Privacy Policy: How We Protect Your Patent Data

At Boundly Inc. (“Boundly,” “we,” “us,” or “our”), we respect your privacy and are committed to protecting any information we obtain from you or about you. This Privacy Policy describes our practices with respect to Personal Information we collect from users (“you”) of our website and services (collectively, “Services”).

This Privacy Policy applies to anyone who visits our website, creates an account, uses our platform, purchases our products, or otherwise interacts with our Services. It should be read alongside, and in addition to, our Terms & Conditions.

(A) Unless otherwise defined in this Privacy Policy, terms used have the same meaning as in the Terms & Conditions.

(B) This Privacy Policy was last modified on the date above and may be updated to reflect changes in legislation or our practices. You can always find the most recent version on our Site. If we make substantial changes, we will try to provide at least a 30-day notice prior to any changes taking effect. By continuing to access or use our Services after those revisions become effective, you agree to be bound by the revised terms. If you do not agree to the new terms, please stop using the Services.

(C) We process your data with due care, in accordance with all applicable laws and regulations, including the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other relevant privacy laws.

(D) The Privacy Policy only covers data processing carried out by us. The Privacy Policy does not address, and we are not responsible for, the privacy practices of any other parties.

(E) We do not knowingly collect or ask for information from people under the age of 18. If you are such a person, please do not use our Service or send us your information. We delete information that we learn is collected from a person under the age of 18 without verified parental consent. If you believe we have inadvertently collected data from someone under 18, please contact us immediately at [email protected].

(F) By accessing our Services you agree to the following Privacy Policy.

1. Who processes your personal data?

Your personal data are being processed by Boundly Inc. (the “Controller,” “we,” “us,” or “our”).

To learn more about personal data management or if you have any other questions, you’re welcome to contact us at [email protected] or by phone at +1 (302) 600-0668.

2. What personal data is processed?

We may collect the following types of information about you:

2.1 Account and Profile Information

When you create an account, request a demo, or communicate with us, we may collect:

Account information: name, email address, job title, company name, and contact details.
Profile information: username, password, and any additional profile details you choose to provide.
Single Sign-On (SSO) data: if you log in through a third-party service such as Google, we receive the data that service shares with us (typically your name, email, and profile picture).

2.2 Support and Marketing Information

Inquiries and support: name, email, and the content of messages you send us through live chat, email, or contact forms.
Marketing: email address if you subscribe to our newsletter or marketing communications. You may unsubscribe at any time.

2.3 Payment Information

When you purchase our Services, we may collect payment card details, billing address, and purchase history. Payment processing is handled by our third-party payment processor (Stripe). We do not store full card numbers on our servers.

2.4 Technical and Usage Information

We and/or our authorized external service providers may automatically collect technical data when you visit or interact with our website or platform. This may include the URL of the website you visited before using our Service, the time and date of your visit, pages viewed, IP address, browser type, the type of device accessing our Service, time spent on the website, and other similar technical information.

2.5 Cookies and Tracking Technologies

We use cookies and similar technologies to make our Services work properly, remember your preferences, analyze trends, and improve your experience. We inform you about the use of cookies on your device when you visit our Services for the first time and, if applicable, we ask for your consent. You can withdraw your consent at any time through your browser settings.

We use the following categories of cookies:

Required cookies: essential to navigate the Services and use their features.
Performance cookies: to analyze how you use our Services and improve functionality.
Analytical cookies (with consent): to collect data such as device data, browsing data, and interactions with the Services.
Marketing cookies (with consent): for retargeting and personalization.

For full details on how we use cookies, including how to manage your preferences, see our Cookie Policy.

A non-exclusive list of our subprocessors and third-party cookie providers can be found on our subprocessors page. We do not sell personal data.

3. What are the purposes and legal basis for processing your personal data?

We process your personal data in order to:

3.1 Carry out the agreement existing between us

This purpose includes creating and providing your account, informing you about updates, responding to queries, processing feedback, and resolving issues.

Legal basis: Performance of a contract.

3.2 Market our Services

We may market current or future Services to you if you subscribe to our newsletter or consent to marketing cookies.

Legal basis: Your consent or legitimate interest (if you have an existing relationship with us).

3.3 Improve our Services

This purpose includes influencing current and future features, preventing and detecting security flaws, and analyzing usage.

Legal basis: Legitimate interest.

We do not use any user-submitted patent documents, confidential IP, or proprietary information to train our AI models. All user data remains strictly confidential and is never used for model training.

3.4 Ensure security and prevent fraud

We process certain data to protect our Services, detect and prevent fraudulent activity, enforce our terms, and maintain the safety and integrity of our platform and our users.

Legal basis: Legitimate interest and, where applicable, legal obligation.

4. Who are recipients of your personal data?

We only share your personal data within our organization and with carefully selected subprocessors who help us provide the Services. We have taken appropriate contractual and organizational measures to ensure your personal data are processed in accordance with all applicable laws.

We do not share your personal data with any recipients outside of this group unless:

It is necessary for the performance and improvement of our Services (e.g., cloud hosting, analytics, payment processing).
It is necessary for legal reasons (e.g., court order, fraud prevention).
It is shared with professional advisors, such as legal counsel, auditors, or security consultants, who are bound by confidentiality obligations.
It is part of a business transfer (merger, acquisition, or sale of assets).

A non-exclusive list of our subprocessors is available on our subprocessors page. We do not sell personal data.

5. Do we transfer your data to countries outside the EU/EEA?

We may transfer your personal data to countries outside the European Union and the European Economic Area where we engage with external service providers. In such cases, we use appropriate safeguards such as standard contractual clauses or binding corporate rules to ensure the same level of protection as in the EU/EEA.

6. What is the storage period?

We store your personal data only as long as it is legally permitted and necessary for the purposes for which the data were collected. We retain data for the duration of our relationship with you plus a reasonable period thereafter for legal or business purposes (typically 5–7 years for accounting records).

7. What are your rights?

You have the following rights (free of charge):

Right of access
Right to rectification
Right to erasure
Right to restriction of processing
Right to data portability
Right to object (including to direct marketing)
Right to withdraw consent

You may exercise these rights by emailing [email protected] or calling +1 (302) 600-0668. We may require confirmation of your identity. You may also lodge a complaint with the local supervisory authority for data protection.

8. How do we secure your data?

We implement commercially reasonable technical, administrative, and organizational measures (including encryption, access controls, firewalls, and regular security assessments) to protect Personal Information from loss, misuse, and unauthorized access. We maintain security practices aligned with SOC 2 Type II and ISO 27001 standards. Access to personal data is limited to employees and contractors on a need-to-know basis. We regularly test our systems to ensure they remain secure.

In the event of a personal data breach that is likely to affect your privacy, we will notify both the relevant supervisory authority and affected individuals as required by applicable law, and as soon as reasonably possible.

9. California Residents (CCPA)

If you are a California resident, you have additional rights under the CCPA, including the right to know, delete, and opt out of the sale of your personal data. We do not sell personal data. You may exercise these rights by emailing [email protected].

10. Changes to this Privacy Policy

We reserve the right to change this Privacy Policy at any time. We will post an updated version on this page and notify you of material changes.

11. How to Contact Us

Please contact us if you have any questions or concerns:

Email: [email protected]
Phone: +1 (302) 600-0668