TrademarkDir

Privacy Policy

Last updated: January 9, 2026

At TrademarkDir ("we," "us," or "our"), we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website trademarkdir.com and use our services.

1. Information We Collect

1.1 Account Information

When you create an account, we collect:

  • Name - Your display name for your profile
  • Email address - Used for account verification, notifications, and communication
  • Password - Securely hashed using Argon2ID algorithm (we never store plain-text passwords)
  • Two-factor authentication data - If enabled, encrypted TOTP secrets and recovery codes

1.2 Contact Form Data

When you contact us, we collect:

  • Name and email address
  • Subject and message content
  • IP address and browser information (for spam prevention)
  • Conversation history (for registered users with ongoing support threads)

1.3 Usage Data

When you use our services, we may collect:

  • Watchlist names, descriptions, and the trademarks you choose to monitor
  • Notes you add to watchlist items
  • Notification preferences and settings
  • Last login timestamps

1.4 Cookies and Session Data

We use essential cookies for:

  • Session management - To keep you logged in
  • CSRF protection - To prevent cross-site request forgery attacks
  • Flash messages - To display success/error notifications

We do not use advertising or tracking cookies.

2. How We Use Your Information

We use the information we collect to:

  • Provide, maintain, and improve our services
  • Create and manage your account
  • Send you trademark status change notifications
  • Respond to your inquiries and provide customer support
  • Send important service updates and security alerts
  • Detect, prevent, and address fraud or abuse
  • Comply with legal obligations

3. Third-Party Services

We use the following third-party services:

3.1 Google reCAPTCHA v3

We use Google reCAPTCHA to protect our forms from spam and abuse. This service may collect your IP address and browser data. Please review Google's Privacy Policy.

3.2 Email Service (Mailgun)

We use Mailgun to send transactional emails (verification, password reset, notifications). Your email address is shared with Mailgun solely for email delivery purposes.

3.3 USPTO Data

Trademark data displayed on our website is sourced from the United States Patent and Trademark Office (USPTO), which is public domain information. We do not share your personal data with the USPTO.

4. Data Security

We implement appropriate security measures to protect your information:

  • Password hashing - We use Argon2ID, a modern and secure hashing algorithm
  • HTTPS encryption - All data transmitted between your browser and our servers is encrypted
  • Two-factor authentication - Optional additional security layer for your account
  • CSRF protection - All forms are protected against cross-site request forgery
  • Input validation - All user inputs are validated and sanitized

5. Data Retention

We retain your data as follows:

  • Account data - Until you delete your account
  • Password reset tokens - 1 hour
  • Email verification tokens - 24 hours
  • Contact messages - Retained for support purposes until manually deleted
  • Session data - Until logout or session expiration

6. Your Rights

You have the right to:

  • Access - View your account information and watchlists
  • Update - Modify your profile and notification preferences
  • Delete - Delete your account and associated data through the account settings
  • Withdraw consent - Unsubscribe from email notifications at any time

To exercise these rights, visit your account settings or contact us.

7. Children's Privacy

Our services are not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have collected information from a child under 13, please contact us immediately.

8. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last updated" date. You are advised to review this Privacy Policy periodically for any changes.

9. Contact Us

If you have any questions about this Privacy Policy, please contact us.