SOK Icon

The Thirteen Standards of Knowledge

Loading...

Privacy Policy

Last Updated: October 21, 2026

1. Introduction

The Thirteen Standards of Knowledge ("we", "us", "our", or "Service") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

By using our Service, you agree to the collection and use of information in accordance with this Privacy Policy.

2. Information We Collect

2.1 Information You Provide

Account Information:

  • Email address (from Google OAuth)
  • Name (from Google OAuth)
  • Profile picture (from Google OAuth)
  • Account preferences and settings

Business Planning Content:

  • Your Power Source Goal and its planning worksheets (financial breakdown, competition analysis, negatives-to-advantages), including any revenue, cost, and goal figures you enter
  • Your business profile (business name, industry, stage)
  • The messages you send to SOK's AI and the AI's responses, kept as your chat history
  • Files you upload (documents, spreadsheets, presentations, images), the text we extract from them so the AI can read them, and the file's name, type, and size

Organization and Members:

  • If you own an organization, the email addresses you invite and whether each invitation was accepted, declined, or removed
  • If you accept an invitation, your name and email are shown to the organization's owner together with your AI usage

Inquiries:

  • If you request an operator consultation, submit a suggestion, or send a support request, the name, email address, phone number, and message you provide, whether or not you have an account

Payment Information:

  • Payment is processed through Stripe, a third-party payment processor
  • We do not store your full credit card information
  • Stripe handles all payment data in accordance with PCI DSS standards
  • We may receive payment confirmation and transaction details from Stripe

2.2 Automatically Collected Information

Usage Data:

  • IP addresses
  • Browser type and version
  • Device information
  • Browser fingerprint (for rate limiting and security)
  • Pages visited and time spent on pages
  • Chat interactions and session data
  • Demo session usage and limits

AI Usage Metering:

  • For every request you make to SOK's AI (chat, inline worksheet suggestions, scanned-file text extraction, and dictation), we record the model that served it, the number of tokens or seconds of audio processed, the resulting cost, and which conversation, worksheet, or file it related to
  • These records are kept in an append-only ledger that belongs to your organization (a solo account is an organization of one) and are used to show your balance and usage, to bill AI usage, and to show the organization's owner how much each member has used

Technical Data:

  • Cookies and similar tracking technologies
  • Log files
  • Error reports
  • Performance data

2.3 Information from Third Parties

Google OAuth:

  • When you sign in with Google, we receive:
    • Email address
    • Name
    • Profile picture
    • Google account ID

Stripe:

  • Payment status and transaction details
  • Customer ID (for payment processing)
  • If you save a card for AI credit purchases or auto-reload: the card's brand, last four digits, and expiration date, and a Stripe reference to the saved payment method (we never receive or store the full card number)

3. How We Use Your Information

We use the collected information for the following purposes:

3.1 Service Provision

  • To create and manage your account
  • To provide access to educational content
  • To enable AI chat functionality
  • To process payments and manage subscriptions
  • To deliver video content

3.2 Security and Abuse Prevention

  • To prevent fraud and abuse
  • To enforce rate limits on demo sessions
  • To detect and prevent unauthorized access
  • To protect the security and integrity of the Service

3.3 Communication

  • To send you important updates about the Service
  • To respond to your inquiries and support requests
  • To notify you of changes to our policies

3.4 Analytics and Improvement

  • To analyze usage patterns and improve the Service
  • To understand how users interact with content
  • To optimize performance and user experience

3.5 Legal Compliance

  • To comply with applicable laws and regulations
  • To respond to legal requests and court orders
  • To protect our rights and the rights of users

4. Data Storage and Third-Party Services

4.1 Data Storage Locations

Your data is stored using the following services:

Supabase:

  • User account information
  • Subscription status
  • Demo session tracking
  • Chat session data and chat history
  • Planning worksheets and business profile
  • Uploaded-file records and the text extracted from them
  • AI usage ledger, organization, and membership records
  • Authentication tokens

DigitalOcean Spaces:

  • Video content
  • The files you upload, under a key tied to your account; they are served only through short-lived signed links

Stripe:

  • Payment information (processed by Stripe, not stored by us)

4.2 Third-Party Service Providers

We use the following third-party services that may have access to your information:

Google (OAuth):

Stripe:

Supabase:

Anthropic (AI model provider):

  • Purpose: Generating SOK's AI responses — chat, inline worksheet suggestions, and text extraction from scanned files you upload
  • Data shared: The messages you send to the AI, the worksheet content and uploaded files the AI is asked to read, and the context needed to answer; Anthropic processes this to produce the response and reports back the tokens used, which we record for metering
  • Privacy Policy: https://www.anthropic.com/privacy

OpenAI (public demo only):

  • Purpose: The unauthenticated demo chat on our public site
  • Data shared: The messages you type into the demo chat
  • Privacy Policy: https://openai.com/privacy

DigitalOcean:

Vercel:

  • Purpose: Hosting the Service; Web Analytics and Speed Insights (page views and performance, without cookies)
  • Data shared: Request logs (including IP address and browser information), page views, and performance measurements
  • Privacy Policy: https://vercel.com/legal/privacy-policy

Sentry:

  • Purpose: Error monitoring
  • Data shared: Error reports, which may include your IP address, browser information, the request that failed, and your account identifier
  • Privacy Policy: https://sentry.io/privacy/

