Privacy policy

[COUNSEL: controller identity and contact; jurisdictions (e.g. PIPEDA, GDPR, US state laws).]

What we collect

• Account data: name, email, organisation, role, password (stored only as a salted hash).
• Invention data: disclosures, answers, files you upload (sketches, photos, documents, 3D models), drafts, references and comments.
• Billing data: handled by our payment processor; we store purchase records, not card numbers.
• Usage data: sign-in sessions, actions in your account (audit log), and error logs.

How invention data is processed

• To draft and research, invention data is sent to our AI provider under commercial terms that prohibit training on it. [COUNSEL: name subprocessors and confirm zero data retention status.]
• Patent and literature searches send search terms, not your full disclosure, to search providers. [COUNSEL: list search subprocessors.]
• Photos you upload are re-encoded, which removes embedded metadata such as location.

Retention and deletion

• Invention data is kept while your account is active. Deleting an application removes it from our database immediately and from backups within [COUNSEL: e.g. 30] days.
• Email records of notifications are kept for [COUNSEL] days.

Your rights

You can download all your data, or delete your account, at any time from Settings. Deleting your account removes your applications immediately, except those you created in a shared organisation, which stay with that organisation. For corrections or other requests contact [COUNSEL: privacy contact].

Security

Encryption in transit, access limited to your organisation, isolated processing for each AI job, and regular off-site backups.