Privacy Policy

1. Information We Collect

We collect information you provide directly to us when using GoGetLicense (“the Platform”, “we”, “us”, or “our”):

• Account & Identity Information: Name, professional email address, profile avatar, authentication credentials, and user IDs managed via our identity provider (Clerk);
• Organization & Researcher Profiles: Organization or university name, description, official website, logo, headquarters location, designated contact person, and verified affiliation details;
• Listing & Intellectual Property Details: Asset titles, descriptions, categories, patent identifiers, readiness levels (TRL), target industries, regulatory status, and licensing objectives;
• Inquiry & Deal Communications: Inquiries, messaging threads, negotiation parameters, and records exchanged directly between platform participants.

We also automatically collect technical and usage information when you interact with the Platform:

• Usage & Performance Data: Pages viewed, referring URLs, search parameters, feature interactions, and web vitals;
• Device & Connection Data: Browser type and version, operating system, IP address, approximate geographic location, and network identifiers.

2. Legal Basis for Processing

In compliance with global data protection frameworks, including the EU/UK General Data Protection Regulation (GDPR) and the Indian Digital Personal Data Protection Act, 2023 (DPDPA), we process personal data under the following lawful bases:

• Performance of a Contract: Processing necessary to authenticate users, maintain profiles, publish listings, deliver deal notifications, and facilitate in-licensing/out-licensing inquiries and negotiations;
• Legitimate Interests: Processing necessary to secure our infrastructure, prevent fraud or unauthorized registrations, rate-limit abuse, optimize platform performance, and improve discovery algorithms;
• Compliance with Legal Obligations: Processing necessary to adhere to statutory, tax, export control, accounting, or regulatory reporting requirements;
• Consent: Where required by law, we process specific data (such as non-essential cookies or voluntary communications) based on your explicit consent, which may be withdrawn at any time.

3. How We Use Your Information

We use the collected information for the following business and operational purposes:

• To provision, maintain, and secure your account and access to the Platform;
• To index, categorize, and display technology listings to relevant industry searchers;
• To route inquiries, facilitate messaging, and record negotiation history between verified participants;
• To transmit transactional notifications, deal alerts, and administrative security notices;
• To analyze platform traffic patterns, monitor system health, and debug technical anomalies;
• To enforce our Terms of Service and prevent abusive, fraudulent, or infringing activity.

4. Data Sharing & Disclosure

We disclose personal and business data only under the following limited circumstances:

• Public & Platform Participants: Published organization profiles, researcher listings, and public IP assets are accessible to prospective licensing partners across the Platform. Inquiry communications are shared exclusively between the participating parties;
• Authorized Service Providers (Sub-Processors): We share data with vetted third-party vendors who provide infrastructure, identity, hosting, email, and security services under strict confidentiality and data protection obligations;
• Legal & Regulatory Compliance: We may disclose information if required to do so by applicable law, subpoena, court order, or governmental authority, or when necessary to protect our legal rights, property, or the safety of users;
• Business Transfers: In the event of a merger, acquisition, corporate reorganization, or sale of assets, user data may be transferred as part of the business assets subject to the protections of this Privacy Policy.

5. Third-Party Service Providers & Sub-Processors

To provide a scalable, secure, and reliable experience, GoGetLicense integrates with select industry-leading third-party sub-processors:

• Clerk: Provides authentication, identity verification, session management, and multi-factor security;
• Supabase: Provides managed PostgreSQL cloud database, encrypted file storage, and Row Level Security (RLS) enforcement;
• Vercel: Provides application hosting, edge routing, serverless compute, and global content delivery network (CDN);
• Vercel Analytics: Collects privacy-friendly, aggregated performance metrics and Core Web Vitals to optimize page responsiveness;
• Upstash: Provides serverless Redis caching, API rate-limiting, and abuse prevention infrastructure;
• Resend: Delivers transactional emails, inquiry notifications, and system alerts;
• Twitter / X API: Facilitates authorized platform updates and ecosystem news distribution.

6. Data Security

We implement comprehensive technical and organizational measures designed to protect your personal and proprietary data from accidental loss, unauthorized access, destruction, or alteration. These measures include:

• Transport Layer Security (TLS 1.3/HTTPS) encryption for all data in transit;
• AES-256 encryption for data at rest in databases and storage volumes;
• Database Row Level Security (RLS) policies ensuring users can only access authorized data records;
• Distributed rate-limiting and DDoS mitigation at the edge network layer.

