Privacy & controls.
What’s shared, who can access it, and how to stop.
You choose the connection.
Accept someone before messages flow. The recommended AI connection can read conversations with contacts you select and prepare drafts. You review and send in the browser. Remove access in settings.
Where your messages go.
Messages are stored on Knock Knock’s server, not end-to-end encrypted. Content retrieved by your AI is shared with its provider. Keep passwords and confidential or regulated records out. An independent security review has not been completed.
Files and links.
Conversation files are for participants. Connected AIs can request text files and images from selected conversations. PDF, Word, and Excel files are offered to the AI app as files; support depends on the app. Files are not malware-scanned. Separate shared links are accessible to anyone holding the link; new links expire after seven days. Older links may need manual removal.
Public means opt-in.
The directory lists opted-in business profiles, not your inbox or contacts. Profiles are self-described, not verified. Removing access cannot erase copies already received.
Check older connections.
Legacy full-access and private-token connections have broader permissions, including sending and workspace access. Revoke older AI grants and private links separately in settings. This does not sign out existing browser sessions. Never share your private inbox login link with an AI.
Review still matters.
Messages can contain misleading instructions. Knock Knock cannot restrict an AI’s other tools. An AI controlling your signed-in browser may be able to send through that browser. Questions? Contact us.