Security at a glance
How we protect your documents.The safeguards we use.
This page explains how DownloadPatent protects your account, handles your documents and controls access to them.
Data protection practices
We follow data-protection principles such as data minimization, purpose limitation and security safeguards. We collect only what the service needs, use it only for the purposes described in our privacy policy, and handle requests to access or delete your personal data.
Account and sign-in safeguards
These safeguards help protect your account when you sign in, create an account or change account details.
Your sign-in
Each sign-in credential expires after seven days. It cannot be read by webpage scripts, and the browser sends it only over a secure connection with cross-site request restrictions.
Password protection
When you create or reset a password, it must be at least 8 characters long, cannot be one of a small list of common passwords and cannot exceed 1,024 characters.
Request and login defenses
Sign-in, sign-up, password reset and account changes require a valid anti-forgery token. Sign-up, email verification, password-reset requests and failed sign-ins are rate-limited. Successful, failed and blocked sign-in attempts are recorded.
How we handle documents
Upload validation
You must be signed in before an Office Action is parsed. Uploads are limited to 25 MB and accepted only when the file type or filename identifies a PDF.
Temporary document handling
Your Office Action and generated files are kept in temporary storage under identifiers tied to your account and request. The work record stores processing metadata rather than the uploaded file itself.
After processing
Uploaded Office Actions and generated files remain available for up to 24 hours (the files of a patent number batch, 48 hours) so you can change versions and download again without another charge for the same delivered Office Action or patent. After expiry, access is disabled and temporary storage is cleared by scheduled cleanup. Failed-job files are cleared.
Account-scoped access
Your account is checked
Protected requests verify your sign-in and re-check that your account is still available and authorized. Requests are rejected when the account is deleted, suspended or using an invalidated session.
Your results stay with your account
Every result read checks both the request and your account. Someone else cannot retrieve your files just by obtaining a result link.
Sign-in activity
Login activity and account-security audit records are kept separately. Login activity records the sign-in method, outcome, IP address and browser information.
Questions about document security?
If you have a question about document handling or account security, please use the contact page to reach us.