Privacy Policy

K2N2 Technologies, Inc. (“K2N2,” “we,” “us,” or “our”) collects information to provide and improve the K2N2 AI tools platform. We collect the following categories of information:

We use the information we collect for the following purposes:

• Provide the Service: Power AI-driven career coaching, generate personalized recommendations, and deliver analysis across all 8 tools.
• Personalize your experience: Tailor content, suggestions, and AI coaching to your career stage, goals, and history.
• Improve the platform: Analyze aggregate usage patterns to identify bugs, improve features, and develop new tools.
• Communicate with you: Send transactional emails (account confirmations, billing receipts), product updates, and optional marketing emails (which you can unsubscribe from at any time).
• Ensure security: Detect and prevent fraud, abuse, and unauthorized access.
• Comply with legal obligations: Respond to legal requests and enforce our Terms of Service.

We do not sell your personal information to third parties. We do not use your individual career data for advertising or marketing purposes.

• Your AI conversations are processed by our AI providers (see Section 5) to generate responses in real time.
• We store your conversation history so you can review past sessions, track progress, and receive contextual coaching.
• We do not use your individual AI conversations to train or fine-tune AI models without your explicit opt-in consent.
• We may analyze aggregated, de-identified usage patterns (such as which tool features are most used) to improve our prompts and user experience. This data cannot be traced back to you.
• You may delete your AI conversation history at any time through your account settings.

We implement industry-standard security measures to protect your data:

• Database: Your data is stored in Supabase (built on PostgreSQL) with row-level security policies ensuring users can only access their own data.
• Encryption in transit: All data transmitted between your browser and our servers is encrypted using TLS 1.2 or higher.
• Encryption at rest: Data stored in our database is encrypted at rest using AES-256 encryption.
• Authentication: Authentication is managed by Clerk, a SOC 2 Type II certified provider that handles all password storage and security.
• Infrastructure: Our application is hosted on Vercel with automatic scaling and DDoS protection.
• Access controls: Internal access to user data is restricted to essential personnel only, and all access is logged.

While we take extensive measures to protect your data, no system is completely secure. If we become aware of a security breach that affects your personal information, we will notify you and relevant authorities in accordance with applicable law.

We use the following trusted third-party services to operate the K2N2 platform. Each provider only receives the minimum data necessary to perform their function:

We evaluate all third-party providers for their security practices and data protection standards. We do not share your data with any providers beyond those listed above without your consent, except as required by law.

K2N2 uses minimal, functional cookies necessary to operate the platform:

• Authentication cookies: Maintain your login session so you do not need to sign in on every visit.
• Preference cookies: Store your settings such as theme preference and sidebar state.
• Security cookies: Help prevent cross-site request forgery (CSRF) and other security threats.

We do not use:

• Third-party advertising cookies.
• Cross-site tracking pixels or beacons.
• Social media tracking scripts.

We may use privacy-respecting analytics (without cookies) to understand aggregate traffic patterns. This data is anonymized and cannot identify individual users.

Regardless of where you live, we provide all K2N2 users with the following data rights:

• Right to access: Request a copy of the personal data we hold about you.
• Right to correction: Request correction of inaccurate or incomplete personal data.
• Right to deletion: Request deletion of your personal data and account. We will comply within 30 days, except where data must be retained for legal obligations.
• Right to data portability: Request an export of your data in a structured, machine-readable format (JSON or CSV).
• Right to restrict processing: Request that we limit how we process your data in certain circumstances.
• Right to object: Object to data processing based on legitimate interests, including direct marketing.
• Right to withdraw consent: Withdraw previously given consent at any time, without affecting the lawfulness of processing performed before withdrawal.

To exercise any of these rights, contact us at support@k2n2studio.com. We will respond to all requests within 30 days.

If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) provide you with additional rights regarding your personal information:

• Right to know: You may request a detailed disclosure of the categories and specific pieces of personal information we have collected about you in the past 12 months.
• Right to delete: You may request deletion of your personal information, subject to certain legal exceptions.
• Right to opt out of sale: We do not sell your personal information. There is nothing to opt out of.
• Right to non-discrimination: We will not discriminate against you for exercising any of your CCPA rights.
• Right to correct: You may request correction of inaccurate personal information.
• Right to limit use of sensitive data: You may limit our use of your sensitive personal information to providing the Service only.

To submit a CCPA request, email us at support@k2n2studio.com with the subject line “CCPA Request.” We will verify your identity and respond within 45 days.

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, the General Data Protection Regulation (GDPR) provides you with specific data protection rights.

We retain your personal data only for as long as necessary to fulfill the purposes described in this policy:

When you delete your account, we remove your personal data within 30 days. Some data may be retained longer if required by law (such as billing records) or if necessary to resolve disputes. Aggregated, anonymized data that cannot identify you may be retained indefinitely for analytics purposes.

If you are between 13 and 18 years of age, you must have parental or guardian consent to use the Service.

If we learn that we have collected personal information from a child under 13 without verified parental consent, we will take steps to delete that information as quickly as possible. If you believe a child under 13 has provided us with personal information, please contact us immediately at support@k2n2studio.com.

K2N2 is operated from the United States. If you access the Service from outside the United States, your data may be transferred to, stored in, and processed in the United States or other countries where our service providers operate.

For EEA/UK users, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission and/or other appropriate safeguards to ensure your data receives an adequate level of protection when transferred outside the EEA.

We may update this Privacy Policy from time to time. When we make material changes:

• We will notify you via email and/or a prominent in-app notice at least 30 days before the changes take effect.
• The “Last updated” date at the top of this page will be revised.
• We will highlight what has changed in the notification.

We encourage you to review this policy periodically. Your continued use of the Service after any changes constitutes acceptance of the updated Privacy Policy.

If you have questions, concerns, or requests about this Privacy Policy or our data practices, please contact us: