-tech.in
• Phone: 8879079930
• Contact page: /contact