Advisor Privacy Policy

1. Scope and who is responsible

This Advisor Privacy Policy explains how ATSRC Technologies Private Limited, trading as KnowingLives ("KnowingLives," "we," "us," or "our"), handles personal data about prospective, current, suspended, and former advisors. It applies to advisor application, onboarding, verification, the advisor portal, the KnowingLives Advisor mobile application, consultations, content publishing, support, earnings, and payouts.

ATSRC Technologies Private Limited is the data controller for the advisor data described in this policy. This policy supplements, and does not replace, the Advisor Agreement, Platform Policies, Ethical Guidelines, and any notices shown when a specific feature is used.

2. Personal data we collect

Depending on your stage of application and the features you use, we may collect:

• Application and identity data: legal name, display name, email address, phone number, country, time zone, profile photo, date of birth or age confirmation where required, referral code, how you heard about us, and application status.
• Professional and screening data: professional title, biography, languages, specialities, experience, qualifications, tools or methods used, topics you are comfortable addressing, screening responses, interview notes, references, certificates, and other information submitted to demonstrate suitability.
• Verification and agreement data: government-issued identification type and number, copies of verification documents where requested, declarations, compliance confirmations, electronic signature, signature timestamp, IP address, document version, and audit trail.
• Public profile and content: approved display name, profile photo, biography, professional title, languages, categories, experience, availability, prices, ratings, reviews, blogs, videos, and other content you choose to publish.
• Account and security data: account identifiers, hashed password, authentication tokens, login history, device and browser information, IP address, app version, security events, fraud signals, and support correspondence.
• Consultation and communication data: chat messages; questions and answers; session identifiers, participants, timestamps, duration, status, and delivery information; call and video technical metadata; reports, reviews, and dispute records. Live calls may be recorded where recording is enabled for safety, quality assurance, moderation, training, or dispute resolution. When recording is enabled, we will provide notice and obtain consent where required by applicable law. Advisor-created video consultation responses and uploaded readings are intentionally stored as part of the service.
• Earnings, payout, and tax data: rates, session earnings, wallet balance, commissions, adjustments, payout requests and history, account-holder name, bank name and account number, IFSC, UPI ID, SWIFT, IBAN, routing number, account type, currency, country, tax information, invoices, and related compliance records.
• Device permissions: camera access for profile photos and video consultations; microphone and Bluetooth access for voice/video sessions; files or photos you select for upload; and notification tokens for incoming sessions, reminders, and security or account alerts.
• Usage and diagnostics: screens and features used, interactions, performance information, crash reports, network information, and aggregated analytics.

We collect data directly from you, automatically from your device when you use the Platform, from clients who interact with or review you, from authorized verification or payment providers, and from administrators who review applications and Platform activity. Please do not submit sensitive information that we have not requested.

3. How and why we use personal data

• Receive, verify, evaluate, and communicate about advisor applications.
• Verify identity, professional claims, eligibility, and policy compliance.
• Create and administer advisor accounts and approved public profiles.
• Match advisors with clients and deliver chat, voice, video, and Q&A services.
• Calculate earnings, administer commissions, process payouts, and maintain records.
• Send transactional notifications about sessions, applications, payouts, and security.
• Moderate content, investigate complaints, resolve disputes, and enforce agreements.
• Detect fraud, abuse, account compromise, unsafe conduct, and prohibited activity.
• Operate, troubleshoot, analyze, and improve the Platform and advisor experience.
• Comply with tax, accounting, employment-status, court, regulatory, and legal duties.
• Establish, exercise, or defend legal claims and protect people, rights, and property.

4. Legal bases for processing

Where a legal basis is required, including under the GDPR or UK GDPR, we rely on:

• Steps before and performance of a contract, including reviewing your application, administering your account, delivering sessions, and making payouts.
• Legitimate interests, including Platform security, service improvement, quality assurance, fraud prevention, moderation, and dispute resolution, balanced against your rights.
• Legal obligations, including tax, accounting, regulatory, sanctions, and lawful authority requirements.
• Consent where specifically requested, such as optional marketing or a future call-recording feature. Consent may be withdrawn without affecting prior lawful processing.
• Protection of vital interests or legal claims in limited situations involving safety, fraud, or disputes.

5. Public profile visibility

After approval, profile fields intended to help clients select an advisor may be visible publicly and indexed by search engines. These may include your display name, profile photo, professional title, biography, specialities, languages, experience, availability, rates, ratings, reviews, and published content. Profile changes may be reviewed before publication.

Your legal identity, private contact information, verification documents, login credentials, and payout details are not part of your public profile. Avoid placing personal contact details or unnecessary third-party personal data in public profile fields or content.

6. Client data and advisor confidentiality

Advisors may receive limited client personal data needed to provide a consultation, such as a display name, question, birth details voluntarily supplied by the client, messages, and session history. Advisors must treat this information as confidential, use it only to provide services through KnowingLives, and follow the Advisor Agreement and Platform Policies.

