← All legal documents

Privacy Policy

Last Updated: August 27, 2026

Know Reply Inc. (“Know Reply”, “we”, “us”, or “our”) operates Earnesty — the marketing site at earnesty.app, the application at go.earnesty.app, and the public status pages at earnesty.page. This Privacy Policy explains how we collect, use, disclose, and safeguard information when you visit our sites or hold an Earnesty account. It applies to visitors to our websites and to the people at our customers’ companies who sign in to Earnesty. If you are an end user of a product that runs an earned tier on Earnesty, this is not the policy that describes your data — see Section 3 below, and read the USER Privacy Notice.

Throughout this policy, an APP is a software product that runs an earned tier using Earnesty — our paying customer. A USER is an end user of that product who earns a Reward by posting publicly about it — whatever the APP grants inside its own product, most often Credits, but equally model tokens, extra seats, entry to a Drop, or a bonus month.

1. Information We Collect

Account Information. When you create an Earnesty account we collect your name, email address, and a record of whether that email has been verified. If you sign in with a password, we store a salted hash of it — never the password itself. If you sign in through an identity provider, we store the provider’s name, your account identifier with that provider, and the access and refresh tokens needed to keep you signed in. You may also supply a profile image.

Organization Information. Earnesty accounts belong to organizations. We collect your organization’s name, its URL slug, an optional logo, the membership list and each member’s role, and pending invitations (the invited email address, the intended role, who sent the invitation, and when it expires). We also store the configuration your organization creates — your APP’s name, its earned-tier settings such as claim value and cooldown, and any Drops you run.

Billing Information. Paid plans are billed by card through our payment processor, Stripe. We never see or store full card numbers. What we store is a Stripe customer identifier, a subscription identifier, a payment-method identifier (a token, not card data), your plan and billing period, your subscription status, your Service Credit balances — the prepaid units your organization spends on our optional metered add-ons, such as insight runs — and your invoice history. Stripe holds the card itself. See Stripe’s Privacy Policy.

Usage and Log Data. We automatically collect information when you use Earnesty, including your IP address, browser type and user agent, operating system, referring URLs, pages viewed, and interactions with our features. Signed-in sessions record the IP address and user agent associated with the session. We keep audit-log entries of significant actions taken in your organization — who changed a setting, who invited whom, who ran a Drop.

Verification Data. To operate the earned tier, Earnesty holds data about the USERs enrolled in your APP and the public posts they make. Section 3 explains our position on that data and points you to the notice that governs it.

Communications. If you email us or use a contact form, we keep the message and our reply.

2. Cookies and Tracking Technologies

We use cookies and similar technologies to maintain your session, remember your preferences, and understand how our sites are used. Essential cookies — session, authentication, and CSRF-protection cookies — are necessary for Earnesty to work and cannot be disabled. Non-essential cookies are placed only with your consent where applicable law requires it. For full details, see our Cookie Policy.

3. Information About End Users of Our Customers’ Products

This section is a summary. The full picture is in the USER Privacy Notice, which is the operative notice for end users.

When a USER participates in an APP’s earned tier, Earnesty holds an opaque identifier for that USER supplied by the APP, the USER’s public platform handle and author ID on a Supported Platform, and a record of each verified public post — its platform post ID, public URL, timestamp, the value granted, the terms snapshot in force, the number of distinct accounts that replied to it, and its public repost count — both read once, at settlement. We keep that number, never a list of who replied. We only ever look at public posts. We never read private messages, and we never read, score, or reward the sentiment of a post.

Our role here is split, and we state it plainly rather than papering over it. For the APP-supplied identifier and for relaying reward instructions, we act as a processor on the APP’s instructions. For querying Supported Platforms’ public APIs, for retaining verification and disclosure-compliance evidence, and for operating fraud and abuse detection, we act as an independent controller on our own legitimate-interest basis. That is why USERs get their own notice and their own route to exercise their rights with us directly, rather than only through the APP.

4. Third-Party Services

We use the following third parties to deliver Earnesty. Each receives only the information it needs for its function.

• Google Cloud Platform — cloud infrastructure: hosting, storage, databases, and compute for the entire Service.
• Stripe — payment processing and subscription management. Stripe handles card data directly; we never store full card numbers.
• Supported Platform APIs — we query the public search and post APIs of the platforms we support (X today; YouTube and Bluesky are anticipated) to discover and verify public posts. Our use of these APIs is governed by each platform’s developer agreement, and we honor the deletion obligations they impose — see Section 6.
• Resend — to send account, verification, and billing notification emails.
• Google (Vertex AI) — insight runs are not built yet. When they are, an APP that requests one will have the post content and metadata from its own corpus sent to Google’s Gemini models on Vertex AI to produce the analysis, and Google will not use that content to train or fine-tune any model. Insight runs never affect Verification, eligibility, or what a post earns. That content is not used to train those providers’ models.
• Web analytics — ours, not a third party’s. We use Umami, self-hosted on our own infrastructure, to see how our public sites are used. It sets no cookies and stores no identifier on your device, so no analytics data is shared with anyone outside Know Reply Inc. and no consent banner is needed. See our Cookie Policy.

We do not permit these providers to use your information for their own purposes beyond providing their service to us.

5. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain Earnesty, including discovering and verifying public posts and relaying reward instructions to APPs;
• Authenticate you, keep you signed in, and manage your organization’s membership and roles;
• Process your transactions, run your subscription, and send receipts;
• Send administrative communications such as billing confirmations, security notices, and service updates;
• Produce the reporting and insight analyses we make available to APPs;
• Maintain verification and disclosure-compliance records, so that a rewarded post can be shown to have carried its required disclosure;
• Detect, prevent, and address fraud, abuse, and technical problems;
• Improve Earnesty and develop new features; and
• Comply with our legal obligations and enforce our agreements.

We do not use your information to make decisions about you that produce legal or similarly significant effects without human involvement.

6. Data Retention

Account and organization data is retained for as long as your account remains active, and for a reasonable period afterward to complete wind-down, resolve disputes, and meet our legal and tax obligations.

Billing records are retained as long as required by tax and accounting law.

Post content and public engagement metrics are refreshed against the Supported Platform. When a source post is deleted on the platform or made non-public, we remove the post content and engagement metrics we derived from it. What we retain is the minimal settlement record — the platform post ID, the post timestamp, the value granted, and the terms snapshot — which we need to evidence a completed transaction and to satisfy disclosure-compliance recordkeeping.

Server-side usage logs are retained in aggregated form for up to 24 months. Self-hosted analytics data is retained for 6 months. It lives in our own database, so the period is ours to set rather than a vendor’s default, and we have set it short: six months answers what we actually ask of it — whether a page is read, whether a change helped — without keeping a record of visits long after anyone would act on it.

Session records expire on their own schedule and are cleared when you sign out.

You may request earlier deletion at any time; see Section 7.

7. Your Rights

Depending on where you live, you may have some or all of the following rights over your personal information:

• Access: Request a copy of the personal data we hold about you.
• Deletion: Request that we delete your personal data, subject to legal exceptions and to the minimal settlement records described in Section 6.
• Portability: Request your data in a structured, commonly used, machine-readable format.
• Correction: Request correction of inaccurate personal data.
• Objection: Object to processing of your personal data for certain purposes, including processing based on our legitimate interests.
• Restriction: Request that we restrict processing of your personal data.

To exercise any of these rights, email privacy@earnesty.app. We will respond within 30 days. We may need to verify your identity before we act. If your request concerns data we process on an APP’s behalf as a processor, we will refer you to that APP or act on its instructions, and we will tell you which.

8. GDPR

If you are in the European Economic Area, the United Kingdom, or Switzerland, we process personal data on the following legal bases:

• Performance of a contract — to provide Earnesty to you and to administer your account and subscription;
• Legitimate interests — to secure the Service, detect and prevent fraud and abuse, retain verification and disclosure-compliance evidence, and improve the product;
• Consent — for marketing communications; and
• Legal obligation — to meet our tax, accounting, and regulatory duties.

You may withdraw consent at any time without affecting the lawfulness of processing carried out before you withdrew it. You also have the right to lodge a complaint with your local supervisory authority.

Where we process personal data on an APP’s behalf as a processor, the terms of that processing are set out in our Data Processing Addendum.

9. CCPA / CPRA (California)

If you are a California resident, you have the right to know what personal information we collect and how we use and disclose it, to request access to and deletion of your personal information, to correct inaccurate personal information, to limit the use of sensitive personal information, to opt out of the sale or sharing of personal information, and not to be discriminated against for exercising any of these rights.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We have not done so in the preceding twelve months. We do not sell or share the personal information of anyone we know to be under 16.

The categories of personal information we collect are described in Section 1, the purposes in Section 5, and the third parties who receive it in Section 4. We disclose personal information to those parties only as service providers, under contracts that prohibit them from using it for their own purposes.

To submit a request, email privacy@earnesty.app. You may use an authorized agent; we will ask for proof of their authority. We will respond within the time the law allows and in any event within 30 days.

10. International Data Transfers

Know Reply Inc. is based in the United States, and your information may be transferred to and processed in the United States or other countries where our service providers operate. Where personal data is transferred out of the European Economic Area, the United Kingdom, or Switzerland, we rely on appropriate safeguards, including the Standard Contractual Clauses approved by the European Commission and the UK International Data Transfer Addendum.

11. Data Security

We implement and maintain technical and organizational measures appropriate to the risk, including:

• Encryption in transit — TLS 1.2 or higher for all data moving between your browser and our servers;
• Encryption at rest — AES-256 for stored data;
• Access controls — role-based access control, multi-factor authentication for administrative access, and the principle of least privilege;
• Infrastructure security — network segmentation, firewalls, and regular vulnerability scanning; and
• Compliance program — we are pursuing SOC 2 Type II certification and implement controls aligned with the AICPA Trust Services Criteria for security, availability, and confidentiality.

No method of transmission or storage is completely secure. If we become aware of a personal data breach affecting your information, we will notify you without undue delay and as required by law.

12. Children’s Privacy

Earnesty is not intended for children, and we do not knowingly collect personal information from anyone under 18. If we learn that we have collected personal data from someone under 18, we will delete it promptly. If you believe a child has provided us with personal information, contact us at privacy@earnesty.app.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will post the updated policy on our website and update the “Last Updated” date above. If the changes are material, we will give you notice by email or in the application before they take effect. Your continued use of Earnesty after the changes take effect constitutes acceptance of the revised policy.

Contact Us

For any question about this Privacy Policy, our data practices, or to exercise your rights, contact us at privacy@earnesty.app.

Know Reply Inc., a Delaware corporation. Know Reply Inc., 8 The Green, Suite B, Dover, Delaware 19901, USA.