Privacy Policy

The short version

We collect the minimum we need to run the service. We never sell your data. We never run ads. We never use your data to train AI models.

We use first-party cookies when needed to keep you signed in, remember necessary account state, and carry a partner referral code until signup. Our marketing site uses third-party services for visitor analytics, for identifying the company a visitor comes from, and for chat. The signed-in app uses third-party services for error reporting and chat. We do not sell your data and we do not load advertising trackers or ad pixels on either site.

What we collect

Your account: your name, your email address, and your password, which is stored only as a bcrypt hash. We also store your company name. Login sessions record the IP address and the browser user agent used to sign in.

Your Shopify store: we read your storefront's public catalog only (products, variants, images, prices) through its public JSON. The connection is zero-credential. No API key, no OAuth token, no write access. We don't see your orders, your customers, or any buyer data. We copy your product images into our storage so we can fingerprint them.

Billing: payments run through Stripe Checkout. Card details don't touch our servers. We store Stripe billing identifiers and payment-event amounts needed for subscription access and partner commission records.

How we use it

To run the detection pipeline: fingerprint your product images, search marketplaces and the open web for matches, assemble evidence, and prepare the enforcement packages we file for you.

To bill you, to email you about your account and your case activity, and to support you when you ask.

When we share data

We use a small number of US-based service providers to run Knockoff: hosting, file storage, billing, email delivery, error tracking, and customer support. Each one receives only what it needs to do its job, under terms that bar it from using your data for anything else. We never sell your data, and it is never used to train AI models.

One disclosure that matters. When we file an enforcement notice for you, the notice package includes your name and your email address as the rights holder, and it goes to the platform or the host when the notice is submitted. That is inherent to how intellectual-property notices work.

Data about third parties

The service collects public data about suspect sellers and storefronts (listings, storefront pages, operator details) to build evidence. We maintain a documented data-protection impact assessment for this work.

If you operate a storefront and you believe your data is held in our systems, email hello@knockoff.co. We handle erasure requests within 30 days.

Retention

We keep your data while your account is active. Disconnecting your Shopify store immediately deletes the mirrored catalog and the stored product images.

To delete your account entirely, email hello@knockoff.co. We delete your data within 30 days. Records we are required to keep, such as billing records and enforcement audit entries, are retained as required.

Your rights

You can ask for access, an export, a correction, or deletion. Email hello@knockoff.co and we will handle it.

If you are in the EU, the UK, or California, the statutory rights that apply to you apply here, and the same address is the channel for them.

Changes

We will update this page and revise the date at the top when this policy changes. If a change is material, we will announce it by email.

Contact

Knockoff is a product of Knockoff Data, LLC. Questions about this policy go to hello@knockoff.co.