nulity.ai
Privacy

Privacy policy

Last updated: 2026-05-08. Plain-English summary first, the legal version below.

In one paragraph

You give us your email so we can email you a sign-in link. We store your email, your search queries, and the patent numbers you’ve looked up — and that’s it. We don’t track you, don’t sell anything, don’t use third-party analytics. You can export everything we have or delete your account and all associated data at any time on your data.

What we collect

  • Account: email address (used to send the magic-link login).
  • Sessions: a single signed cookie (invalidator_session) that keeps you logged in for 7 days. No third-party trackers.
  • Search history: each query you run while signed in (input, resolved patent number, top result, latency, timestamp). Used to power the “Recent searches” drawer.
  • Magic-link tokens: one-time hashes of sign-in links, kept until expiry.

What we don't collect

  • No cookies for advertising, analytics, or fingerprinting.
  • No third-party SDKs (Google Analytics, Segment, Mixpanel, etc.).
  • No IP-based geolocation, browser fingerprinting, or session replay.

Lawful basis (GDPR Art. 6)

We process your account data and search history under legitimate interest (Art. 6(1)(f)) for the purpose of providing the service you’ve signed up for. The session cookie is strictly necessary for the service to function and does not require consent under EU ePrivacy guidance. By using the product you authorize this processing; you may withdraw at any time by deleting your account.

Your rights

  • Access & portability: download a JSON export of everything we have on you on the your data page.
  • Erasure: delete your account and all associated rows (history, tokens) on the same page. Deletion is immediate and irreversible.
  • Rectification: email hello@nulity.ai to correct any data we hold.
  • Complaint: you can lodge a complaint with your local Data Protection Authority.

Retention

Account + search history persist until you delete your account. Magic-link tokens auto-expire after 15 minutes. We don’t back up search history beyond the live database.

Where data lives

Application database is hosted on Neon (us-east). The patent corpus itself contains only public records (USPTO PTAB Final Written Decisions and Google Patents data) and is not user data. Your search queries are stored alongside your user record in Postgres.

Contact

Questions or requests: hello@nulity.ai.