Privacy Policy

Last updated: 21 October 2026

This policy explains what personal information KnowThinkLead (operated by Kelvin Thomas Lamb, sole proprietor trading as KTL Consulting, South Africa) collects, why, and the choices you have. KnowThinkLead provides the Epistemic Alignment Audit, the practice profile, live facilitated sessions, the alignment dashboard and the new-hire alignment tool for school leaders (together, "the Service"). We aim to collect the minimum needed to run the Service well.

1. What we collect

• Account information: your email address and, if you give it, your name, when you create a dashboard or facilitator account.
• Session and audit content: the session details you set up (for example the organisation name and declared vision) and the responses participants submit, stored so the Service can work for you. A solo audit stays in your browser unless you choose to share it.
• Participant information: participants may answer under a chosen name or handle. Where a facilitator asks for it (for example in the new-hire tool), a participant's name and email address are stored with their response and are visible only to the session owner.
• Billing information: if you buy a paid plan, payment is handled by our payment provider Paddle.com, the Merchant of Record for all orders. We never see or store your card details. We receive from Paddle the subscription status needed to operate your account.
• Technical information: standard server logs and error reports (for example browser type and pages that failed to load) used to keep the Service reliable and secure.
• Marketing preferences: if you explicitly opt in, your email address is used to send occasional leadership resources and product updates. You can unsubscribe at any time from any email.

2. What we do not do

• We do not sell personal information.
• We do not use your session or audit content for advertising, or share it with third parties beyond the processors listed below.
• We do not run third-party advertising trackers on the Service.

3. Service providers

We use a small number of processors to run the Service, each receiving only what their role requires:

• Supabase (database, authentication, and application hosting) stores account data, sessions and responses.
• Cloudflare (hosting, DNS, and content delivery) serves the website.
• Paddle (payments and tax, as Merchant of Record) processes any purchases and holds billing records.
• MailerLite (email) sends marketing emails to subscribers who opted in, and transactional email related to your account.

That is the whole list. There is no AI provider on it. The Service does not send your account data, your sessions, or anyone's responses to any AI service. Suggestions in the audit (for example, suggested concepts from your vision statement) are produced by fixed rules in your browser and on our own server function, not by an AI model.

Your data and your participants' responses are never used to train AI models and are never shared with third parties beyond the processors listed above.

4. Cookies

The Service uses essential cookies and similar storage needed to keep you signed in and secure, and to keep a solo audit in your browser. We do not use advertising cookies. Any checkout, provided by Paddle, sets the cookies it needs to process payment.

5. Retention and deletion

We keep your account data, sessions and responses while your account is active. If you ask us to delete your account, we delete your personal information and your sessions, including the responses collected in them, within 30 days, except for records we must keep for legal, tax, or accounting reasons (which Paddle, as Merchant of Record, retains for transactions). To request deletion, email contact@knowthinklead.com.

6. Your rights

Depending on where you live (including under South Africa's POPIA, the EU/UK GDPR, and similar laws), you may have rights to access, correct, export, restrict, or delete your personal information, and to object to certain processing. Participants can ask the facilitator who ran their session, or email us directly. We will act on your request; you also have the right to complain to your local data protection authority.

7. Children

The Service is for school leaders and staff. It is not directed at children, and accounts may only be created by adults. Facilitators should not invite students to take part or enter personal information about identifiable students.

8. International transfers

Our processors store data on secure cloud infrastructure that may be located outside your country. Where required, transfers rely on appropriate safeguards such as standard contractual clauses maintained by the processors listed above.

9. Changes to this policy

If we make material changes, we will notify account holders by email or in the product before the change takes effect.

10. Contact

Privacy questions and requests: contact@knowthinklead.com.