Privacy policy.
PatentOS is operated by IP Rich, Inc. (株式会社IPリッチ), Tokyo. This policy explains what we collect, why we collect it, how we keep it safe, and the rights you can exercise.
1. Who we are
IP Rich, Inc. (株式会社IPリッチ) is the data controller for visitor and prospect data on patentos.app. For PatentOS customer tenants, IP Rich acts as a processor under our Data Processing Addendum. Contact us at privacy@patentos.app for any privacy inquiry.
2. Information we collect
- You give us
- Name, email, company, role, and any message you send through forms, email, or scheduled calls.
- You generate
- Documents you upload into the platform (patents, product specs, settlement comparables), and the analyses produced for you. This data lives inside your tenant.
- We observe
- Page views, referrers, session timing, device and browser metadata, IP address (truncated for analytics), and consented cookies. We do not run third party advertising trackers.
3. Why we process it
- Service delivery
- Running the platform, providing customer support, billing, and the contracted attorney review. Legal basis: contract performance.
- Communication
- Replying to inquiries, sending product updates if you opted in, and notifying customers of incidents. Legal basis: legitimate interest, consent where required.
- Security and abuse prevention
- Monitoring for unauthorised access, fraud, and platform abuse. Legal basis: legitimate interest.
- Legal compliance
- Tax records, regulator requests, lawful disclosure. Legal basis: legal obligation.
4. What we never do
- We do not train our AI models on your tenant documents.
- We do not sell personal information.
- We do not enrich your profile from data brokers.
- We do not run third party advertising or behavioural tracking.
5. Sub-processors
We use a small set of vetted infrastructure providers (cloud hosting, email delivery, error tracking, analytics). The current list is maintained at privacy@patentos.app and in the DPA exhibit. We notify customers before adding a sub-processor that handles tenant data.
6. International transfers
Personal information is primarily stored in Japan. Some operational data (error logs, email delivery) is processed in the US and EU. Transfers rely on the EU Standard Contractual Clauses and Japan's APPI mutual adequacy framework, plus our additional encryption and access controls.
7. Retention
- Tenant documents
- Retained for the term of the agreement plus the deletion window in the DPA (default 30 days), unless you request earlier deletion.
- Account and billing
- Retained for seven years after termination to satisfy Japanese tax and corporate law.
- Marketing contacts
- Retained until you unsubscribe or three years of inactivity, whichever comes first.
8. Your rights
Subject to applicable law, you may request access, correction, deletion, restriction, portability, or to object to processing. EU and UK subjects may lodge a complaint with their supervisory authority. Japanese subjects may contact the Personal Information Protection Commission. Most rights can be exercised by writing to privacy@patentos.app; we respond within 30 days.
9. Security
Encryption in transit and at rest. Role based access. Least privilege on production. Background checked staff with confidentiality obligations. Incident response runbook with defined SLAs. Independent attestation roadmap detailed in our DPA.
10. Cookies
We use a minimal set of strictly necessary and analytics cookies. We do not deploy advertising cookies. Details are presented in the cookie banner on first visit. You can change your choices at any time from the cookie settings link in the footer.
11. Changes
We will post material changes here with a new effective date. Customers under contract are notified by email at least 30 days before changes take effect.
12. Contact
Privacy questions: privacy@patentos.app. Postal address: IP Rich, Inc., Tokyo, Japan. For data subject rights, please use the privacy email and identify the right you wish to exercise.