Privacy Policy

Who is responsible

Mudrick Technologies Inc. is responsible for personal information we control. Our Privacy Officer is Jeff Mudrick. You can reach him at hello@knokk.ca.

When a client uses a broker's Knokk page, the broker is responsible for their relationship with that client. We process the client's information on the broker's behalf so the page works. We do not use it for our own purposes.

What we collect from brokers

• Request access form: first name, last name, brokerage name, email, phone, licence number, website (optional) and the page look you picked.
• Account and Settings: the details you add to your page, such as your photo, logo, colours, application link, calendar and video choices, and the questions you ask clients.
• Sign-in: your email address and the one-time sign-in links and 6-digit codes we send you. Knokk does not use passwords.
• Connections: when you connect Google or Microsoft calendar, Zoom or Google Meet, we keep the access the provider grants so we can check your free times and create meetings. When you add a Finmo API key, we store it encrypted (AES-256-GCM) and use it only to send client documents to your Finmo file.
• Messages you send us, and records of how you use Settings so we can support you and keep the service secure.

What we collect from clients

When you use a broker's Knokk page, we collect only what you choose to give, for example:

• Booking a call: your name, email, phone, the time you picked and your answers to the broker's questions.
• Sending documents: your email, your last name, the 6-digit code we email you to confirm it is you, and the files you upload.
• Contacting the broker: your name, contact details and message.
• Calculators: the numbers you enter to see a result.

Starting a mortgage application takes you to an outside link the broker chose, such as Finmo. That site has its own privacy policy, and what you enter there is not collected by Knokk.

Visit counts

We count visits and taps on broker pages so brokers can see how their page is doing. To tell visits apart we use a keyed hash of the IP address, browser and day. We do not store the raw IP address, and the count is not linked to your name or contact details.

How we use information

• To review access requests and set up broker accounts.
• To sign brokers in and keep accounts secure.
• To run broker pages: book calls, create meeting links, send confirmation and reminder emails, and pass client messages to the broker.
• To send client documents straight into the broker's Finmo file.
• To show brokers their page stats.
• To answer questions, fix problems and improve Knokk.
• To meet our legal obligations.

We do not sell personal information. We do not use client information to market to clients or to build our own relationship with them.

Documents sent to a broker

Documents go straight into the broker's Finmo file. Before a file is sent, the client confirms who they are with a 6-digit code emailed to them and their last name. If a client has more than one open application, we may hold the file encrypted for a short time until the right application is chosen. Once a document is in Finmo, the broker and Finmo are responsible for it.

Who we share it with

We share information only with the broker whose page you used, and with service providers that help us run Knokk:

• Supabase, for our database (Canada or United States).
• Vercel, for hosting the website (United States edge network).
• Resend, for sending email (United States).
• Google, Microsoft and Zoom, when a broker connects them for calendars and meetings.
• Finmo, when a broker connects it to receive documents.

Some of these providers store or process data outside Canada, mostly in the United States. Information held there may be accessed by courts or authorities under local law. We use providers with appropriate security and contract terms.

We may also share information if the law requires it, to protect people or the service, or as part of a sale or reorganization of our business, where the buyer keeps the same protections.

Consent

By using Knokk you agree to this policy. Brokers are responsible for having the consent they need from their clients for the way they use Knokk. You can withdraw consent at any time by emailing hello@knokk.ca, though this may stop parts of the service from working for you.

Any marketing email we send brokers will name us as the sender and include a way to unsubscribe, as Canada's anti-spam law (CASL) requires.

How long we keep it

We keep personal information while the broker's account is active and for as long as the law requires, then delete it. Access requests that are not switched on are kept only as long as needed to respond. When a broker disconnects a calendar, video account or Finmo, we stop using that connection. Copies in backups are removed as those backups expire.

How we protect it

• Data is encrypted in transit and at rest.
• Finmo API keys are encrypted with AES-256-GCM.
• Each broker can see only their own page, settings and clients.
• Sign-in uses one-time links and codes, so there are no passwords to steal.
• Only people who need access to run the service have it.

No system is perfectly secure. If a breach creates a real risk of significant harm, we will tell the people affected, the brokers involved and the Privacy Commissioner of Canada as the law requires.

Cookies

We use cookies and similar browser storage to keep brokers signed in, remember settings and keep the service secure. We do not use advertising cookies. You can block cookies in your browser, but sign-in will not work without them.

Your rights

You can ask to see the personal information we hold about you, correct it, or have it deleted, subject to what the law requires us to keep. Email hello@knokk.ca. We will confirm who you are and reply within 30 days.

If you are a client, your broker controls your information. You can contact them directly, or contact us and we will pass your request to them and help them respond.

Quebec residents may have additional rights under Quebec privacy law, and we will respect those rights where that law applies.

Age

Knokk is not meant for anyone under 18. If we learn we have information from someone under 18, we will delete it.

Complaints

Please contact our Privacy Officer first at hello@knokk.ca. If you are not satisfied with our answer, you can complain to the Office of the Privacy Commissioner of Canada at priv.gc.ca or 1-800-282-1376.

Changes to this policy

We may update this policy. We will post the new version here with a new effective date, and email brokers about important changes before they take effect.