Privacy Policy
Effective date: July 15, 2026
This policy explains what information DeepLaw LLP, operating its Inventiply Foundry™ division (“Inventiply,” “we,” “us”), collects through Inventiply.com (the “Site”), how we use and share it, and the rights you have over it. We have tried to write it the way we write everything else: in plain English. For personal information collected through the Site, DeepLaw LLP is the “controller” (or equivalent term under your local law).
Controller / contact: DeepLaw LLP, 548 Market Street #22, San Francisco, CA 94104. Privacy@Inventiply.com
1. What we collect
Information you give us.
- Free-report intake, step one: your name, work email, and which description best fits you. If you complete step one, this information is retained at that point — even if you do not finish the form — so we can follow up. You can ask us to delete it at any time (Section 8).
- Free-report intake, step two, and infringement-scan intake: technical detail about your invention, patent, or portfolio. These materials are also governed by the Submission Confidentiality Terms you accept before submitting them.
- Contact form and email: whatever you choose to send us, plus your contact details.
- Purchases: if you buy a paid Report, our payment processor collects payment details; we receive confirmation of payment, not your full card number.
Information collected automatically. Server logs (IP address, browser and device type, pages requested, timestamps) and cookies. Today the Site sets only the small number of cookies WordPress needs to function. We expect to add analytics and similar technologies (for example, Google Analytics or a comparable service, and possibly advertising or conversion trackers). When we do: this policy and our cookie notice will list them; non-essential cookies will load only with your consent where consent is required (for example, in the EEA and UK); and you will be able to change your choice at any time through the cookie settings link on the Site.
Information from other sources. Public records and publicly available sources (for example, patent office records) used to perform the analysis you request, and referral information if a colleague or event (such as a professional association offer) points you to us.
We do not collect government identifiers, biometric data, or precise geolocation, and we do not knowingly collect any “sensitive” categories of personal information as defined by the laws above, except to the extent you choose to include something in materials you submit.
2. How we use information — and our legal bases
| Purpose | Examples | GDPR legal basis |
|---|---|---|
| Providing the Services | producing your Report; responding to your inquiry; processing payment | Contract (Art. 6(1)(b)) |
| Following up | replying to a step-one submission; status updates | Contract; legitimate interests (Art. 6(1)(f)) |
| Running and protecting the Site | logs, debugging, security, fraud prevention | Legitimate interests |
| Improving the Services | understanding which pages and Reports are useful | Legitimate interests; consent where required for analytics cookies |
| Marketing | sending you information about our services if you have asked for it; you can opt out at any time (CAN-SPAM / CASL compliant) | Consent; legitimate interests for existing clients |
| Legal compliance | responding to lawful requests; record-keeping; enforcing our Terms | Legal obligation; legitimate interests |
We do not use your personal information for automated decisions that produce legal or similarly significant effects about you.
3. AI-assisted processing
We use artificial-intelligence tools, including third-party AI service providers, to help analyze the materials you submit and to prepare Reports. These providers process your information under contracts that restrict their use of it to providing services to us. The nature and extent of human review for a given Report is stated in the Report itself.
4. How we share information
We share personal information only: within DeepLaw LLP (Inventiply is a division of the firm, and formal legal work is performed by the firm); with service providers (hosting, email, form and payment processing, AI providers, analytics when added) bound to use it only for us; with your professional advisors at your direction; for legal reasons (to comply with law, enforce our Terms, or protect rights, safety, and property); and in a business transition (merger, reorganization, or transfer of the practice), in which case this policy continues to apply until changed.
We do not sell personal information, and we have not sold it in the preceding 12 months. We do not currently “share” personal information for cross-context behavioral advertising as California defines that term. If we adopt advertising trackers in the future, we will update this policy, honor opt-out rights, and treat a Global Privacy Control (GPC) signal from your browser as a valid opt-out where the law requires.
5. International transfers
We are located in the United States and process information there. Where we receive personal information from the EEA, the United Kingdom, Switzerland, or Canada, we protect transfers using appropriate safeguards — including the European Commission’s Standard Contractual Clauses (and the UK addendum) with our service providers where required. You may request a copy of the relevant safeguards through the contact above.
6. How long we keep information
We keep personal information only as long as needed for the purposes above: intake and Report materials for as long as needed to provide and support the work and to meet professional-responsibility and record-keeping obligations; correspondence for as long as relevant to the relationship; logs for a short operational window. When information is no longer needed, we delete it or de-identify it.
7. Security
We use administrative, technical, and physical safeguards appropriate to the sensitivity of the information — including access controls, encryption in transit, and confidentiality obligations on personnel and vendors. No system is perfectly secure; please use the intake forms rather than ordinary email for sensitive technical detail.
If we confirm a breach of security affecting your personal information, we will notify you without undue delay — and in any event within seventy-two (72) hours of confirmation — by email or by prominent notice on the Site, and we will comply with all applicable breach-notification laws.
8. Your rights
If you are in the EEA, UK, or Switzerland, you have the right to access, correct, delete, and receive a copy of your personal data; to restrict or object to processing (including processing based on legitimate interests); to withdraw consent at any time (without affecting prior processing); and to lodge a complaint with your supervisory authority.
If you are in Canada, you may request access to and correction of your personal information, withdraw consent subject to legal and contractual limits, and complain to the Office of the Privacy Commissioner of Canada. We collect, use, and disclose personal information consistent with PIPEDA and applicable provincial laws.
If you are a resident of California or another U.S. state with a comprehensive privacy law (including Virginia, Colorado, Connecticut, Utah, Texas, Oregon, and Montana), you may have the right to: know and access the personal information we hold about you; obtain it in a portable format; correct it; delete it; opt out of sale, sharing, and targeted advertising (we do none of these today); and not be discriminated against for exercising your rights. Where state law provides an appeal right, you may appeal a refusal by replying to our decision, and we will respond as the law requires; if we deny your appeal, you may contact your state attorney general.
Exercising rights. Email Privacy@Inventiply.com with your request. We will verify your identity using the information we already hold (typically by confirming control of your email address), respond within the time your law requires, and honor requests from authorized agents where the law provides. We will not require you to create an account.
California “Shine the Light.” We do not disclose personal information to third parties for their own direct marketing.
9. Cookies, Do Not Track, and GPC
When non-essential cookies are added, a cookie notice will list each cookie and its purpose; today the Site sets only the cookies WordPress needs to function. Because browser “Do Not Track” signals lack a common standard, we do not respond to DNT; we do honor GPC signals as described in Section 4.
10. Children
The Site is a professional service directed to adults. We do not knowingly collect personal information from children under 13 (or under 16 where a higher age applies), and we will delete any such information we learn we hold.
11. California notice at collection — categories
For CCPA/CPRA purposes, in the last 12 months we have collected: identifiers (name, email, IP address); professional information (role, firm); commercial information (Services purchased); internet activity (logs, pages viewed); and the contents of your submissions and communications. Sources: you, your devices, and public records. Purposes: Section 2. Disclosed for business purposes to the recipients in Section 4. Sold or shared: none. Retention: Section 6. Sensitive personal information: none collected intentionally; any included in your submissions is used only to provide the Services and is not used to infer characteristics.
12. Changes to this policy
We will post any revised policy here with a new effective date, and flag material changes on the Site. Your continued use of the Site after the effective date means the revised policy applies.
13. Contact us
DeepLaw LLP · Inventiply Foundry™
548 Market Street #22, San Francisco, CA 94104
Privacy@Inventiply.com