Legal
Privacy Policy
1. The short version
This box summarizes the Privacy Policy in plain language. The full policy below controls if there is any difference.
- We do not sell Personal Data, and we do not use it for targeted advertising or cross-context behavioral advertising.
- We collect only what we need to run Tokkyodo, such as account details, support messages, payment status, and usage and security information, depending on the features you use. Payment providers handle card details, and we do not store full card numbers.
- We do not use your content or Personal Data to train models, or let a provider train on it, without your separate, explicit opt-in.
- On request, we will give you your data, correct it, export it, and delete it, subject to the limited records we must keep.
- Your data may be processed in the United States and other countries where our providers operate. We take appropriate safeguards where law requires them and will tell you which on request.
- You must be at least 21. We do not offer, market, or target Tokkyodo in the European Union, the European Economic Area, the United Kingdom, or Switzerland.
- We will give advance notice of material changes to this policy.
2. Operator and scope
Tokkyodo is a product operated by Algodyne Corporation, a Delaware corporation. In this Privacy Policy, Tokkyodo refers to the product and Services, and Algodyne, we, us, or our refers to Algodyne Corporation.
This Privacy Policy explains how Algodyne collects, uses, shares, protects, and retains Personal Data when people use Tokkyodo websites, applications, accounts, support channels, and related services.
This policy does not apply to third-party websites or services that Algodyne does not control, including payment providers, sign-in providers, and integrations. Those services have their own privacy notices.
3. Regions we do not serve
Algodyne does not offer, market, or target the Services in the European Union, the European Economic Area, the United Kingdom, or Switzerland, and has not appointed a representative in any of them.
Algodyne does not block sign-ups. If you register for or use the Services from the European Union, the European Economic Area, the United Kingdom, or Switzerland, you do so on your own initiative and you are responsible for complying with the local law that applies to you. You acknowledge that Algodyne does not offer or target the Services in those regions, and you give the acknowledgment set out in the Terms before you register.
4. Personal Data we collect
Algodyne may collect the following Personal Data, depending on the features you use.
Account and identity information
- Email address, name or display name, and authentication identifiers.
- Login, session, passkey, multi-factor authentication, recovery, and security metadata where enabled.
- Account, language, notification, consent, and privacy settings.
Support and communications
When a user contacts Algodyne about Tokkyodo, Algodyne may collect contact information, messages, attachments, screenshots, logs supplied by the user, support history, and resolution notes.
Users should not send unnecessary content, credentials, recovery material, payment-card numbers, or other sensitive information through support channels.
Payment and commercial information
Where paid services are enabled, Algodyne may collect plan, entitlement, invoice, tax, payment-status, refund, dispute, and billing-event information, and customer and transaction identifiers issued by the payment provider. Payment providers process payment-card and banking details. Algodyne does not store full payment-card numbers.
Usage, technical, and security information
Algodyne and its service providers may process:
- IP address, browser type and version, operating system, device information, approximate region, referring URLs, request headers, and timestamps.
- Pages visited, feature usage, performance data, errors, and billing events.
- Login, session, authentication, audit, abuse, spam, fraud, rate-limit, and security signals.
5. What Tokkyodo collects
- Account data: your name, email address, and password credential (stored by Tokkyodo's authentication component), your authenticator-app enrollment if you enable two-factor authentication, and your session records, which include the IP address and user agent your browser presents.
- Tenant data: your tenant's name and URL key, legal organization names, workspaces, memberships and roles, invitations, and the policies the tenant sets.
- Audit data: identity events such as tenant creation and membership changes.
- Tenant content: the records and evidence objects your tenant stores, and the patent-source captures and search records it requests.
- Acknowledgment records: when you create a tenant or accept an invitation, Tokkyodo records that you confirmed the age and region acknowledgment, including the legal-core version, the text hash, the language, and the time.
6. Cookies and similar technologies
Tokkyodo uses cookies, local storage, session storage, and similar technologies for authentication, security, requested preferences, consent records, and service operation. Optional analytics and other non-essential technologies are used only with consent where required.
