Privacy Policy

The short version

We collect the minimum we need to run the service. We never sell your data. We never run ads. We never use your data to train AI models.

This marketing site sets no tracking cookies and loads no analytics scripts.

What we collect

Your account: your name, your email address, and your password, which is stored only as a bcrypt hash. We also store your company name. Login sessions record the IP address and the browser user agent used to sign in.

Your Shopify store: we read your storefront's public catalog only (products, variants, images, prices) through its public JSON. The connection is zero-credential. No API key, no OAuth token, no write access. We don't see your orders, your customers, or any buyer data. We copy your product images into our storage so we can fingerprint them.

Billing: payments run through Stripe Checkout. Card details don't touch our servers. We store only the Stripe customer and subscription identifiers.

How we use it

To run the detection pipeline: fingerprint your product images, search marketplaces and the open web for matches, assemble evidence, and prepare enforcement packages that you approve.

To bill you, to email you about your account and your case activity, and to support you when you ask.

When we share data

We use a small number of US-based service providers to run Knockoff: hosting, file storage, billing, email delivery, error tracking, and customer support. Each one receives only what it needs to do its job, under terms that bar it from using your data for anything else. We never sell your data, and it is never used to train AI models.

One disclosure that matters. When you approve an enforcement filing, the notice package includes your name and your email address as the rights holder, and it goes to the platform or the host when the notice is submitted. That is inherent to how intellectual-property notices work.

Data about third parties

The service collects public data about suspect sellers and storefronts (listings, storefront pages, operator details) to build evidence. We maintain a documented data-protection impact assessment for this work.

If you operate a storefront and you believe your data is held in our systems, email [email protected]. We handle erasure requests within 30 days.

Retention

We keep your data while your account is active. Disconnecting your Shopify store immediately deletes the mirrored catalog and the stored product images.

To delete your account entirely, email [email protected]. We delete your data within 30 days. Records we are required to keep, such as billing records and enforcement audit entries, are retained as required.

Your rights

You can ask for access, an export, a correction, or deletion. Email [email protected] and we will handle it.

If you are in the EU, the UK, or California, the statutory rights that apply to you apply here, and the same address is the channel for them.

Changes

We will update this page and revise the date at the top when this policy changes. If a change is material, we will announce it by email.

Contact

Knockoff is a product of Knockoff Data, LLC. Questions about this policy go to [email protected].