Privacy Policy
Last updated: April 15, 2026
Introduction
Solve For Why Pte. Ltd. ("Knowtepad," "we," "us," or "our") operates Knowtepad, an expert engagement marketplace platform connecting clients with subject matter experts ("Experts").
This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services. Please read this privacy policy carefully. If you do not agree with our policies and practices, please do not use our services.
For any privacy-related questions, contact us at hello@solveforwhy.org.
What Information We Collect
Account & Authentication Data
- Full name
- Email address
- Password (hashed and encrypted, never stored in plain text)
- Account role (Client or Talent/Expert)
- Profile photo
Profile Data
For Experts:
- Professional headline and bio
- Expertise profile: industries, disciplines, geographies, seniority levels
- Hourly rate and currency
- Availability status
- Languages spoken
- LinkedIn profile URL
For Clients:
- Company name
- Company size
- Industry
Engagement Data
- Messages and chat history within Knowtes (engagement threads)
- Files and documents shared during engagements
- Video call metadata (date, duration, participant information — recordings are not stored)
- Engagement terms and proposals
- Payment records and transaction history
Payment Data
- Stripe customer ID
- Card last 4 digits and brand (e.g., Visa, Mastercard)
- Billing address and zip code
Note: Full card numbers, CVV, and other sensitive payment details are handled directly by Stripe and never stored on Knowtepad servers.
Usage & Technical Data
- Page views and feature usage patterns
- IP address and geolocation
- Browser type, version, and device information
- Referrer source
- Clickstream data and session duration
How We Use Your Information
- To provide services: Facilitate engagements, process payments, and enable communication between clients and experts
- To improve our platform: Analyze usage patterns and feature adoption to enhance user experience
- To match experts with opportunities: Use expertise taxonomy and profile data to recommend suitable engagements
- To send transactional emails: Engagement updates, payment confirmations, scheduling reminders, and closure notifications
- To send marketing emails: Product updates, platform news, and opportunities (you can opt out anytime)
- For compliance and legal obligations: Maintain records for tax, legal, and NDA enforcement purposes
- For fraud prevention and security: Detect and prevent unauthorized access or misuse of our platform
- To provide customer support: Respond to your inquiries and resolve issues
Third-Party Data Processors
We use trusted third-party service providers to process your data. These providers are contractually bound to maintain confidentiality and use your data only for the services we contract them to provide.
Supabase
Purpose: Database, authentication, and file storage
Region: US East (Virginia)
Stripe
Purpose: Payment processing and subscription management
Compliance: PCI DSS Level 1 certified
Resend
Purpose: Transactional email delivery
Daily.co
Purpose: HD video calling infrastructure
Note: Video calls are not recorded or stored on our platform
Vercel
Purpose: Application hosting and CDN distribution
Legal Basis for Processing
Under the General Data Protection Regulation (GDPR) and similar privacy laws, we process your personal data based on the following legal grounds:
- Contract performance: Processing necessary to perform our agreement with you (e.g., account creation, engagement facilitation, payment processing)
- Legitimate interest: Processing necessary for our business interests, such as fraud prevention, platform improvements, and customer support
- Legal compliance: Processing required by applicable law (e.g., tax records, law enforcement requests)
- Consent: Where explicitly provided by you (e.g., marketing emails, optional profile enhancements)
Your Rights
Individuals in the EU and similar jurisdictions have the following rights:
- Right to access: Request a copy of your personal data
- Right to rectify: Correct inaccurate or incomplete data
- Right to erase: Request deletion of your data (subject to legal retention obligations)
- Right to restrict processing: Limit how we process your data in certain circumstances
- Right to data portability: Receive your data in a portable format and transfer it to another service
- Right to object: Object to processing for marketing, profiling, or legitimate interest purposes
- Right to withdraw consent: Withdraw consent for processing at any time
To exercise any of these rights, contact us at hello@solveforwhy.org with details of your request. We will respond within 30 days.
Your California Privacy Rights
If you are a California resident, the California Consumer Privacy Act (CCPA) provides you with additional rights regarding your personal information.
Your Rights Under the CCPA
- Right to know: You have the right to know what personal information we collect, use, disclose, and sell about you
- Right to delete: You have the right to request the deletion of your personal information, subject to certain legal exceptions
- Right to opt-out of sale: You have the right to opt out of the sale of your personal information. Knowtepad does not sell your personal information to third parties
- Right to non-discrimination: You have the right not to be discriminated against for exercising any of your CCPA rights. We will not deny you services, charge you different prices, or provide a different quality of service because you exercise your CCPA rights
Categories of Personal Information Collected
In the preceding 12 months, we have collected the following categories of personal information:
- Identifiers: Name, email address, IP address, account ID
- Commercial information: Transaction history, payment records, engagement details
- Internet or electronic network activity: Browsing history, search history, interaction data with our platform
- Professional or employment-related information: Professional headline, expertise areas, industry experience, hourly rate
No Sale of Personal Information
Knowtepad has not sold personal information of any consumer in the preceding 12 months.
How to Submit a Request
To exercise your CCPA rights, please email us at hello@solveforwhy.org with the subject line "CCPA Request" and a description of the right you wish to exercise.
We will verify your identity before processing your request by matching the information you provide with the information we have on file. We may ask you for additional information to complete the verification process. We will respond to your request within 45 days, or notify you if we require an extension.
