Version of 26 September 2026.
This policy explains what personal data Broodex collects, why we need it, who we share it with, how long we keep it and what rights you have. We process data under the Law of Ukraine “On Personal Data Protection” and, for clients in the European Union, under the EU General Data Protection Regulation (GDPR).
Who processes your data
The controller of your personal data is Broodex-Ukraine LLC (Ukrainian registration code 38530769), registered office: 73 Halyny Mazepy St., apt. 161, Dnipro 49087, Ukraine; postal address: PO Box 1, Dnipro 49000, Ukraine. For anything concerning your data, write to info@broodex.com.
What we collect
- Contact details — the name, phone and e-mail you give us in a request, when you sign in to your account, or when you write to us.
- Case data — what the service cannot be delivered without: the name and image of the mark, the description of an invention, applicant details (company particulars, or for an individual, passport details and address), powers of attorney and other documents you attach.
- Payment data — amount, currency, status and payment reference. We never receive or store card details; the payment provider handles the payment on its side.
- Technical data — IP address, browser and device type, the pages you opened and when; for cookies, see below.
Why we use it, and on what basis
- to deliver the service you ordered and correspond with you about it — performance of a contract (our public offer);
- to file with a trademark or patent office or another authority on your behalf — the law requires some of the data in the application;
- to invoice you, take payment and keep accounts — legal obligation;
- to tell you by SMS and e-mail how your order is progressing — part of the service;
- to protect the site from abuse and investigate faults — our legitimate interest.
We do not use your data for automated decision-making, and we do not send marketing without your separate consent.
Signing in with Google or Apple
You can sign in to your account with a Google or Apple account. In that case we receive from Google or Apple only your account identifier, e-mail address and name — nothing else: we get no access to your mail, contacts, calendar, files or any other data of that account.
We use these details only to create your Broodex account or find the existing one, to sign you in, and to e-mail you about your orders. We store them with the rest of your account data, do not share them with third parties and do not use them for advertising. To unlink your Google or Apple account, or to delete your Broodex account together with these details, write to info@broodex.com; we will do so within thirty days. You can also revoke the access granted to Broodex in the settings of your Google or Apple account.
Searching the Nice Classification
When you search for goods or services in the Nice Classification search on this site, we send the phrase you type to OpenAI to find the terms closest to it in meaning. Only the phrase is sent — not your name, contact details or IP address. OpenAI processes it on our instructions; under OpenAI's API terms such data is not used to train models. So do not type anything you want to keep confidential into this search — for example, the name of a mark not yet filed.
Who we share it with
Only those without whom the service cannot be delivered:
- public authorities and trademark and patent offices — in Ukraine and in the countries where you register rights — and the World Intellectual Property Organization for international filings;
- foreign patent attorneys and lawyers who represent you abroad;
- payment providers, to take payment;
- the suppliers that keep the site running — hosting, e-mail and SMS delivery, and the meaning search in the Nice Classification (OpenAI, see above). They process data only on our instructions and only for that purpose;
- public authorities, where the law requires it.
We do not sell your data or pass it on for third-party marketing. When data leaves Ukraine — to a foreign office or attorney handling your filing, for instance — it is because the service cannot be delivered otherwise, and only to the extent the service needs.
How long we keep it
- case data and its documents — for as long as your rights are in force and three years afterwards, the general limitation period, since the documents may be needed to defend those rights;
- accounting and payment records — for the period the law requires;
- contact details of someone who never ordered — three years from the last contact;
- technical logs — twelve months.
After these periods the data is deleted or anonymised.
How we protect it
Only staff who need the data to work on your case can see it. Connections to the site are encrypted, passwords and sign-in codes are stored only as one-way hashes, and documents are kept out of public reach and released only after an access check.
Your rights
- to know what data we hold about you and get a copy;
- to have inaccurate or out-of-date data corrected;
- to withdraw consent and ask for deletion — except data we must keep by law or need to defend your rights in a dispute;
- to object to processing or have it restricted;
- to unsubscribe from notifications and mailings at any time;
- to complain to the Ukrainian Parliament Commissioner for Human Rights or, if you are in the EU, to your national supervisory authority.
To exercise any of these rights, write to info@broodex.com. We reply within thirty days.
Cookies
The site uses the cookies it cannot work without: your chosen language and your session in the client account. Analytics cookies are set only with your consent, which you can withdraw at any time.
Changes
If this policy changes, we will publish the new version on this page with the date it takes effect. We will additionally notify account holders of any material change by e-mail.