Advisors must not copy, download, retain, disclose, sell, independently market to, or contact clients outside the Platform unless KnowingLives has expressly authorized it and applicable law permits it. Suspected unauthorized access or disclosure must be reported promptly to admin@knowinglives.com.

7. When we share personal data

We disclose only the data reasonably necessary for the relevant purpose:

• Clients and the public, for approved public profile information, availability, content, and session-related identity.
• Platform administrators and authorized personnel, for onboarding, moderation, support, payments, security, and legal compliance.
• Service providers, including secure hosting and storage, identity or document verification, profile-image hosting, email and OTP delivery, Firebase push notifications and diagnostics, real-time chat, and 100ms voice/video infrastructure.
• Banks, payout providers, accountants, and tax advisers, to process payments and meet financial reporting obligations.
• Professional advisers, insurers, regulators, courts, law enforcement, and public authorities where necessary or legally required.
• Corporate transaction parties in connection with a merger, financing, restructuring, or sale, subject to appropriate confidentiality safeguards.

We require service providers to protect personal data and process it only for contracted purposes. We do not sell advisor personal data or share it for cross-context behavioral advertising.

8. International data transfers

KnowingLives is based in India. Our service providers may process data in India and other countries. Where applicable law requires safeguards for an international transfer, we use recognized mechanisms such as adequacy decisions, contractual protections, Standard Contractual Clauses, and supplementary security measures.

9. Retention

We keep personal data only for as long as reasonably necessary for the purposes described above. Retention depends on account status, the type and sensitivity of the record, dispute and safety needs, limitation periods, and tax, accounting, payment, and regulatory requirements.

• Application and screening records may be retained after a decision to document the review, prevent duplicate or abusive applications, and consider a future application.
• Account, consultation, content, moderation, and support records are generally retained while the account is active and for an appropriate period afterward for disputes, safety, fraud prevention, and legal claims.
• In the current system, ordinary chat messages are scheduled for deletion after 30 days, push-notification delivery logs after 90 days, and chat moderation reports after 180 days. Associated media may follow separate deletion schedules. These periods may be extended when preservation is required for an investigation, dispute, safety matter, or legal obligation.
• Advisor-uploaded reading media may use short-lived storage schedules. The related consultation, billing, and audit records can be retained separately for service, payment, dispute, and compliance purposes.
• Agreements, identity-verification audit records, payout, tax, and accounting records may be retained for the period required by applicable law, which can extend for several years after the advisor relationship ends.
• Backup copies are isolated from routine use and removed or overwritten according to backup schedules, unless preservation is legally required.

When retention is no longer necessary, data is deleted, de-identified, or aggregated.

10. Security

We use administrative, technical, and organizational safeguards appropriate to the nature of the data, including encrypted transport, authentication, access controls, administrative permissions, audit records, provider review, and monitoring. Access to payout information is limited to authorized operational personnel and processors that require it. No Internet service can guarantee absolute security.

Advisors are responsible for protecting their password and device, using only their own account, and notifying us promptly of suspected compromise or unauthorized access.

11. Your privacy rights and choices

Depending on your location and subject to legal exceptions, you may request access to, correction of, deletion of, restriction of, or portability of personal data; object to certain processing; withdraw consent; and complain to a competent data protection authority. Indian data principals may also exercise applicable rights to correction, erasure, grievance redressal, and nomination under the Digital Personal Data Protection Act, 2023 and implementing rules as they apply.

You may update available profile fields in the advisor account. Profile updates can require administrative review. You can control camera, microphone, Bluetooth, files, and notification permissions in device settings, although disabling them may prevent related features from working.

To exercise a privacy right or request account closure, email admin@knowinglives.com using the subject "Advisor Privacy Request". Include your registered email address and the nature of your request. We may verify your identity before acting. Account deletion does not require us to delete records that must be retained for legal, payment, fraud-prevention, safety, or dispute purposes.

12. Automated processing

We may use rules, risk indicators, and analytics to prioritize reviews, detect fraud, or identify policy concerns. We do not make decisions that produce legal or similarly significant effects solely through automated processing unless permitted by law and accompanied by required safeguards. Advisor approval, suspension, and termination may involve review by authorized personnel.

13. Cookies and similar technologies

The advisor website uses cookies, local storage, and similar technologies for authentication, security, preferences, functionality, and analytics. The mobile application uses secure storage, local preferences, device tokens, and SDK identifiers for equivalent purposes. See our Cookie Policy for more information.

14. Age requirement

Advisor applicants must be at least 18 years old and legally capable of entering the Advisor Agreement. We do not knowingly accept advisor applications from children.

15. Changes to this policy

We may update this policy to reflect changes in law, technology, providers, or Platform practices. We will publish the updated version and effective date on this page. Where required, we will provide additional notice in the advisor portal, mobile application, or by email before a material change takes effect.

16. Contact and grievance redressal

Contact us with questions, complaints, security reports, or privacy requests. We will acknowledge and address requests in accordance with applicable law.