What we collect, and what we don't.

• We collect what we need to run your account, build your skill, and take payment — nothing else.
• We never sell your data or share it for advertising.
• Card numbers go straight to Stripe; we never see or store them.
• Files you upload (curriculum guides, brand assets) are deleted about 90 days after your skill is built.
• You can get your data or delete your account anytime by emailing [email protected].

Account details. Your email address, and your name if you provide one. If you sign in with Google, we receive your name, email, and profile basics from Google. Passwords are stored only as a salted hash — we can't read them.

Your wizard answers. When you customize a skill, we store the answers you give — your role context (e.g. grades and standards for teachers, brand voice for a business), your working style, and any preferences. For the Teacher Pack specifically, we collect categories of accommodations you make, never the names or records of individual students.

Files you upload. Reference documents you add in the wizard — district pacing guides, brand style sheets, logos — are stored so we can bake them into your skill.

Purchase records. When you buy, we store the order (the item, amount, status, and a Stripe reference id). We do not receive or store your card number, CVC, or full billing details — those go directly to Stripe.

Contact + lead details. If you request the free demo skill, we store your email. If you use the "book a call" form, we store your name, email, and message.

Basic technical data. Standard server logs (IP address, request time, error traces) that any web app keeps to operate and debug. We don't run third-party ad or analytics trackers.

To create your account and let you sign in; to build, deliver, and let you re-download your skills; to process payments and refunds; to email you about things you did (verification, purchase delivery, replies to your questions); and to operate, debug, and improve the service.

We do not use your uploaded files or wizard answers to train any general AI model, and we don't use them to build products for anyone but you.

We keep the stack small and use established providers. Each sees only what it needs to do its job:

• Railway — hosting and the database where your account and orders live.
• Cloudflare R2 — storage for your uploaded files and built skill packages.
• Stripe — payment processing. Stripe handles your card data under its own privacy terms.
• Resend — sends our transactional email (verification, delivery, replies).
• Google — only if you choose "Continue with Google" to sign in.
• Anthropic — when you use an in-wizard AI helper (the "draft this for me" assist, "pull from my website" import, or the coherence review), the relevant text you entered — or the public page content we fetch from a URL you give us — is sent to Anthropic's API to generate the suggestion. If you fill the wizard in by hand, nothing goes to Anthropic. The skill we deliver runs inside your own Claude account; we don't sit in the middle of that.

We don't sell your data, and we don't share it with anyone for advertising or their own marketing.

Uploaded files are cleared from storage about 90 days after your skill is built. If you rebuild later, you re-upload — that's by design, so your documents don't sit around indefinitely.

Your account, wizard answers, and order history are kept while your account is open, so you can re-download and re-customize. Delete your account and they go with it (we may retain minimal payment records where tax or accounting law requires).

Contact and lead records are kept until they're no longer needed to follow up, or until you ask us to remove them.

Email [email protected] to get a copy of your data, correct it, or delete your account and its contents. We'll act on deletion requests promptly. Depending on where you live (for example, the EU/UK or California), you may have additional rights to access, portability, correction, and deletion — we honor those regardless of where you are.

We don't knowingly collect data from children. KnackPack is a tool for the professional (the teacher, the business owner), not for their students or customers — please don't upload records that identify a minor.

Data is encrypted in transit, passwords are hashed, uploads and downloads use short-lived signed links, and access to your files and skills is scoped to your account. No system is perfectly secure, but we design to limit what any single failure could expose.

If we change how we handle your data, we'll update this page and move the effective date. Material changes that affect you will be called out — we won't quietly broaden what we do with your information.

KnackPack is operated by KnackPack LLC. Questions, requests, or concerns about your data: [email protected].