What we collect

Only what you type into a form and send us. That means the contact form, the Pre-Filing Red-Team Checklist, the client intake form and the mutual NDA request: your name, work email, company, and the answers you choose to give. The NDA request also asks for your company's registered details and business address, your signatory's name and title, and an optional second contact for notices. If you email us instead, we hold that correspondence.

To open a report or a members-only article, we ask for your name, work email and, optionally, a phone number, or for an access code we gave you. We record that access was granted, to which report, and the email it was granted to.

Our web host records ordinary server logs, including IP addresses, as part of delivering and protecting the site. We do not build profiles from them.

Cookies

One cookie remembers whether you chose the light or dark theme. It holds no identifier and is not shared. Clearing it changes nothing except that the site follows your operating system again.

When you open a report or a members-only article, a second cookie keeps it open in that browser for up to 30 days. It holds a signed reference to that access and nothing else, and it is never shared.

The report form uses Cloudflare Turnstile to check that a person, not a bot, is sending it. Turnstile runs in your browser only on that form and Cloudflare processes the signals it needs for that check. We receive a pass or fail, nothing more.

Why we hold it

To answer you, to assess whether we can help, and to run the engagement if we work together. For visitors in the UK and the European Economic Area, our lawful basis is your consent where you ticked a box, and our legitimate interest in responding to an enquiry you sent us.

Who else sees it

We do not sell personal data and we do not share it for advertising. It reaches three service providers because the site runs on them: Cloudflare hosts the site, stores submissions and runs the bot check on the report form, Slack is where a new enquiry is announced to us, and Google Workspace carries our email. Nothing is passed to anyone else without asking you first, except where the law requires it.

The intake form, specifically

Stage 1 of the client intake deliberately does not ask how your invention works, and nothing you send through it is covered by a confidentiality agreement. Confidential technical detail is collected later, under a mutual NDA, through a private link. Please keep it out of the public form.

How long we keep it

We do not yet delete enquiries automatically. A submission is stored in our site database, copied to an internal log, and announced to us in a Slack message, and it stays in all three until you ask us to delete it or we remove it ourselves. Write to us and we will delete it from each. Copies also pass through our host's logs, which the host clears on its own schedule.

Records from an actual engagement are kept for as long as our agreement with you and our tax and accounting obligations require.

Your rights

Ask us and we will tell you what we hold about you, correct it, or delete it. If you are in the UK or the European Economic Area you also have the right to object to processing, to restrict it, to receive your data in a portable form, and to complain to your national supervisory authority. Write to hello@kenorai.comand say what you want done.

Contact

Kenorai Ltd, 1500 N Grant Street, Suite R, Denver, Colorado 80203, United States. hello@kenorai.com.

Changes

If this policy changes we will update the date at the top. Material changes will be described here rather than made quietly.