Privacy
Last updated:
This policy explains what personal information Ginbing collects, why, and the choices you have. It applies to ginbing.com and to your Ginbing account.
Who controls your data
Ginbing LLC, a company formed in Wyoming, USA, is the controller of the personal information described here. You can reach Ginbing through account support.
What we collect
The filing inputs you give us: applicant and contact details, trademark name and image, class and goods/services selections, identity documents, and uploaded files. Your account email, and the order and payment events from our authentication and payment providers. If you sign in with Google, your name, email address, and basic profile information from your Google account. We also collect limited usage and security data to keep the service working, enforce taxonomy request-rate limits, understand how it is used, and diagnose failures. Error monitoring, when enabled, is limited to sanitized error type and stack location, deployment environment and release, and Ginbing-owned diagnostic codes; we remove the original error message, request data, user data, identifiers, and breadcrumbs before sending.
How we use it
We use your information to prepare and submit your application to CNIPA, prepare and manage filing materials including the current filing signature image, deliver receipts and translated notices, take payment, answer support, secure the account, and meet legal and tax obligations. Our legal bases are: performing our contract with you, including the cross-border transfer described below; our legitimate interest in keeping the service secure and improving it; and compliance with law. We do not sell your information, and we do not use anything you send us to train AI models or for advertising.
Signing in with Google
When you choose “Continue with Google,” Google shares your name, email address, and basic profile details so we can create or find your Ginbing account and sign you in. If Google confirms an email address that already belongs to a Ginbing account, we connect Google sign-in to that account. We do not ask for access to your Gmail, Drive, contacts, or other Google data, and we use what Google shares only to sign you in and run your account. Ginbing’s use of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements. You can review what you have shared, and remove Ginbing’s access, in your Google Account settings; you can still sign in with a code sent to your email.
Cookies and analytics
We use essential storage to keep the site working, remember your session, and protect the service against abuse and fraud; this runs on every visit because the service depends on it. When you sign in, we also set a functional cookie that remembers which sign-in method you last used (an email code or Google) so the sign-in page can point you back to it; it holds no account details and expires after 30 days. Any optional product analytics we use is separate and privacy-minimized: we do not use Google Analytics, do not send names, emails, order IDs, filing text, document data, query strings, hashes, or account URLs, record only the domain of the website that linked you to us (not the page or link itself), and keep Umami cookieless with Do Not Track respected. You can clear or block storage through your browser settings.
Providers we share with
We rely on a small set of providers, each receiving only what it needs to do its job: Stripe (card payments), Cloudflare (content delivery, security and anti-abuse at the network edge, and encrypted storage of your private files through Cloudflare R2), Hetzner (application hosting, in Germany), Resend (transactional email), Sentry (privacy-minimized errors-only monitoring, when enabled, with error-event storage and ingest in Germany and some service metadata or operations potentially handled in the United States), Google (sign-in, only if you choose it), OpenAI (ChatGPT Business, which our team uses to help prepare filings and answer support), and Ginbing (Suzhou) Technology Co., Ltd. (金并（苏州）科技有限公司), which performs the CNIPA filing itself and is listed on CNIPA’s public trademark-agency record. See AI & data use for what we send OpenAI and how it is handled. If you choose to authorize an AI client such as ChatGPT or Claude, that provider also receives the permitted draft preparation fields returned to it. You control its read and draft-write permissions in Account → AI connections. Government identity numbers, identity documents and trademark images are not accepted or returned by these tools. Your chosen provider applies its own privacy and data settings.
International transfers
Running the service moves your information across borders. Your filing materials, including identity documents, are transferred from your country to the United States and to China, to Ginbing (Suzhou) Technology Co., Ltd. and CNIPA, so your application can be filed. China is not covered by an EU adequacy decision. We make this transfer because it is necessary to perform the filing you ask us to make: the filing happens in China.
How long we keep it
Filing records, the current filing signature image, CNIPA receipts, and notices stay on the account as long as it exists, because they are filing materials and records. You can ask us to close the account when no filings are active; we may retain what the law requires us to keep. We keep limited payment, audit, and anti-abuse metadata for operations and fraud prevention. When Sentry error monitoring is enabled, its errors-only events have a 30-day lookback under the approved free plan; Ginbing does not enable Sentry logs, tracing, replay, profiling, attachments, or user feedback. An email sign-in code is valid for 5 minutes. For a new address, we create the account only after the code is confirmed or Google confirms the address, and product access remains limited until the current Terms are accepted.
Your rights
Depending on where you live, you can ask to access, correct, delete, or export your information, to restrict or object to certain processing, and to withdraw consent. To make a request, use account support. If you are in the EU or UK, you also have the right to complain to your local data-protection authority. Some records may be kept even after a deletion request: documents that are the proof of your filing, records the law requires us to keep, and limited security and fraud-prevention logs we rely on a legitimate interest to hold (these age out on a short schedule). Where we process data for that legitimate interest, you can object, and we will stop unless we have compelling grounds to continue.
California privacy rights
If you are a California resident, you have the right to know, delete, and correct the personal information we hold, and to opt out of its sale or sharing for cross-context advertising. We do not sell your information or share it for cross-context advertising, and we will not discriminate against you for exercising these rights. Use account support to make a request.
Children
Ginbing is for adults filing trademarks and is not directed to children. We do not knowingly collect information from anyone under 18.
Changes to this policy
We may update this policy. The “Last updated” date above shows the current version, and we will give notice of material changes by email or in-account notice.