Privacy Policy

Last updated: March 30, 2026

1. Introduction

OriginChain("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our web application and services.

2. Information We Collect

We may collect the following types of information:

Account Information: Email address, name, and authentication data when you create an account (including via Google or GitHub sign-in).
Usage Data: Information about how you interact with our services, including session logs, feature usage, and timestamps.
Content Data: Data you provide through our platform, such as session records, claims, creative assets, and AI interaction logs.
Device Information: Browser type, operating system, IP address, and device identifiers collected automatically.

3. How We Use Your Information

To provide and maintain our services
To authenticate your identity and manage your account
To generate provenance records, pickup notes, and analytics
To detect potential IP infringement on your behalf
To improve and optimize our platform
To communicate with you about your account or services
To comply with legal obligations

4. AI Processing

Our platform uses AI (powered by third-party providers) to analyze sessions, generate reports, and detect potential infringement. Your content may be sent to AI providers for processing. We do not use your content to train AI models. AI providers are bound by their own privacy policies and data processing agreements.

5. Data Storage and Security

Your data is stored securely using Supabase infrastructure with encryption at rest and in transit. We implement industry-standard security measures to protect your information. However, no method of electronic transmission or storage is 100% secure.

6. Data Sharing

We do not sell your personal information. We may share data with:

Service Providers: Third-party services that help us operate our platform (hosting, authentication, AI processing).
Legal Requirements: When required by law, regulation, or legal process.
With Your Consent: When you explicitly authorize sharing, such as exporting provenance reports.

7. Your Rights

You have the right to:

Access the personal data we hold about you
Request correction of inaccurate data
Request deletion of your data
Export your data in a portable format
Withdraw consent for data processing

To exercise these rights, contact us at privacy@orginchain.com.

8. Cookies

We use essential cookies for authentication and session management. We do not use third-party tracking cookies or advertising cookies.

9. Google User Data

Data We Access Through Google OAuth:

Basic profile information: name, email address, profile photo
Google account ID for authentication purposes

How We Use This Data:

Name and email: used solely to create and maintain your OriginChain account
Profile photo: displayed within the application interface only
Google account ID: used as a unique identifier for session management and account continuity

What We Do NOT Do With Your Google Data:

We do not sell your data to third parties
We do not use your data for advertising purposes
We do not share your data with any third parties except as required by law
We do not use your Google data to train AI models
We do not store any Google data beyond what is necessary for account functionality

Data Retention:

Your Google account data is retained only while your account is active
You may request complete deletion of your data at any time by contacting adam@egopandacreative.com
Upon account deletion, all associated Google data is permanently removed from our systems

This application's use of Google user data complies with the Google API Services User Data Policy.

10. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.

11. Contact Us

If you have questions about this Privacy Policy, contact us at privacy@orginchain.com.