Resend:

  • Purpose: Sending email on our behalf (sign-in links, invitations, membership changes, AI credit receipts and notices)
  • Data shared: Your email address and the content of those emails
  • Privacy Policy: https://resend.com/legal/privacy-policy

AssemblyAI (speech-to-text):

  • Purpose: Dictation in the chat composer
  • Data shared: If you use dictation, your voice is streamed from your browser to AssemblyAI (our speech-to-text provider) to turn it into text as you speak; SOK does not receive or store the audio.
  • Privacy Policy: https://www.assemblyai.com/legal/privacy-policy

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

5.1 Service Providers

  • With third-party service providers who perform services on our behalf
  • These providers are contractually obligated to protect your information

5.2 Legal Requirements

  • When required by law or legal process
  • To respond to government requests
  • To protect our rights and property
  • To prevent fraud or abuse

5.3 Business Transfers

  • In connection with a merger, acquisition, or sale of assets
  • Your information may be transferred as part of such transactions

5.4 With Your Consent

  • When you explicitly consent to sharing your information

5.5 Within Your Organization

  • If you are a member of an organization, its owner can see your name, email address, and how much of the shared AI credits you have used
  • If you own an organization, the people you invite see your name and the organization's name in the invitation

6. Your Privacy Rights

Depending on your location, you may have the following rights:

6.1 Access

  • Request access to your personal information
  • Receive a copy of the data we hold about you

6.2 Correction

  • Request correction of inaccurate or incomplete information
  • Update your account information through your account settings

6.3 Deletion

  • Request deletion of your personal information
  • Note: Some information may be retained for legal or business purposes

6.4 Data Portability

  • Request a copy of your data in a portable format

6.5 Opt-Out

  • Opt out of certain data processing activities
  • Disable cookies through your browser settings

6.6 California Privacy Rights (CCPA)

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA):

  • Right to know what personal information is collected
  • Right to delete personal information
  • Right to opt-out of the sale of personal information (we do not sell your information)
  • Right to non-discrimination for exercising your privacy rights

6.7 European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), you have additional rights under GDPR:

  • Right to access, rectify, or erase your data
  • Right to restrict processing
  • Right to data portability
  • Right to object to processing
  • Right to withdraw consent

To exercise these rights, please contact us using the information provided in Section 13.

7. Cookies and Tracking Technologies

7.1 Types of Cookies We Use

Essential Cookies:

  • Required for the Service to function
  • Used for authentication and session management
  • Cannot be disabled

Analytics:

  • We use Vercel Web Analytics and Speed Insights to understand page views and performance. They do not set cookies and do not track you across sites

Functional Cookies:

  • Remember your preferences and settings
  • Enhance your experience

7.2 Managing Cookies

  • You can control cookies through your browser settings
  • Disabling cookies may affect Service functionality
  • We use browser fingerprinting for security and rate limiting

8. Data Security

We implement appropriate technical and organizational measures to protect your information:

  • Encryption of data in transit (HTTPS/TLS)
  • Secure authentication systems
  • Access controls and authentication
  • Regular security assessments
  • Secure third-party service providers

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

9. Data Retention

We retain your information for as long as necessary to:

  • Provide the Service to you
  • Comply with legal obligations
  • Resolve disputes
  • Enforce our agreements

Retention Periods:

  • Account information: Retained while your account is active
  • Payment records: Retained as required by law (typically 7 years)
  • Chat interactions: Retained for Service functionality and improvement
  • Planning worksheets and business profile: Retained while your account is active
  • Uploaded files: Retained until you delete them in Files or your account is deleted; deleting a file removes it from storage and from the chat messages it was attached to
  • AI usage ledger: Retained as a billing record for as long as your organization's account exists, and thereafter as required by law
  • Demo session data: Retained for rate limiting and security purposes
  • Inquiries (consultation, suggestion, and support requests): Retained while we handle the request and for our records
  • Error reports: Retained by Sentry according to its retention settings

10. Children's Privacy

The Service is for adults. You must be at least 18 years old to use it, as our Terms of Service require. We do not knowingly collect personal information from anyone under 18. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately and we will delete it.

11. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have different data protection laws than your country.

When we transfer your information internationally, we ensure appropriate safeguards are in place, including:

  • Standard contractual clauses
  • Adequacy decisions
  • Other legal mechanisms as required

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

  • Posting the updated Privacy Policy on the Service
  • Updating the "Last Updated" date
  • Sending email notifications for significant changes (if applicable)

Your continued use of the Service after changes become effective constitutes acceptance of the updated Privacy Policy.

13. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us at:

14. Additional Information

14.1 Do Not Track Signals

We do not currently respond to "Do Not Track" signals from browsers. However, you can control tracking through your browser settings.

14.2 Links to Other Websites

Our Service may contain links to third-party websites. We are not responsible for the privacy practices of these websites. We encourage you to read their privacy policies.

14.3 Data Controller

The data controller for your personal information is:

The Thirteen Standards of Knowledge 203 S Water Street, Suite 300, Henderson, NV 89015

15. Acknowledgment

BY USING THE SERVICE, YOU ACKNOWLEDGE THAT YOU HAVE READ, UNDERSTOOD, AND AGREE TO THIS PRIVACY POLICY.