Privacy Policy — PatentSonar (DRAFT, under legal review)
Controller. PatentSonar, CNPJ [●], [address], privacy@patentsonar.com. We have not appointed an EU representative or DPO; we will do so if our processing requires it under Art. 27 / Art. 37 GDPR.
What we process and why
| Data | Purpose | Legal basis (GDPR / LGPD) | Retention |
| Business contact details of prospects (name, title, work email, company, country, public source) | Contacting relevant professionals about the Service (account-based, low volume) | Legitimate interest (Art. 6(1)(f) GDPR; Art. 7 X LGPD), balanced by relevance, opt-out in every message and per-country opt-in rules | 12 months from last contact, then deleted unless you become a customer |
| Customer and reader details (name, work email, company, billing contact, tax ID) | Performing the contract, invoicing, delivering issues | Contract (Art. 6(1)(b)); legal obligation for fiscal records (Art. 6(1)(c)) | Contract term + statutory retention (5 years for Brazilian fiscal records) |
| Email engagement (delivered, bounced, complained, unsubscribed) | Deliverability and honouring opt-outs | Legitimate interest | 24 months; suppression list kept indefinitely so we never contact you again |
| Website form submissions | Sending a sample issue you requested | Consent / pre-contractual steps | 12 months |
We do not use tracking pixels for individual open tracking in the newsletter. We do not sell personal data.
Processors. Supabase (database, EU or US region [●]), Postmark / ActiveCampaign (email delivery, US), Paddle (payments, UK/US), NFe.io (Brazilian invoicing), Hostinger (server hosting, [region]), Anthropic (AI assistance in drafting content; no personal data of readers is sent to the model beyond what is needed to draft replies). International transfers rely on the EU Standard Contractual Clauses or adequacy decisions where applicable.
Your rights. Access, rectification, erasure, restriction, portability, objection (including to legitimate-interest marketing at any time) and, in Brazil, the rights in Art. 18 LGPD. Email privacy@patentsonar.com; we respond within 30 days. You may complain to your supervisory authority (for Brazil, the ANPD).
Opt-out. Every marketing email includes a one-click opt-out. Opting out adds your address to a suppression list we check before every send.
Cookies. The website uses no analytics or advertising cookies. The checkout, operated by Paddle, uses cookies necessary to process payment.
Changes. We will post changes here and notify customers by email for material changes.
Version 0.1 draft, 2026-09-25. Not yet reviewed by counsel.