Privacy Policy

Last updated October 1, 2026

Introduction

This Privacy Policy explains how Bit Flip LLC ("Known Agents," "we," or "us") collects, uses, shares, and protects personal data when you use our website and services.

Known Agents acts as a data controller for personal data we collect about website visitors, account administrators, and billing or support contacts. When we process customer data, such as analytics or event data, on behalf of business customers, we act as a data processor under our Data Processing Addendum.

Data Collection and Use

We collect personal data only when necessary to provide and improve our services. This may include:

• Identifiers (e.g. name, email address)
• Usage data (e.g. IP address, browser type, activity logs)
• Billing and subscription information (e.g. billing contact, subscription status, payment identifiers)
• Interactions with support or feedback forms

This data enables us to operate the services, personalize features, maintain security, and analyze trends.

We may use aggregated or deidentified data that cannot reasonably identify an individual or customer to analyze service performance and improve detection capabilities.

Legal Basis for Processing

We process your personal data based on one or more of the following legal bases:

• Your consent (where required, such as for non-essential cookies)
• Performance of a contract (e.g. providing services you subscribe to)
• Our legitimate interests (e.g. service optimization, fraud prevention)
• Compliance with legal obligations

Cookies and Tracking Technologies

We use cookies and similar technologies to analyze usage and enhance user experience. These tools may set cookies in your browser and collect behavioral and technical data. Certain cookies (such as those used for analytics or marketing) will only be activated after obtaining your consent where required by applicable law (e.g. in the EEA). You may manage or withdraw cookie preferences using your browser settings.

Data Sharing and Disclosure

We do not sell or share your personal information as those terms are defined in the California Consumer Privacy Act (CCPA). Accordingly, we do not offer an opt-out mechanism for "sale" or "sharing" because no such sale or sharing occurs.

We may share personal data only in the following circumstances:

• With trusted third-party service providers (e.g. hosting, analytics, payment processing, support), under strict confidentiality and data protection agreements
• To the extent required by applicable law or binding legal process
• In connection with a business transfer (e.g. merger, acquisition)

Service Providers and Subprocessors

Google Cloud provides cloud infrastructure and hosting. Stripe processes payments and manages subscription billing. Stripe does not receive Agent Identification API payloads. Service providers are subject to applicable contractual confidentiality and data protection obligations. The current list of subprocessors that process customer data is available in our DPA.

International Data Transfers

Your personal data may be transferred to and processed in countries outside your own. In such cases, we ensure appropriate safeguards, such as Standard Contractual Clauses (SCCs) or other lawful transfer mechanisms approved by regulators.

Data Retention

We retain personal data only as long as necessary to fulfill the purposes for which it was collected, including:

• Account information: Retained while your account is active and for up to 30 days after account closure
• Usage and analytics data: Retained for up to 26 months
• Support and communication records: Retained for up to 3 years
• Legal and compliance records: Retained as required by applicable law (typically 7 years)

Aggregated or deidentified data that cannot reasonably identify an individual or customer may be retained indefinitely. Where provided by applicable law, you may request deletion of your personal data, subject to applicable exceptions.

Your Rights

Depending on your jurisdiction (e.g. EU, UK, California), you may have the following rights:

• Right of Access: Request access to your personal data and information about how we process it
• Right to Rectification: Correct or update inaccuracies in your personal data
• Right to Erasure: Request deletion of your personal data ("right to be forgotten"), subject to legal exceptions
• Right to Restrict Processing: Request that we limit how we use your personal data
• Right to Object: Object to processing based on legitimate interests or for direct marketing purposes
• Right to Withdraw Consent: Withdraw your consent at any time (where processing is based on consent)
• Right to Data Portability: Where applicable, receive personal data you provided to us in a structured, commonly used, and machine-readable format
• Right to Lodge a Complaint: File a complaint with your local data protection authority

How to Exercise Your Rights

To exercise any of these rights, please submit a request via email to contact@knownagents.com. Include "Data Rights Request" in the subject line and provide sufficient information to verify your identity.

We will respond within the period required by applicable law. Rights may be limited where we cannot verify your identity, an exception applies, or a request is manifestly unfounded or excessive.

California Privacy Rights (CCPA)

We provide this notice at or before the time we collect your personal information as required by the California Consumer Privacy Act (CCPA).

If the CCPA applies to Known Agents and you are a California resident, you have specific rights under the CCPA:

• You may request information about the categories and specific pieces of personal information we have collected about you, the sources from which it was collected, the purposes for collection, and the categories of third parties with whom we share it.
• You may request deletion of personal information that we have collected from you, subject to certain legal exceptions.
• You may request correction of inaccurate personal information that we maintain about you.
• You have the right to opt-out of the sale or sharing of your personal information. As stated above, we do not sell or share personal information as defined by the CCPA.
• You have the right not to receive discriminatory treatment for exercising any of your CCPA rights.

To exercise any of these rights, California residents may submit a request via email to contact@knownagents.com. Please provide sufficient information to allow us to verify your identity. We will respond to your request within 45 days, or notify you if we require additional time (up to 90 days total).

Data Security

We use industry-standard measures to protect personal data, including TLS for encryption in transit and AES-256 encryption at rest. Access is controlled through role-based permissions and security monitoring. No system is 100% secure, but we implement best practices to reduce risk.

Business Transfers

If Known Agents is involved in a merger, acquisition, or asset sale, personal data may be transferred. We will provide notice where required by applicable law and honor the protections outlined in this Privacy Policy.

Data Processing Addendum (DPA)

If we process personal data on behalf of a business customer, our DPA governs that processing.

Children's Privacy

Our services are not directed to or intended for use by individuals under the age of 13 in the United States, or under the age of digital consent as defined by applicable data protection laws in other jurisdictions (typically 13 to 16 years old). We do not knowingly collect personal data from children. If you believe we have collected such data, contact contact@knownagents.com to request removal.

Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in law or our practices. The date at the top reflects the latest update. We will provide additional notice where required by applicable law.

Contact

If you have questions, concerns, or data-related requests, contact contact@knownagents.com.