Privacy policy clauses for Knock
Knock is a notification infrastructure platform that enables product teams to send targeted push notifications, in-app messages, and multi-channel communications to users. Websites use Knock to deliver timely notifications while managing user preferences and tracking delivery across channels.
Free scan · No signup · Results in 60 seconds
What data Knock collects
Your privacy policy must disclose each of the following data types when you use Knock.
When does Knock trigger privacy obligations?
Installation and data flow
The moment you integrate Knock's SDK into your product, you begin collecting and transmitting user identity data and notification preferences to Knock Labs Inc. (a U.S.-based processor). This triggers three immediate obligations:
GDPR (if your users include EU residents): You become a data controller; Knock becomes a processor. GDPR Article 28 requires a signed Data Processing Agreement (DPA) *before* data flows. Knock's standard DPA is available at https://knock.app/privacy. You must also provide GDPR Article 13/14 transparency notices disclosing that notification content, delivery metadata, and user preferences are stored by Knock.
CCPA (if users include California residents):
