Legal
Privacy Policy
Last updated:
This policy takes effect when posted on expiredmarks.com.
ExpiredMarks™ is a DBA of Jack's Inventory Consulting, LLC ("ExpiredMarks," "we," "us"), a California LLC based in Sacramento County, CA. This policy covers expiredmarks.com, our accounts, emails and alerts, and community cards (the "Service").
Privacy questions or requests: privacy@expiredmarks.com.
1. The short version
- We collect only what we need to run ExpiredMarks.
- We don't sell your personal information, and we don't share it for cross-context behavioral ads.
- Trademark records on our pages are public USPTO records, not data about you as a user.
- Stripe handles your card. We never see the full number.
- Anonymous community cards: we store only a one-way hashed IP address, no email.
- We don't use ad cookies, ad pixels or analytics trackers. Links to Brocius may include a referral marker (Section 9).
- You can ask to see, fix or delete your data.
2. What we collect (notice at collection)
| Category | Examples | Why we collect it | Sold or shared? |
|---|---|---|---|
| Identifiers | email address, account ID | sign-in, tracking alerts, receipts, billing notices | No |
| Commercial information | plan, price, purchase and renewal dates, Stripe customer ID | billing, renewals, refunds, taxes | No |
| Consent records | time, IP address, browser type, plan, price, terms version and the exact checkout text you agreed to | to prove auto-renewal consent, as California law requires | No |
| Account activity | tracked marks, favorites | to run the features you use | No |
| Device and security data | IP address and browser type on sign-in sessions; server and security logs | to keep accounts and the site secure | No |
| Hashed IP addresses | a salted one-way hash of your IP address | rate limits and abuse prevention for community cards and sign-in codes | No |
| Communications | emails you send us, including correction, takedown and owner requests | support, corrections and moderation; request emails are kept so we can handle them | No |
- Payment card data goes straight to Stripe. We see only limited details, such as card brand and last four digits.
- We don't collect sensitive personal information such as Social Security numbers, precise location or passwords. Sign-in uses one-time email links and codes.
- Searching and browsing need no account.
- Sources: you, your browser, and Stripe.
3. Community cards
- You can create a community card without an account. For an anonymous card we store the card, the category and tone you picked, the time, and a salted one-way hash of your IP address. We don't store your email or your raw IP address with it.
- We use the hashed IP only to enforce daily limits and stop abuse. A hash can't readily be turned back into your IP address.
- If you're signed in when you create a card, the card is not tied to your account. It's automatically added to your Favorites, a private saved list that only you see and can remove it from. Saving it there doesn't make you the card's public author.
- Community cards are public. They show the mark, the AI-written idea, a "Community card" label and when it was made. They don't show who made them.
- Correction and takedown requests: these come by email to support@expiredmarks.com. We keep the email (your address, the mark, the page link and your reason) so we can handle the request and reply.
- A bot check by Cloudflare Turnstile runs before a card is created. See Section 6.
4. Public trademark records
- Our pages show public USPTO records: mark names, owners, dates and statuses.
- Information from government records is "publicly available" under the CCPA (Civ. Code §1798.140(v)(2)).
- Want a record fixed or a page reviewed? See Corrections & Takedowns. We can't change USPTO records. Only the USPTO can.
5. How we use information
We use information to:
- run the Service and your account;
- send tracking alerts, receipts and required billing notices;
- process payments and renewals;
- keep consent records;
- answer support, correction and takedown requests;
- moderate community cards, secure the Service and stop abuse;
- fix problems and improve features;
- follow the law and enforce our Terms.
6. Cookies and Do Not Track
- Essential cookies only. A sign-in cookie keeps you signed in for up to 30 days, or until you log out. Cloudflare may set security cookies to block bots. Stripe sets its own cookies on its checkout and billing pages.
- We don't use ad cookies, ad pixels, session replay or third-party analytics.
- Do Not Track: some browsers send a "Do Not Track" signal. We don't let other companies collect personal information about your activity over time and across sites through our Service. We don't use ad cookies, ad pixels or analytics trackers. Links to Brocius, a separate service of the same company, may include a referral marker (Section 9). That marker doesn't include your email, name or account ID. We treat every visitor the same, whether or not a Do Not Track signal is sent.
- If we add other tracking that changes this, we'll update this policy first.
