I need to know where my unpublished application actually goes.
The specifics are below rather than behind a phrase like "industry-standard security": which providers touch your document, in which country, for what purpose, and how long anything is kept.
This page describes the system as built
It is written to be accurate rather than defensive, and it is reviewed by counsel before launch. If anything here does not match what the software does, the software is wrong and we want to know.
What we collect
The document you upload, together with its file name, size and page count.
Facts extracted from that document: application number, dates, examiner, art unit, grounds of rejection, claims and references.
Your email address, and any name, country, phone number or description you choose to provide.
The page you arrived from and the referring site, used to understand which pages help people.
First-party visit analytics for this website: pages viewed in chronological order (without arbitrary query strings), referring site, allowed campaign parameters (such as utm_source), approximate location and network information derived from your IP address when GeoIP is enabled, browser and device category, viewport and screen size, language preferences, timezone, theme preference, coarse scroll depth and approximate active time while the tab is visible, and anonymous identifiers (a per-session id in session storage and a returning-visitor id in local storage). We hash visitor identifiers before storage. We do not use fingerprinting, third-party advertising trackers, or cross-site ad profiling, and we do not sell this data.
A one-way hash of your IP address for abuse prevention, rate limiting, consent records and optional analytics exclusion lists. We do not store the raw IP address alongside your case or contact inquiry.
When you submit the contact form or upload an Office Action, we may link that action to the first-party visit record for the same browser session so we can understand which pages led to the inquiry. That link is for operations and audit, not for advertising.
How we use it
To read and analyze your document and to calculate your reply period.
To contact you about your case and to send you the summary.
To refer you, with your knowledge, to a registered US patent practitioner where you want a response prepared.
To keep the service secure and to prevent abuse.
Who else is involved
| Provider | What it processes | Where |
|---|---|---|
| Cloud object storage | The uploaded document and derived artifacts, encrypted at rest | United States |
| OpenRouter and the selected model provider | The pages of your document sent for analysis, under a no-training arrangement | United States |
| Resend | Email addresses and message metadata. Resend stores account data, metadata and logs in the United States regardless of sending region | United States |
How long we keep things
Documents and everything derived from them are deleted at the end of the retention period, or immediately on your request. Case records without document content — your contact details and the case history — are kept longer, because we may need to show what we told you and when.
Anonymous first-party website analytics (visits and page journeys not tied to a contact inquiry or Office Action upload) are routinely deleted after about 180 days. Visit records linked to an inquiry or case are kept with that record for operational audit.
Deletion is real. When a document is deleted we remove the stored file, the extracted text, any page images and the analysis produced from it, and we record that the deletion happened.
Your rights
Ask for a copy of what we hold about you.
Ask us to correct anything inaccurate.
Ask us to delete your document and your case record.
Ask which providers processed your document, and when.
Withdraw consent to analysis, at which point we stop processing.