Kensho
Get started

Legal

Privacy Policy

Last updated July 9, 2026

This describes what Kensho (“we”, “us”) collects when you create a profile, buy an NFC card, or visit someone else’s Kensho profile, and what we do with it. It’s written to accurately describe how the product actually works today, not as boilerplate.

What we collect from account holders

  • Your email address and authentication details, handled by Clerk (our sign-in provider) — we never see or store your password.
  • Profile content you choose to add: name, headline, company, bio, photo, links, and skills.
  • Billing information if you buy an NFC card or subscribe to Pro — payment details are handled entirely by Stripe; we never see or store your card number.
  • A US shipping address, only if you order a physical NFC card.
  • Uploaded images (avatar/logo), stored by UploadThing, our file-storage provider.

What we collect from visitors to a public profile

  • Basic visit events (profile view, NFC tap, link click, contact-card save) tied to the profile viewed, along with the visitor’s browser user-agent and referring page.
  • Your IP address is never stored raw — it’s cryptographically hashed (HMAC-SHA256, with a private server-side secret) before it ever touches our database. We can’t reverse a stored hash back into your real IP address.
  • If you fill out a “Get in touch” lead form on someone’s profile, the name, email, phone, and message you submit are shared directly with that profile’s owner — that’s the explicit purpose of the form.

Who we share data with

We use a small number of service providers to run Kensho, each only for its specific purpose:

  • Clerk — authentication and account sessions.
  • Stripe — payment processing and billing.
  • UploadThing — image and file storage.
  • Resend — transactional email (e.g. account notifications).
  • Vercel — application hosting and infrastructure.

We don’t sell personal data, and we don’t share it with anyone outside this list.

How long we keep it

Your account and profile data is kept as long as your account exists. Analytics events (already hashed/pseudonymous) are retained to power your dashboard’s view/tap/click counts. You can delete your profile’s content at any time from your dashboard.

Your choices

  • Turn your public profile off entirely at any time (Visibility setting in your dashboard) without deleting your account.
  • Edit or remove any profile field, link, or uploaded image whenever you want.
  • Contact us to request deletion of your account and associated data.

Questions

If you have questions about this policy or how your data is handled, contact us.