Singapore Personal Data Protection Act (PDPA)
Knowtepad is operated by Solve For Why Pte. Ltd., a Singapore-registered company. We comply with the Personal Data Protection Act 2012 (PDPA) in the collection, use, and disclosure of personal data.
Purpose of Collection
The purposes for which we collect, use, and disclose your personal data align with those stated in this Privacy Policy, including providing our services, processing payments, facilitating engagements, and improving your experience on our platform.
Consent
Your consent for the collection, use, and disclosure of your personal data is obtained at the time of account creation. You may withdraw your consent at any time by contacting us at hello@solveforwhy.org. Please note that withdrawing consent may affect our ability to provide you with our services.
Access and Correction
You have the right to request access to your personal data held by us and to request corrections to any inaccurate or incomplete data. You may update most of your personal data directly through your Knowtepad account settings, or contact us for assistance.
Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable laws and regulations under the PDPA. When personal data is no longer needed, we will securely dispose of or anonymize it.
Data Protection Officer
If you have questions about how we handle your personal data under the PDPA, or wish to exercise your rights, please contact our Data Protection Officer:
Email: hello@solveforwhy.org
Complaints
If you have a complaint regarding our handling of your personal data, please contact our Data Protection Officer at hello@solveforwhy.org first. We will investigate and respond to your complaint in a timely manner. If the matter remains unresolved, you may escalate your complaint to the Personal Data Protection Commission (PDPC) at www.pdpc.gov.sg.
Data Retention
Account & Profile Data
Retained while your account is active. Deleted within 30 days of account closure or upon your request, subject to legal obligations (e.g., tax, fraud prevention).
Engagement Data
Archived for 2 years post-engagement closure per the Trilateral NDA framework, then permanently deleted unless required for legal proceedings.
Payment Records
Retained for 7 years to comply with financial reporting and tax obligations, then securely deleted.
Usage Data
Aggregated analytics retained indefinitely; individual session logs deleted after 90 days.
International Data Transfers
Your data is primarily stored in the United States (US East region via Supabase and Vercel CDN). If you are located in the EU or other jurisdictions with data protection laws, this constitutes an international transfer outside your home country.
To ensure adequate safeguards, we rely on:
- Standard Contractual Clauses (SCCs): EU-approved contractual terms with our data processors
- Service provider commitments: Data processor agreements requiring GDPR compliance and data protection standards
By using Knowtepad, you consent to this transfer. If you do not consent, please do not use our services.
Data Security
We implement industry-standard technical and organizational measures to protect your data:
- HTTPS encryption for all data in transit
- AES-256 encryption for sensitive data at rest
- Password hashing using bcrypt
- Role-based access control (RBAC) for internal data access
- Regular security audits and vulnerability assessments
- Compliance with SOC 2 standards via Supabase and Vercel
However, no system is 100% secure. While we strive to protect your data, we cannot guarantee absolute security. You use our services at your own risk.
Data Breach Notification
In the event of a data breach affecting personal data, Knowtepad will notify affected users within 72 hours of becoming aware of the breach, in accordance with GDPR requirements, and will notify the relevant authorities as required by applicable law.
For users in Singapore, we will notify the Personal Data Protection Commission (PDPC) as required under the Personal Data Protection Act (PDPA) where the data breach is of significant scale or involves significant harm to affected individuals.
We Do Not Sell Your Data
Knowtepad will never sell, rent, or lease your personal data to third parties. Your data is used exclusively to provide our services and improve your experience. We do not share your data with marketing partners, data brokers, or any other commercial entities without your explicit consent.
Cookies & Tracking
We use cookies and similar tracking technologies to:
- Maintain your session and authentication state
- Remember your preferences
- Analyze website usage and performance
- Prevent fraud and ensure platform security
For detailed information about cookies used on our site, please visit our Cookie Policy.
You can control cookies through your browser settings. Disabling cookies may impact your ability to use certain features of Knowtepad.
Children's Privacy
Knowtepad is not intended for users under 18 years of age. We do not knowingly collect personal data from children. If we become aware that a child has provided us with personal data, we will delete such information promptly and terminate the child's account. If you believe we have collected data from a child, please contact us at hello@solveforwhy.org.
Third-Party Links
Our platform may contain links to third-party websites (e.g., LinkedIn). We are not responsible for the privacy practices of these external sites. Please review their privacy policies before sharing your information.
When you click a third-party link, you leave Knowtepad and enter a third party's digital property. We encourage you to read their privacy policies.
How to Contact Us
If you have questions about this Privacy Policy, wish to exercise your rights, or need to report a privacy concern, please contact us:
Solve For Why Pte. Ltd.
160 Robinson Road, #14-04, Singapore Business Federation Center, Singapore 068914
Email: hello@solveforwhy.org
We typically respond to data subject requests within 30 days. We may request additional information to verify your identity before processing your request.
Changes to This Privacy Policy
Knowtepad may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. We will notify you of material changes by updating the "Last Updated" date at the top of this page and, where required, by sending you an email notification.
Your continued use of Knowtepad after changes become effective constitutes your acceptance of the updated Privacy Policy. We encourage you to review this policy regularly to stay informed about how we protect your information.
By using Knowtepad, you acknowledge that you have read and understood this Privacy Policy and agree to its terms.