Tokkyodo sets a session cookie when you sign in so that it can recognize your account on later requests; the cookie is secure when Tokkyodo is served over HTTPS. Tokkyodo's authentication component does not cache sessions in the cookie, so every request re-checks the session. Sessions expire after 12 hours. The Tokkyodo web app also keeps display preferences (such as date style) in your browser's local storage; they do not leave your browser.
7. How Algodyne uses Personal Data
Algodyne may use Personal Data to:
- Provide, operate, maintain, secure, and support Tokkyodo.
- Create and manage accounts, sessions, and permissions.
- Process subscriptions, payments, invoices, taxes, refunds, disputes, credits, usage, and entitlements where paid features are enabled.
- Send transactional, security, billing, support, legal, and user-requested communications.
- Detect and prevent abuse, spam, fraud, infringement, attacks, and policy violations.
- Maintain security and audit evidence for sensitive actions.
- Improve reliability, accessibility, usability, performance, and product quality using aggregated usage information and, where required, consented analytics.
- Comply with legal obligations and enforce Algodyne policies and contracts.
Algodyne does not sell Personal Data and does not use Personal Data for targeted advertising or cross-context behavioral advertising.
8. Legal bases
Where applicable law requires a legal basis or a stated ground for processing, Algodyne relies on the following:
| Purpose | Legal basis where applicable |
|---|---|
| Accounts, paid access, and core service features | Contract |
| Storing and processing content or data at the user's request | Contract |
| Features and actions requested by the user, such as imports, exports, sharing, or AI assistance | Contract and consent where required |
| Security, abuse prevention, fraud prevention, rate limiting, and service integrity | Legitimate interests and legal obligation where applicable |
| Transactional and service communications | Contract or legitimate interests |
| Optional marketing communications | Consent |
| Optional analytics and non-essential device technologies | Consent where required |
| Billing, tax, accounting, disputes, and legal compliance | Contract and legal obligation; otherwise Algodyne's legitimate interest in meeting applicable tax and accounting obligations |
Where processing is based on consent, you may withdraw consent at any time. Withdrawal does not affect processing that occurred before withdrawal.
9. Sharing and subprocessors
Algodyne may share Personal Data with:
- Cloud infrastructure, hosting, storage, security, content-delivery, observability, authentication, email, and support providers.
- Payment and billing providers where paid features are used.
- Integration, export, calendar, map, or other third-party providers when requested by the user or needed for a feature the user uses.
- Professional advisers, auditors, insurers, accountants, and legal counsel.
- Courts, regulators, law-enforcement bodies, or other parties where required by law or necessary to protect rights, security, or safety.
- A successor or transaction participant in a merger, acquisition, financing, reorganization, or sale of assets, subject to appropriate safeguards.
Algodyne uses third-party providers to operate Tokkyodo under contracts, data-protection terms, and security reviews where appropriate, and maintains information on the providers actually enabled for production processing and what each processes. Each provider processes Personal Data only to the extent needed for its stated purpose and also under its own privacy policy.
If you follow a link to a third-party site or service, that service receives the information your browser sends to it and handles that information under its own terms and privacy policy.
Tokkyodo runs on Cloudflare: Workers for the application, D1 for account, tenant identity and operational records, R2 for evidence objects, and Queues for background work.
When a tenant requests a patent-source capture, Tokkyodo sends the query to the European Patent Office (data.epo.org), the United States Patent and Trademark Office (api.uspto.gov), or WIPO PATENTSCOPE (www.wipo.int), as the tenant selects.
10. International processing
Algodyne Corporation is a United States corporation. Personal Data is processed in the United States and in other countries where Algodyne, its infrastructure providers, or its subprocessors operate. Some of that processing is necessary to provide the Services you ask for, such as hosting, payment processing, and email delivery, and by using the Services you understand that your Personal Data will be transferred to and processed in those countries.
Algodyne takes appropriate safeguards where applicable law requires them for a transfer, such as contract terms with providers, and will ask for your consent where the law requires it. For users in Japan, where the Act on the Protection of Personal Information requires your consent or other measures before Personal Data is provided to a third party in a foreign country, Algodyne will obtain that consent or take those measures. On request, Algodyne will provide details of the safeguards that apply to a particular transfer. Algodyne does not state that any specific transfer mechanism applies to its processing unless the corresponding contractual and operational evidence exists.
