Effective 5 August 2026
Privacy Notice
This notice explains how Mastermind Security Solutions Limited, trading as Knovelyra, handles personal information when businesses use our website, dashboard and AI guidance services.
Who we are
Mastermind Security Solutions Limited is a company registered in England and Wales (company number 13344765) at 10 Indus Road, Shaftesbury, England, SP7 8FU. Contact us at support@knovelyra.com.
Information we handle
We may handle account and business details, billing identifiers, uploaded knowledge and configuration, voice conversation transcripts and technical data such as device, browser, IP address, timestamps and service logs. We do not ask customers or visitors to provide passwords, full payment-card details or other unnecessary secrets in AI conversations.
Why we use it
We use information to create and secure accounts, provide AI guidance, process subscriptions, prevent misuse, support customers, measure service reliability and meet legal obligations. Our usual legal bases are performance of a contract, legitimate interests in operating and protecting the service, and compliance with law. Where consent is required, it must be obtained before processing begins.
Business customers and end users
A business that installs a Knovelyra guide normally decides what end-user information is collected and why. That business is responsible for providing its own notice and lawful basis. Knovelyra processes that information on the business’s instructions, subject to the service agreement and applicable data-protection law.
Service providers
We use specialist providers including Supabase for authentication and data storage, Vercel for application hosting, Runway for interactive avatar sessions and Stripe for subscription payments. They receive only the information needed to provide their service. Stripe, not Knovelyra, collects and stores complete payment-card details.
International transfers and security
Some providers may process information outside the United Kingdom. Where required, we rely on recognised transfer safeguards and provider contractual commitments. We use access controls, tenant separation, encrypted connections, secret management and usage limits, but no internet service can guarantee absolute security.
Retention
We keep information only for as long as needed for the service, security, dispute handling and legal or accounting obligations. Retention depends on the type of record and the customer’s configuration. Customers can request deletion of their workspace, subject to records we must retain by law.
Your rights
Depending on the circumstances, you may have rights to access, correct, erase, restrict or object to processing, and to receive portable data. Contact us first so we can help. You may also complain to the UK Information Commissioner’s Office.
Cookies and changes
We use essential technologies needed for sign-in, security and service operation. We will obtain consent before adding non-essential analytics or advertising cookies. We may update this notice and will publish the effective date above.