Privacy Policy

1. What we collect

Information you give us:

• your email address, and the mark (serial number) or name you asked us to watch, when you use "Watch this mark";
• for an account: your name, email address and password (we store only a one-way hash, never the password itself), the marks you watch, an optional backup email address, and your settings (email language, time zone, paused alerts);
• the names and classes you enter in the clearance report, and the report we build from them, so you can read it again;
• your choices about similar marks: how close a mark must be for you to hear of it, and the marks you marked as not relevant;
• what you write to us at [email protected].

Information collected when you use TMHawk:

• when you sign in, the IP address and browser description (user agent) of each session;
• for up to an hour, the email address and IP address of sign-in and password-link attempts, to stop people guessing passwords (the IP address of your own sessions tells your connection apart, so someone else's failed attempts do not lock you out);
• a record of each email we send you (address, subject, content, time, delivery result) and, if an address bounces, a note not to write to it again;
• technical logs kept by our servers and our network provider, which can include IP addresses, for security and troubleshooting;
• the names searched on TMHawk and the USPTO's answer, without who searched them, kept to answer the same search again without asking the USPTO. A name that already has at least three USPTO records can get a public page listing those records (tmhawk.com/name/...); the page never says who searched it or that anyone did, and a name with fewer records never gets one.

Public records. TMHawk shows public USPTO trademark records, which can include the names and addresses of owners and attorneys and correspondence email addresses, and public domain name data. We show them as their source publishes them. Changes to a USPTO record have to be made with the USPTO.

We do not collect payment card details. If we add paid plans, our payment processor (Stripe) will collect them directly, and this policy will be updated first.

2. How we use it

• to watch your marks and send you the alerts and confirmations you asked for;
• to run your account, sign you in and keep it secure;
• to prevent abuse, such as password guessing or automated scraping;
• to answer you when you write to us;
• to comply with the law and protect our rights.

We do not sell your personal information, we do not share it for advertising, and we do not build profiles of you for advertising.

Legal bases (for people in the European Economic Area, the UK and similar places): we process your information to provide the service you asked for (contract), with your consent where we ask for it (for example, confirming the email that receives alerts), for our legitimate interests in keeping TMHawk secure and working, and to meet legal obligations.

3. Cookies and browser storage

• Session cookie on app.tmhawk.com: keeps you signed in for up to 30 days. It is needed for the account to work.
• Browser storage (localStorage, keys starting with "tmh:"): remembers your light or dark theme, your language, the marks whose alerts you opened, and the email you last used in "Watch this mark", so the page can show it back to you. It stays in your browser; you can clear it in your browser settings.
• Fonts load from Google Fonts, so Google receives your IP address when the page loads (Google's privacy policy).
• Our network provider, Cloudflare, may set cookies that are strictly needed for security.

We use no analytics, advertising or tracking cookies. Because we do not track you across sites, there is nothing for Do Not Track or Global Privacy Control signals to turn off.

4. Who else handles it

We share personal information only with providers that help us run TMHawk, only as much as they need, and only for that purpose:

• Cloudflare, which carries traffic between you and our servers;
• the data center provider in the United States where our own servers run;
• SMTP2GO, which relays the emails we send from our own mail server;
• Google Fonts, as described above.

We also disclose information when the law requires it, to protect people's safety or our rights, or to a company that takes over TMHawk, which would remain bound by this policy.

When TMHawk looks up a mark, it sends the serial number or name to the USPTO's systems. A clearance report also sends the name to Apple's app search, to the SEC's company search and to the open data portals of Colorado and Oregon. None of them gets your email address or account details.

If you turn on a webhook in Integrations, the title of each alert, the mark and a link go to the address you chose (for example Slack or Discord), under that service's terms. A personal token lets the assistant you connect read your marks; you can revoke it at any time. A calendar subscription address lets the calendar app you give it read your marks' deadlines; you can change or turn it off at any time.

5. How long we keep it

• Account information: while your account is open. When you close it in Settings, it is switched off at once; we then delete or anonymize your personal information within 90 days of a written request, except what the law requires us to keep.
• "Watch this mark" emails: until you unsubscribe. After that we keep the address on a do-not-email list, so we can respect your choice.
• Clearance reports and your choices about similar marks: while your account or watch is active.
• Sign-in sessions: they expire after 30 days. Sign-in attempts and password-link requests: up to an hour.
• Records of emails we sent: while your account or watch is active, so we can show what was sent and when. They are deleted with the rest of your information when you ask.
• Backups: copies are overwritten on a rolling schedule, so deleted information disappears from them over time.

6. Security

We use encrypted connections (HTTPS), store passwords only as one-way hashes, keep our database on a private network, limit sign-in attempts and limit who can access our servers. No system is perfectly secure; if a breach affects your personal information, we will tell you as the law requires.

7. Your choices and rights

You can change your settings, pause alerts or close your account in Settings, and stop alerts for a mark with the link in its emails. You can also ask us to:

• tell you what personal information we hold about you and give you a copy, in a portable format if you ask;
• correct it;
• delete it;
• stop a particular use of it, or withdraw a consent you gave.

Write to [email protected] from the email address on your account or watch. We may need to confirm it is you, and we answer within 30 days. We will not treat you differently for using these rights.

California residents have these rights under the CCPA, including the right to know, delete and correct. We do not sell or share personal information as those laws define it. People in the EEA or the UK can also object to processing based on legitimate interests and complain to their data protection authority.

8. Where your information is stored

Our servers are in the United States, and your information is stored and processed there. If you use TMHawk from another country, your information is transferred to the United States, whose data protection laws may differ from yours.

9. Children

TMHawk is for adults who look after trademarks. It is not meant for anyone under 18, and we do not knowingly collect information from children under 13. If you think a child has given us information, write to us and we will delete it.

10. Changes to this policy

We will update this policy before we collect anything new or use information in a new way. The date at the top shows the latest version. For a change that matters, we will email account holders and people watching a mark at least 30 days before it takes effect.

11. Contact

Creando Pro LLC, 1276 Industrial Blvd, Suite 2, Gainesville, GA 30501, USA.

Email: [email protected].