Privacy & Cookie Policy

• Account & profile: email, password (stored hashed by our auth provider), name, and any firm, title, bio, or avatar you add.
• Sign-in: if you use Google or LinkedIn single sign-on, we receive your name, email, and profile picture from them.
• Newsletter / waitlist: the email address you submit.
• Learning activity: courses and lessons viewed, progress, time spent, and points/levels (gamification).
• AI assistant: the questions you ask and your conversation history, which we store to provide and improve the assistant.
• Subscriptions & payments: your subscription status. Card details are collected and processed by Stripe — we never see or store full card numbers.
• Technical & usage: IP address, approximate location, browser/device, pages visited, and performance metrics, collected (only with your consent) via Vercel’s privacy-friendly analytics.

• To provide the service — accounts, courses, the AI assistant, and subscriptions (performance of a contract).
• Security, fraud prevention, and improving the product (legitimate interests).
• Optional analytics and marketing emails (consent, which you can withdraw at any time).
• Tax, accounting, and other legal obligations for payments (legal obligation).

We load non-essential analytics only after you click “Accept” in our cookie banner. You can change your choice anytime via Cookie Preferences. We do not use advertising or cross-site tracking cookies.

We do not sell your personal information, and we do not share it for cross-context behavioral advertising. We use the service providers (“processors”) below to operate the site; each processes data only on our instructions:

We may also disclose data where required by law or to protect our rights.

Our providers process data in the United States and other countries. Where we transfer personal data out of the EEA/UK, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses through our processors’ data-processing terms.

We keep personal data for as long as your account is active or as needed to provide the service, then delete or anonymize it, except where longer retention is required for legal, tax, or security reasons. You can delete your account or unsubscribe at any time.

If you are in the EU/UK (GDPR): you may request access, correction, deletion, restriction, or portability of your data; object to processing; and withdraw consent. You may also lodge a complaint with your data protection authority.

If you are in California (CCPA/CPRA): you may request to know, access, delete, or correct your personal information, and opt out of any sale or sharing (we do neither). We will not discriminate against you for exercising these rights.

To exercise any right, email patentlawjoellc@gmail.com. You can manage your profile and email subscriptions from your account page.

We use industry-standard measures (encryption in transit, access controls, hashed passwords) to protect your data. No method is perfectly secure.

The service is not directed to children under 16, and we do not knowingly collect their data.

We may update this policy; we will revise the effective date above and, for material changes, provide notice.

Questions or requests: patentlawjoellc@gmail.com — Patent Law Joe LLC, [POSTAL ADDRESS].