Privacy Policy

Scope

This Privacy Policy explains how Acorium handles information through acorium.tech, customer and administrator accounts, project intake, uploads, payments, communications, and report delivery. It does not govern third-party websites or services that have their own privacy notices.

Information we collect

• Account information: first and last name, email address, mailing address, authentication identifiers, account role, account history, and agreement-acceptance records such as the accepted version and timestamp. Confirmation email and confirmation password fields are used only to verify matching entry during registration; Acorium stores one canonical email and does not store plaintext passwords.
• Project information: invention descriptions, product details, business plans, answers, goals, constraints, clarification responses, and customer instructions.
• Uploads and deliverables: images, PDFs, drawings, file metadata, report content, delivery notes, and completed reports.
• Communications: support messages, project questions, responses, notifications, and administrative notes.
• Transaction information: package, amount, currency, payment status, Square identifiers, refunds, and fraud or dispute information. Acorium does not directly receive complete card numbers from Square-hosted Checkout.
• Technical information: IP address and request logs that may be generated by hosting, authentication, security, and payment providers; browser and device information; and essential session data.

How we use information

• Create and secure accounts, maintain customer contact information, and keep account records tied to the correct customer.
• Save drafts and keep projects separated by customer.
• Perform custom research and development work.
• Request clarifications and communicate project status.
• Generate, review, deliver, and preserve reports.
• Create checkout sessions, verify payments, process refunds, and prevent fraud.
• Maintain audit records, investigate errors, and protect the service.
• Comply with legal, tax, accounting, and dispute-resolution obligations.

Acorium does not sell personal information or project content and does not use customer information for targeted advertising.

Invention content, anonymous research, and confidentiality

The account-free homepage Research Engine holds submitted fields, intermediate results, and the generated PDF temporarily in Acorium server memory. That content is not written to Acorium's persistent project database or Workspace, normally expires about 30 minutes after the run's last update, and cannot be recovered after expiration. Limited in-memory anti-abuse request data may remain for about one hour.

Account profiles, agreement-acceptance records, and content a customer intentionally saves to an authenticated Workspace follow the separate account retention rules below. An anonymous Research Engine submission is not automatically added to a Workspace, even when the visitor also has an account.

The current Research Engine uses deterministic research rules, not Claude, GPT, or another generative model. It converts submitted fields into research queries, retrieves public information, evaluates source support, and assembles the selected PDF. Only submitted text or derived query text reasonably needed to retrieve public information may be sent to outside search or retrieval providers. Those providers may process connection and query data under their own terms and privacy practices.

Acorium treats nonpublic invention content as confidential and limits access to authorized personnel and service providers with a legitimate operational need. The Confidentiality, Non-Use & Project Submission Agreement states Acorium's confidentiality and non-use commitments. It is not a patent filing and cannot promise absolute security.

Service providers

Acorium relies on vendors that process information to provide infrastructure and business operations. Current or planned providers include:

• Supabase: authentication, database, private file storage, and access control.
• Vercel: website hosting, server functions, and request delivery.
• Square: hosted checkout, payment processing, fraud prevention, receipts, and refunds.
• Google Gmail: transactional project messages and attached delivery PDFs sent from AcoriumLLC@gmail.com.
• Research and professional service providers: tools or specialists used to complete a project, subject to reasonable need and access limits.

Providers may process information in the United States or other locations where they operate.

Payment information

Square collects payment details on its hosted checkout page. Acorium receives transaction status, amount, currency, customer email, payment identifiers, and related information needed to verify and support the order. Square handles payment information under its own privacy terms.

Cookies, session storage, and similar technology

Acorium uses essential browser storage to keep a signed-in session, preserve a pending email confirmation, and support security and navigation. The current Acorium website does not use advertising cookies or sell browsing information.

Square and other third-party services may use cookies or similar technology on their own pages for authentication, fraud prevention, security, and payment processing. Their practices are governed by their own policies.

When information may be disclosed

Acorium may disclose information:

• To service providers acting for Acorium.
• To authorized administrators and project personnel with a legitimate need.
• At the customer's direction or with consent.
• To comply with lawful requests, court orders, or legal obligations.
• To investigate fraud, abuse, security threats, or violations of policy.
• In connection with a merger, financing, acquisition, reorganization, or sale of assets, subject to appropriate confidentiality and notice where required.

Data retention and deletion

Anonymous Research Engine content is temporary: submitted fields, intermediate results, and the PDF normally expire from server memory about 30 minutes after the run's last update, while limited in-memory anti-abuse request data may remain about one hour. Acorium does not write that anonymous project content to its project database or Workspace, and users must download the PDF before it expires.

Account information, agreement-acceptance records, and content intentionally saved to a Workspace persist for as long as reasonably needed to provide the account and saved-work features. Customers may delete content or request account deletion. Acorium may retain limited records required for payment, tax, fraud prevention, audit, security, disputes, backups, law, enforcement, or proof of delivery. Customers should download any saved reports they want to keep before deleting an account.

Security

Acorium uses access controls, private storage, authenticated sessions, payment signature verification, and other administrative and technical measures intended to protect information. No internet service or storage system can guarantee absolute security.

Customers should use a unique password, protect account access, avoid sending sensitive credentials by email, and report suspected unauthorized access promptly.

Your choices and privacy rights

Depending on where you live, you may have rights to request access, correction, deletion, portability, restriction, or information about disclosures. You may also object to or appeal certain processing where applicable.

Send a request from the email connected to your account. Acorium may verify identity before responding. Rights can be limited by legal exceptions, active transactions, security needs, and record-retention duties. Acorium will not discriminate against a customer for exercising an applicable privacy right.

International processing

Acorium is operated for a U.S.-based service, and information may be processed or stored in the United States and other countries where service providers operate. Privacy laws in those locations may differ from those where you live.

Children

Acorium services are intended for adults. Acorium does not knowingly permit children under 18 to purchase services or create project accounts. If you believe a minor provided personal information, contact Acorium so the account can be reviewed and removed when appropriate.

Changes and contact

Acorium may update this Privacy Policy as services, providers, or legal requirements change. The effective date will be revised when a material update is posted.