7. Who we share it with
Service providers. They act for us and may use data only to provide their services to us.
| Provider | What it does |
|---|---|
| Stripe, Inc. | Payments, receipts and the customer portal for changing or cancelling plans |
| Cloudflare, Inc. | Hosting, database, security, Turnstile bot checks, DNS and inbound email routing; standard server logs |
| Anthropic, PBC (Claude) | AI model that writes card ideas and write-ups from public USPTO data and, for community cards, the category and tone picked. It gets no account data, email addresses or IP addresses. |
| Resend | Sends sign-in links, codes, receipts, alerts and other email |
| Google LLC | Hosts the inbox where support@ and privacy@ email is delivered |
Brocius. See Section 9.
Legal and safety. We may disclose information if the law requires it, or to protect rights and safety.
Business transfer. If the business is sold or merged, data may transfer under this policy.
Shine the Light. We don't disclose personal information to third parties for their own direct marketing (Civ. Code §1798.83).
8. How long we keep it
| Data | How long |
|---|---|
| Account data (email, tracked marks, favorites) | While your account is open. Deleted within 30 days after you ask us to delete your account, except records listed below. |
| Consent records | At least 3 years, or 1 year after your plan ends, whichever is longer (B&P §17602(a)(6)) |
| Purchase and billing records | As long as tax and accounting rules require, generally up to 7 years |
| Sign-in sessions | Up to 30 days, or until you log out |
| Rate-limit records | About 2 days |
| Community cards and their hashed IPs | While the card exists, including after it's hidden, so the mark isn't re-used and limits work |
| Server and security logs | On our hosting provider's schedule |
| Support, correction and takedown request emails | Up to 2 years |
| Unsubscribe list | As long as needed to honor your opt-out |
Backups expire on our providers' schedules.
9. Links to Brocius
- Some links take you to Brocius at brocius.com. Brocius is a DBA of Jack's Inventory Consulting, LLC, the same company that operates ExpiredMarks. It is a separate service, sold on brocius.com under its own terms and privacy policy.
- ExpiredMarks links to Brocius and may track those referrals. A referral marker may show that the visit started on ExpiredMarks. Your email address, name and account ID are not in the link. Your browser may also tell brocius.com which ExpiredMarks page you came from, as browsers normally do.
- Your ExpiredMarks login doesn't carry over.
- Brocius offers AI business answers ($10/month for 50 questions, with 3 free questions to start), documents ($10 for members, $25 for non-members) and the Advisors membership ($249/month). Anything you do on brocius.com is covered by Brocius's own privacy policy and terms. A business plan or any Brocius answer never makes a name or mark safe to use and is not legal advice.
10. Email
- Account and billing email (sign-in links, receipts, acknowledgments, annual reminders, price-change notices, and alerts for marks you track) is part of the Service. To stop alerts, stop tracking the mark in your account.
- We don't send marketing email today. If we ever do, it will be opt-in only, with an unsubscribe link and our postal address in every message, and we'll honor unsubscribes within 10 business days.
- We never email mark owners from USPTO records.
11. Your choices and rights
We offer these rights to all users, wherever you live:
- Know and access what we hold about you.
- Correct it.
- Delete it, subject to records we must keep (such as consent and tax records).
- No sale or sharing. We don't sell or share personal information, so there's nothing to opt out of.
- No discrimination for using these rights.
How to ask: email privacy@expiredmarks.com from your account email. We'll verify your identity, usually by confirming that email. We'll reply within 45 days. An authorized agent may ask with your written permission. For anonymous community cards we hold no email, so we may not be able to tie a card to you; you can still ask us to review any card by emailing support@expiredmarks.com.
Changes you can make yourself: add or remove tracked marks and favorites in your account. Change or cancel your plan through Account → Manage or cancel plan. To change your email or delete your account, email support@expiredmarks.com.
12. Children
- ExpiredMarks is not for children. You must be 18 to create an account or buy a plan.
- We don't knowingly collect personal information from children under 13.
- We don't sell or share the personal information of anyone under 16.
- If we learn we have a child's data, we'll delete it. Tell us at privacy@expiredmarks.com.
13. Security
We use reasonable safeguards, such as encryption in transit, hashed IP addresses for community features, and access controls. No system is perfectly secure. Protect your email account, since sign-in links go there.
14. Where data is processed
We're in the United States. Our providers may process data in the US and other countries.
15. Changes to this policy
We'll post updates here and change the "Last updated" date. For material changes, we'll also email account holders before they take effect.
16. Contact
ExpiredMarks™, a DBA of Jack's Inventory Consulting, LLC
PO Box 1221, Rancho Cordova, CA 95741-1221
Privacy: privacy@expiredmarks.com
Support: support@expiredmarks.com