Scope
This Privacy Policy explains how Acorium handles information through acorium.tech, customer and administrator accounts, project intake, uploads, payments, communications, and report delivery. It does not govern third-party websites or services that have their own privacy notices.
Information we collect
- Account information: name, email address, authentication identifiers, account role, and account history.
- Project information: invention descriptions, product details, business plans, answers, goals, constraints, clarification responses, and customer instructions.
- Uploads and deliverables: images, PDFs, drawings, file metadata, report content, delivery notes, and completed reports.
- Communications: support messages, project questions, responses, notifications, and administrative notes.
- Transaction information: package, amount, currency, payment status, Square identifiers, refunds, and fraud or dispute information. Acorium does not directly receive complete card numbers from Square-hosted Checkout.
- Technical information: IP address and request logs that may be generated by hosting, authentication, security, and payment providers; browser and device information; and essential session data.
How we use information
- Create and secure accounts.
- Save drafts and keep projects separated by customer.
- Perform custom research and development work.
- Request clarifications and communicate project status.
- Generate, review, deliver, and preserve reports.
- Create checkout sessions, verify payments, process refunds, and prevent fraud.
- Maintain audit records, investigate errors, and protect the service.
- Comply with legal, tax, accounting, and dispute-resolution obligations.
Acorium does not sell personal information or project content and does not use customer information for targeted advertising.
Invention content and confidentiality
Project content may contain commercially sensitive ideas. Acorium is designed to keep customer projects in authenticated, private workspaces. Authorized Acorium personnel may access project content when needed to provide the service, answer support requests, investigate security issues, or comply with law.
Acorium may use human-reviewed research tools, including AI-assisted tools, to organize or analyze project information. Acorium seeks to limit unnecessary direct identifiers when using research tools. Processing by an outside research provider remains subject to that provider's terms and security practices.
Service providers
Acorium relies on vendors that process information to provide infrastructure and business operations. Current or planned providers include:
- Supabase: authentication, database, private file storage, and access control.
- Vercel: website hosting, server functions, and request delivery.
- Square: hosted checkout, payment processing, fraud prevention, receipts, and refunds.
- Resend: transactional project and account email when enabled.
- Research and professional service providers: tools or specialists used to complete a project, subject to reasonable need and access limits.
Providers may process information in the United States or other locations where they operate.
Payment information
Square collects payment details on its hosted checkout page. Acorium receives transaction status, amount, currency, customer email, payment identifiers, and related information needed to verify and support the order. Square handles payment information under its own privacy terms.
Cookies, session storage, and similar technology
Acorium uses essential browser storage to keep a signed-in session, preserve a pending email confirmation, and support security and navigation. The current Acorium website does not use advertising cookies or sell browsing information.
Square and other third-party services may use cookies or similar technology on their own pages for authentication, fraud prevention, security, and payment processing. Their practices are governed by their own policies.
When information may be disclosed
Acorium may disclose information:
- To service providers acting for Acorium.
- To authorized administrators and project personnel with a legitimate need.
- At the customer's direction or with consent.
- To comply with lawful requests, court orders, or legal obligations.
- To investigate fraud, abuse, security threats, or violations of policy.
- In connection with a merger, financing, acquisition, reorganization, or sale of assets, subject to appropriate confidentiality and notice where required.
Data retention and deletion
Acorium retains account and project information for as long as reasonably needed to provide the service, maintain delivered reports, support continuing tiers, resolve disputes, prevent fraud, and satisfy legal, tax, accounting, and security obligations.
Customers may request account or project deletion. Some records may be retained when legally required or reasonably necessary for payment records, audit history, security, dispute resolution, backups, or enforcement. Deleting an account can remove access to delivered reports, so customers should download copies first.
Security
Acorium uses access controls, private storage, authenticated sessions, payment signature verification, and other administrative and technical measures intended to protect information. No internet service or storage system can guarantee absolute security.
Customers should use a unique password, protect account access, avoid sending sensitive credentials by email, and report suspected unauthorized access promptly.
Your choices and privacy rights
Depending on where you live, you may have rights to request access, correction, deletion, portability, restriction, or information about disclosures. You may also object to or appeal certain processing where applicable.
Send a request from the email connected to your account. Acorium may verify identity before responding. Rights can be limited by legal exceptions, active transactions, security needs, and record-retention duties. Acorium will not discriminate against a customer for exercising an applicable privacy right.
International processing
Acorium is operated for a U.S.-based service, and information may be processed or stored in the United States and other countries where service providers operate. Privacy laws in those locations may differ from those where you live.
Children
Acorium services are intended for adults. Acorium does not knowingly permit children under 18 to purchase services or create project accounts. If you believe a minor provided personal information, contact Acorium so the account can be reviewed and removed when appropriate.
Changes and contact
Acorium may update this Privacy Policy as services, providers, or legal requirements change. The effective date will be revised when a material update is posted.