Privacy Policy

1. Scope

Rock Innovation LLC ("we," "us," or "our") operates rockinnovationip.com, including its public website and partner portal. This policy describes the personal information those services process.

2. Information We Collect

Inquiries

When you contact us, we collect the information you provide, which may include:

• Name, email address, phone number, and company
• Your message and any later correspondence

Portal accounts and access

If you create a portal account, we collect your name, company, email address, role, optional biography, and a securely hashed password. We also keep account status, email-verification status, last-login time, access requests and messages, access decisions, and the document categories granted to the account.

Sessions, downloads, and security records

The portal uses a session identifier in an essential cookie. We record document downloads, including the account, document, time, and IP address. Authentication, access, administrative actions, and rate-limit events may also create audit records containing an account identifier, action, time, IP address, and limited technical details. Our hosting and security providers process ordinary request information such as IP address, browser or device information, requested URL, and response status.

3. How We Use Information

We use this information to:

• Receive and respond to inquiries
• Create, authenticate, secure, and administer portal accounts
• Review access requests and provide authorized documents
• Send verification, password-reset, access, and other transactional emails
• Prevent abuse, investigate security events, and maintain audit records
• Maintain business records and comply with applicable obligations

We do not sell personal information or use portal activity for cross-context behavioral advertising.

4. Cookies

The portal uses an essential, HTTP-only session cookie so you can remain signed in. Its configured maximum lifetime is 30 days and it may be refreshed while you use the portal. Cloudflare may use necessary security cookies to protect the site. You can block cookies in your browser, but the authenticated portal will not work without its session cookie.

5. Service Providers and Disclosures

We use service providers to operate the site: Cloudflare for website delivery, DNS, and security; Google Cloud for application hosting, protected-file delivery, operational secrets, and restricted backups; Neon for managed PostgreSQL data storage; and Resend for transactional email. These providers process information for us under their own service and security terms.

We may also disclose information when required by law, to protect the service or its users, or as part of a business transaction involving Rock Innovation. We do not treat a patent citation or a portal account as permission to publish a user's personal information.

6. Retention

Session records expire after no more than 30 days under the current configuration. Encrypted database backups are scheduled for deletion after 30 days. Verification and password-reset links have expiration times. We retain account, access, download, audit, and correspondence records while needed to operate and secure the portal, manage the business relationship, resolve disputes, and meet recordkeeping obligations. That period can extend beyond account deactivation when a security, contractual, or legal reason requires it.

7. Security

We use access controls, encrypted connections, hashed passwords, restricted storage, audit logging, and other reasonable safeguards. No storage or transmission system can be guaranteed completely secure.

8. Your Choices

You may ask to access, correct, or delete personal information by using our contact form. We may need to verify your identity and may retain information where security, contractual, or legal obligations require it. You can sign out to end the active browser session and can ask us to deactivate a portal account.

9. External Links and International Processing

External sites, including USPTO and Google Patents, have their own privacy practices. Our providers may process information in the United States or other locations where they operate.

10. Children

The site and portal are not directed to children under 18, and we do not knowingly collect personal information from them.

11. Changes and Contact

We may update this policy as the service changes. The date above shows the latest revision. For privacy questions or requests, use our contact form.