11. Retention
Algodyne retains Personal Data only for as long as reasonably necessary for the purposes collected, including service operation, user instructions, security, abuse prevention, billing, tax, accounting, disputes, backups, audit integrity, and legal compliance.
| Data type | Retention approach |
|---|---|
| Account information | Retained while the account is active and for a limited period afterward where legally or operationally necessary |
| Support records | Retained while needed to provide support and to resolve legal, security, or quality matters |
| Security and audit records | Retained for service integrity, abuse prevention, incident investigation, and legal compliance |
| Billing and tax records | Retained as required for accounting, tax, fraud-prevention, chargeback, and legal obligations where paid features are enabled |
Deleting an account or a request record may not immediately remove information from backups, security logs, legal records, billing records, already-delivered exports or emails, caches, or third-party archives.
- Sessions expire 12 hours after they begin.
- Tenant records and evidence are revised by appending and superseding revisions, so earlier revisions are retained.
- Each tenant has a retention policy. By default, a destructive action requires review, and a legal hold takes precedence.
- Account data, tenant data, audit events, and acknowledgment records are not deleted automatically; they are kept for as long as the account and tenant exist.
12. Security
Algodyne uses technical and organizational controls intended to protect Personal Data, including encrypted transport, access controls, least-privilege production access, authentication controls, environment separation, monitoring, and data minimization.
No service can guarantee absolute security. Users are responsible for protecting credentials, devices, browsers, sessions, recovery material, and email accounts.
13. Rights and choices
On request, Algodyne will:
- Give you access to your Personal Data.
- Correct inaccurate Personal Data.
- Delete your Personal Data.
- Export your Personal Data to you.
- Stop optional marketing communications to you.
- Honor your withdrawal of consent.
To the extent Algodyne agrees or the law that applies to you requires, you may also:
- Object to or restrict certain processing.
- Opt out of certain sale, sharing, targeted advertising, or profiling.
- Appeal certain privacy-request decisions.
Privacy requests can be sent to privacy@algodyne.com (support@algodyne.com as a fallback). Algodyne will respond within a reasonable time and in any case within the time the applicable law requires. Algodyne may verify identity before completing a request. Some information may be retained where necessary for security, legal, billing, tax, fraud-prevention, audit-integrity, backup, or dispute purposes.
14. California privacy notice (CCPA/CPRA)
If California privacy laws apply to a user or to Algodyne, California users may have rights to know, access, correct, delete, and port Personal Data, and to opt out of certain sale, sharing, targeted advertising, or sensitive-information uses.
Tokkyodo's current posture is that it does not sell Personal Data and does not use Personal Data for cross-context behavioral advertising. Where legally required, Algodyne will honor applicable opt-out preference signals such as Global Privacy Control for browser-based sale, sharing, or targeted-advertising choices.
15. Children
Tokkyodo is intended only for people who are at least 21 years old.
Algodyne does not knowingly collect Personal Data from anyone under 21, and Tokkyodo does not offer a parental or guardian-consent path. If Algodyne learns that a person under 21 supplied Personal Data or created an account, Algodyne will disable the relevant access and delete the information unless continued retention is legally required.
16. Changes to this policy
Algodyne may update this Privacy Policy as Tokkyodo, providers, laws, or data practices change. The current policy will be posted on the Tokkyodo legal page with its effective and last-updated dates.
Algodyne will not make surprise changes. For a material change, including one that expands how Personal Data is used or shared, Algodyne will give you at least 30 days' notice by email or by a prominent notice in the product before it takes effect, except where the law requires a change sooner. A new use that needs your consent will wait for that consent.
17. Language
Translations of this Privacy Policy, including the Japanese version, are provided for convenience. If there is any difference or conflict between a translation and the English version, the English version controls.
18. Contact
- Privacy requests, legal notices, and policy questions: privacy@algodyne.com (support@algodyne.com as a fallback)
- Operator and controller: Algodyne Corporation, Delaware, United States
← Back to home · Terms · Privacy · Security