Privacy Policy

1. Who Is Responsible for Your Data

This Privacy Policy applies to ipnite.com, app.ipnite.com, and related services, communications, free trials, and subscriptions (the "Services"), operated by Ik-Holcan LLC, a Delaware limited liability company ("IPnite^™," "we," or "us"), which is the controller of your personal data.

This Policy is designed to meet the requirements of the laws that apply to our users, including the CCPA/CPRA (California), the GDPR (European Economic Area and United Kingdom), Brazil's LGPD, Mexico's Federal Law on the Protection of Personal Data Held by Private Parties, and Argentina's Law 25,326.

Privacy contact: info@ipnite.com.

2. Information We Collect

• Account data: name, email address, and authentication credentials.
• Billing data: plan, transaction history, and billing identifiers. Payments are handled by processors such as Stripe and, depending on the country, Mercado Pago or Pix. We never store full card numbers.
• Demographic and professional profile: country or region, language, and professional category (for example, inventor, startup, law firm, or university), which we analyze in aggregate.
• Invention materials: disclosures, descriptions, drawings, documents, prior-art references, prompts, and files you submit. We process them only to provide the Services (see Section 5).
• Communications: messages you send us by email or through the contact form.
• Technical and usage data: IP address, browser, device, and pages or features used, needed for security and, only if you consent, for website analytics.

We do not collect government identification numbers, precise geolocation, biometric data, or health information.

3. How We Use Information

• Create and secure your account and provide the Services you request.
• Process payments, the free trial, and subscription renewals and cancellations.
• Answer your messages and provide support.
• Prevent fraud and abuse and keep the platform secure.
• Understand, in aggregate, which countries, profiles, pages, and features use IPnite^™, so we can improve it.
• Send transactional notices (account, billing, security) and, only with your consent, newsletters that you can unsubscribe from at any time.
• Comply with legal and tax obligations.

We do not build individual profiles for advertising and do not use your information for purposes incompatible with these.

4. Legal Bases

We process personal data to perform our contract with you; to comply with legal obligations; for legitimate interests such as security and fraud prevention, balanced against your rights; and with your consent for analytics cookies and newsletters. Under Brazil's LGPD these bases correspond to Article 7, V (contract), II (legal obligation), IX (legitimate interest), and I (consent).

5. Invention Materials

• IPnite^™ never uses your invention materials, prompts, documents, or outputs to train AI models, and never uses them for any purpose other than providing the Services to you.
• Everything generated from your materials belongs to you.
• AI processing runs on the enterprise Vertex AI API in IPnite^™'s Google Cloud environment. Google Cloud's terms state that Google does not use customer data to train its models without the customer's permission, and IPnite^™ has not given that permission. According to Google's documentation, some features may keep data temporarily for operational purposes such as caching or abuse monitoring, never for training.
• Access is restricted to the systems and people needed to provide the Services, and materials are encrypted in transit and at rest.

6. Cookies and Analytics

Essential cookies are needed for sign-in, security, and basic functions. Analytics (Google Analytics) is off until you accept it in the privacy banner; we never send invention content, drafts, prompts, file names, project identifiers, names, or email addresses to it, and you can change your choice anytime with "Privacy settings" in the footer. We do not use advertising cookies or sell data to advertising networks.

7. Service Providers

We share personal data only with providers that help us operate the Services, under contracts that restrict their use of the data:

• Google Cloud (hosting and Vertex AI processing).
• Stripe and, depending on the country, Mercado Pago or Pix providers (payments).
• Google Analytics (website analytics, only with consent).
• Mailchimp (newsletter, only if you subscribe).
• Authentication, email, and security providers needed to run the platform.

We may also disclose information to comply with the law or valid legal requests, to protect the rights and safety of users and IPnite^™, in a merger or acquisition subject to confidentiality, or with your consent. We do not sell personal information.

8. International Transfers

IPnite^™ operates from the United States, and our providers may process data in the United States or other countries. When the law requires it, we use appropriate safeguards such as standard contractual clauses (GDPR), the mechanisms of Chapter V of the LGPD (Brazil), and the transfer rules of Mexican and Argentine law.

9. Retention

• Account data: while your account is active and up to 7 years after closure when legal or tax obligations require it.
• Invention materials: while your project is active; archived projects are kept for 3 months, with notices about 30, 7, and 1 day before permanent deletion.
• Billing records: as required by law, typically 7 years.
• Analytics data: up to 14 months in Google Analytics, and in aggregate form afterward.
• Support messages: up to 3 years after the last interaction.

10. Security

We use technical and organizational measures such as TLS encryption in transit, encryption at rest for invention materials, access controls, authentication, audit logs, and incident response. No system is completely secure; if you suspect a problem, write to info@ipnite.com.

11. Your Rights

Depending on where you live, you can request access, correction, deletion, portability, restriction, or objection, and withdraw consent at any time. Write to info@ipnite.com with the subject "Privacy request." We will verify your identity and respond within 30 days or the period set by law, and we will not discriminate against you for exercising your rights.

12. California (CCPA/CPRA)

We collect identifiers, commercial information, internet activity, and professional information as described above, for the purposes in Section 3. We do not sell or share personal information for cross-context behavioral advertising. You may know, delete, and correct your information and limit the use of sensitive information. Requests: info@ipnite.com with the subject "California privacy request"; we respond within 45 days, extendable once by 45 days.

13. European Economic Area and United Kingdom (GDPR)

You also have the right to object to processing based on legitimate interests and to lodge a complaint with your data protection authority (edpb.europa.eu; in the UK, ico.org.uk). We do not make decisions based solely on automated processing that produce legal or similarly significant effects.

14. Brazil (LGPD)

You have the rights in Article 18 of the LGPD, including confirmation, access, correction, anonymization, portability, deletion, information about sharing, and revocation of consent. Data Protection Officer (Encarregado): info@ipnite.com. You may file a complaint with the ANPD (gov.br/anpd).

15. Mexico

You may exercise your rights of access, rectification, cancellation, and opposition (ARCO rights) and revoke your consent by writing to info@ipnite.com. If you believe your rights have been violated, you may go to the competent data protection authority (currently the Ministry of Anti-Corruption and Good Governance).

16. Argentina

You may exercise your rights of access, rectification, updating, and deletion under Law 25,326 by writing to info@ipnite.com. The Agency for Access to Public Information (AAIP), as the enforcement authority of Law 25,326, handles complaints about breaches of personal data protection rules.

17. Minors

The Services are intended for people aged 18 or older. We do not knowingly collect information from minors, and we will delete it if we learn that we have.

18. Changes to This Policy

We may update this Policy. We will publish the new version with its date and, for material changes, notify registered users by email before they take effect.

19. Contact

Ik-Holcan LLC, operator of IPnite^™. Privacy, rights requests, and Data Protection Officer: info@ipnite.com.