Privacy policy.

Effective: 2026-10-02Version: 2026-10-02Language: English (Japanese version controls in JP)

1. Who we are

IP Rich, Inc. (株式会社IPリッチ) is the data controller for visitor and prospect data on patentos.app. For PatentOS customer tenants, IP Rich acts as a processor under our Data Processing Addendum. Contact us at privacy@patentos.app for any privacy inquiry.

2. Information we collect

You give us

Name, email, company, role, and any message you send through forms, email, or scheduled calls.

You generate

Documents you upload into the platform (patents, product specs, settlement comparables), and the analyses produced for you. This data lives inside your tenant.

We observe

Page views, referrers, session timing, device and browser metadata, IP address (truncated for analytics), and consented cookies. We do not run third party advertising trackers.

3. Why we process it

Service delivery

Running the platform, providing customer support, billing, and the contracted attorney review. Legal basis: contract performance.

Communication

Replying to inquiries, sending product updates if you opted in, and notifying customers of incidents. Legal basis: legitimate interest, consent where required.

Security and abuse prevention

Monitoring for unauthorised access, fraud, and platform abuse. Legal basis: legitimate interest.

Legal compliance

Tax records, regulator requests, lawful disclosure. Legal basis: legal obligation.

4. Pre-registration and investor interest

This section covers the pre-registration form (/preregister) and the investor and partner form (/investors). Policy version 2026-10-02.

What we collect

Pre-registration: company email, name, company, department, role and the services you are interested in, plus any optional answers you choose to give (such as organization type, approximate number of patents held, filings per year, timing, budget status, interest in being a design partner or in selling or licensing patents, how you heard about us and your main challenge). Investor and partner form: name, email, firm, type of investor or partner, interest and message. For both, we record the time you gave consent, the policy version, whether you opted in to marketing email, the referral code you arrived with and campaign parameters in the page address (utm).

Why we use it

To manage your registration, contact you about early access and founding-member terms, decide the order in which we offer access (we use your answers to prioritize follow-up), and reply to investor and partner inquiries. If you tell us you are open to selling or licensing patents, the Patent Capital team at IP Rich may contact you about it.

Confirmation and marketing email

After you pre-register we send an email asking you to confirm your address. Marketing email, such as product news and event invitations, is sent only if you ticked the separate opt-in box. Every marketing email lets you unsubscribe.

Referral code

After pre-registering you receive your own referral code and link. When someone registers through your link, we record your code with their registration.

Service providers

Registrations are stored and processed by our providers for database and application hosting, website hosting and email delivery. Some of them process data outside Japan, including in the United States.

Your choices

You can withdraw marketing consent at any time, or ask us to correct or delete your registration, by writing to privacy@patentos.app.

5. What we never do

• We do not train our AI models on your tenant documents.
• We do not sell personal information.
• We do not enrich your profile from data brokers.
• We do not run third party advertising or behavioural tracking.

6. Sub-processors

We use a small set of vetted infrastructure providers (cloud hosting, email delivery, error tracking, analytics). The current list is maintained at privacy@patentos.app and in the DPA exhibit. We notify customers before adding a sub-processor that handles tenant data.

7. International transfers

Storage and analysis use the configured hosting and AI providers, including Convex infrastructure in the United States. Processing locations depend on the features and providers used. Japan-only storage or processing is not guaranteed. Confirm the applicable providers, transfer terms, and data handling before use.

8. Retention

Tenant documents

Retained for the term of the agreement plus the deletion window in the DPA (default 30 days), unless you request earlier deletion.

Account and billing

Retained for seven years after termination to satisfy Japanese tax and corporate law.

Marketing contacts

Retained until you unsubscribe or three years of inactivity, whichever comes first.

9. Your rights

Subject to applicable law, you may request access, correction, deletion, restriction, portability, or to object to processing. EU and UK subjects may lodge a complaint with their supervisory authority. Japanese subjects may contact the Personal Information Protection Commission. Most rights can be exercised by writing to privacy@patentos.app; we respond within 30 days.

10. Security

Encryption in transit and at rest. Role based access. Least privilege on production. Background checked staff with confidentiality obligations. Incident response runbook with defined SLAs. Independent attestation roadmap detailed in our DPA.

11. Cookies

We use a minimal set of strictly necessary and analytics cookies. We do not deploy advertising cookies. Details are presented in the cookie banner on first visit. You can change your choices at any time from the cookie settings link in the footer.

12. Changes

We will post material changes here with a new effective date. Customers under contract are notified by email at least 30 days before changes take effect.

13. Contact

Privacy questions: privacy@patentos.app. Postal address: IP Rich, Inc., Tokyo, Japan. For data subject rights, please use the privacy email and identify the right you wish to exercise.