1. Overview & Scope
This Privacy Policy applies to the WIPA Connect application (including the Android mobile application package org.wipa.app, the iOS application, and the web platform hosted at platform.womensipalliance.com), operated by the Women's IP Alliance and Northons Media (collectively, “WIPA”, “we”, “our”, or “us”).
WIPA provides a premier global network for intellectual property attorneys, patent specialists, trademark counsel, academics, and students. By accessing or using our platform, you acknowledge and agree to the data collection and usage practices described in this Privacy Policy. If you do not agree with our policies, please refrain from using the application.
2. Information We Collect
We only collect information necessary to provide professional networking, legal intelligence, educational webinars, and directory verification.
A. Information You Voluntarily Provide
- Account Credentials: Full name, professional email address, password hash, and company/firm affiliation.
- Professional Profile Details: Bio, jurisdiction, IP practice areas (patents, trademarks, copyright, litigation), university degrees, and LinkedIn URL.
- Profile Media: Profile avatar photographs and firm logos uploaded by you.
- User-Generated Content: Forum discussions, comments, group messages, webinar registrations, and event RSVPs.
- Direct Communications: Support inquiries, feedback forms, and mentorship applications.
B. Automatically Collected Technical Information
- Device Telemetry: Device model, operating system version (Android / iOS), app version, and unique push notification installation tokens (FCM tokens).
- Usage & Interaction Data: Feature utilization, article reading timestamps, and search query parameters (processed locally for instant filtering).
- IP Address & Network Data: General approximate location (country/city level) for localized IP news filtering and cybersecurity fraud detection.
3. Android & Mobile Permissions Disclosures
In strict adherence to Google Play Developer Policies and Google's Photo & Video Permissions Policy, our application only requests hardware and storage permissions when explicitly required to execute a user-initiated action:
| Permission Name | Type | Exact Purpose & Justification |
|---|---|---|
| READ_MEDIA_IMAGES | Optional | Used solely when you choose to upload and crop your profile avatar, attach IP diagrams in discussion posts, or submit visual publication assets. |
| READ_MEDIA_VIDEO | Optional | Allows members to upload and share educational webinars, presentation recordings, and multimedia legal videos within community channels. |
| CAMERA | Optional | Used strictly when you choose to take a live photo for your profile avatar or capture a badge during verified in-person WIPA summits. |
| RECORD_AUDIO | Optional | Enables active microphone participation in Meetn virtual IP roundtables and audio podcast sessions. Audio is not recorded or stored without explicit notice. |
| POST_NOTIFICATIONS | Optional | Delivers real-time alerts for direct messages, member replies, event calendar reminders, and breaking IP news briefings. You can disable this anytime in System Settings. |
4. How We Use Your Information
We process your personal information strictly for legitimate business and contractual purposes:
- Account Administration: Authenticating your identity and managing membership tiers.
- Community Networking: Displaying your verified profile to fellow IP attorneys and practitioners.
- Educational Webinars: Providing secure entry links and calendar synchronizations for summits.
- AI Legal Research: Powering the LexIQ assistant with anonymized prompt execution.
- Security & Fraud Prevention: Protecting members from unauthorized logins and spam abuse.
- Legal Compliance: Complying with tax obligations, accounting laws, and lawful court orders.
5. Third-Party Services & Subprocessors
We collaborate only with industry-leading, privacy-certified service providers under strict Data Processing Agreements (DPAs):
Database storage, encrypted authentication, and media storage (AWS Frankfurt / EU region).
Encrypted transmission of mobile push notifications.
PCI-DSS Level 1 compliant processing of membership subscriptions. We never store credit card numbers.
Encrypted virtual summit streaming and interactive room audio/video.
6. Data Storage & Security Standards
We implement comprehensive organizational and technical measures to protect against unauthorized access, accidental loss, alteration, or disclosure:
- Encryption: Transport Layer Security (TLS 1.3) on all network traffic and AES-256 encryption for data at rest.
- Database Isolation: Postgres Row-Level Security (RLS) guarantees that only authorized users can read or write their private records.
- Password Protection: Passwords are cryptographically salted and hashed using Argon2/bcrypt; plaintext passwords are never stored.
- Session Security: JWT tokens with automatic expiry and instant session revocation upon sign-out.
7. Account Deletion & Data Retention Policy
In compliance with Google Play's Account Deletion Policy and global privacy mandates, we provide transparent, immediate options for you to permanently delete your account and all associated personal data:
How to Request Account & Data Deletion:
Open the WIPA Mobile App or Web Platform → Navigate to Settings → Select Account & Security → Click “Delete Account” and confirm.
Email connect@northonsprmarketing.com or contact@womensipalliance.com with the subject “WIPA Account Deletion Request” from your registered email address. Requests are processed within 48 hours.
- Your profile, avatar images, contact information, and biography are permanently erased from our live databases.
- Your active sessions, FCM push notification tokens, and device tokens are revoked immediately.
- Any Stripe recurring subscription billing is canceled immediately with no future charges.
- Tax receipts and financial transaction logs are retained strictly as required by statutory law (typically 7 years for HMRC/IRS audit compliance), after which they are permanently shredded.
8. Your Global Legal Rights (GDPR, UK DPA, CCPA/CPRA)
Depending on your country or state of residence, you are entitled to exercise the following rights:
Request an electronic copy of all personal data held about you in a standard JSON or CSV format.
Correct or update any inaccurate or incomplete professional profile information directly in your settings.
Request the permanent deletion of your personal data when it is no longer necessary for the original purpose.
Object to the processing of your data for direct marketing or automated profiling purposes.
9. Children's Privacy Notice
WIPA Connect is designed exclusively for legal professionals, IP attorneys, corporate counsel, and adult university students. We do not knowingly collect, solicit, or maintain personal information from children under the age of 18 (or under 16 in the EEA/UK under GDPR-K). If we discover that a minor has provided us with personal data, we will take immediate steps to delete the information and terminate the account.
10. Contact Us & Data Protection Officer
If you have questions, feedback, or requests regarding this Privacy Policy or our data practices, please contact our designated Data Protection Officer:
Organization: Women's IP Alliance
Primary Support & DPO Email: connect@northonsprmarketing.com
General Alliance Email: contact@womensipalliance.com
Official Web Portal: https://platform.womensipalliance.com