While we apply stringent security practices, no electronic transmission over the internet or cloud storage solution is completely infallible. You remain responsible for safeguarding your login credentials.

7. Data Retention

We retain your personal data only for as long as your account remains active or as required to fulfill the business purposes outlined in this Policy. Upon account closure or deletion, your personal data will be deleted or irreversibly anonymized, save for information retained as necessary to comply with statutory legal, tax, accounting, or audit obligations (typically up to 90 days following closure).

8. Your Rights Under GDPR & Global Frameworks

Depending on your jurisdiction (including the European Economic Area, United Kingdom, and equivalent jurisdictions), you are entitled to exercise the following statutory rights regarding your personal data:

• Right of Access: Request confirmation of processing and obtain a copy of your personal data;
• Right to Rectification: Request correction of inaccurate, outdated, or incomplete data;
• Right to Erasure (“Right to be Forgotten”): Request deletion of your personal data subject to legal retention obligations;
• Right to Restrict Processing: Request temporary restriction of data processing under certain circumstances;
• Right to Data Portability: Receive your personal data in a structured, commonly used, and machine-readable format;
• Right to Object: Object to processing carried out based on legitimate business interests;
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on prior consent.

To exercise any of these rights, please contact us at info@gogetlicense.com. We respond to all verified requests within thirty (30) days.

9. Data Principal Rights Under India's DPDPA (2023)

For users residing in India or whose personal data is processed in India, we adhere to the Digital Personal Data Protection Act, 2023 (DPDPA). As a Data Principal, you have the right to:

• Access Information: Obtain a summary of personal data being processed and the processing activities undertaken;
• Correction & Erasure: Request the correction, completion, updating, or erasure of your personal data in accordance with the Act;
• Grievance Redressal: Access an effective and accessible grievance redressal mechanism regarding our data processing obligations;
• Right to Nominate: Nominate an individual who shall, in the event of your death or incapacity, exercise your rights as a Data Principal under the Act;
• Consent Withdrawal: Easily withdraw consent given to us for processing personal data by contacting our team.

10. Cookies & Tracking Technologies

We use cookies and local storage tokens to ensure core functionality, authenticate sessions, and monitor application health:

• Strictly Necessary Cookies: Essential for user authentication (session tokens managed by Clerk), route security, and theme preferences (light/dark mode). The Platform cannot function properly without these cookies;
• Performance & Analytics: Aggregated, privacy-focused performance telemetry (via Vercel Analytics) that records anonymous page load vitals without building individualized cross-site tracking profiles.

You can configure your browser to block or alert you about cookies; however, disabling strictly necessary cookies will prevent you from signing in or utilizing authenticated marketplace features.

11. International Data Transfers

GoGetLicense operates globally with primary cloud infrastructure and sub-processors situated across India, the United States, and the European Union. When data is transferred across international borders, we ensure adequate protection through standard contractual clauses (SCCs), data protection agreements, or equivalent recognized legal mechanisms.

12. Children's Privacy

The Platform is strictly a B2B professional technology transfer marketplace and is not intended for or directed toward individuals under 18 years of age. We do not knowingly solicit or collect personal data from minors. If we discover that a minor has registered an account, we will promptly terminate the account and delete associated data.

13. Verification & Credentials Disclaimer

GoGetLicense does not verify the identity, legal authority, corporate standing, or professional credentials of individuals registering on the Platform. We are not responsible for unauthorized account creations, administrative actions taken by unauthorized company members, or any loss of data or business disruption resulting from the removal of accounts registered in violation of our email policies (such as organizational email requirements).

14. Changes to This Policy

We reserve the right to update this Privacy Policy periodically to reflect changes in our data practices or relevant legal requirements. We will indicate the date of the most recent revision at the top of this page. Your continued use of the Platform after the posting of changes constitutes your acknowledgment of the updated policy.

15. Contact & Grievance Redressal

For privacy inquiries, Data Principal rights requests, DPDPA grievance redressal, or questions regarding our data practices, please reach out to us at:

Email: info@gogetlicense.com

Headquartered in Bengaluru, Karnataka, India