Privacy Policy · Origentify

This policy explains what personal data Origentify collects, why, and what choices you have. It covers origentify.com, the customer dashboard, and the websites we host for our customers.

1. Data we collect from customers

Sign-up details: your name, email, phone number, business name, current website address and the languages you need.
Account data: your email and a securely hashed password, and when you last signed in.
Billing: payments are handled by Stripe. We receive your name, email, plan and payment status, but never your full card number.
Website content: the pages, posts, images and settings you create or that we migrate from your existing site.
Messages: emails you send us and notes about your onboarding.

2. Data on the websites we host

When someone uses a contact, booking or newsletter form on a site we host, we store what they enter (for example name, email, message, dates) and send it to that site’s owner. For this data the site owner decides how it is used; Origentify processes it on their behalf only to run the website. To stop abuse we briefly keep visitors’ IP addresses in memory to limit how often forms can be sent.

3. Why we use it

To build, migrate, host and maintain websites and to provide the dashboard (performing our contract with you).
To bill you and keep financial records (contract and legal obligations).
To send account emails such as sign-in links, password resets, payment confirmations and form notifications.
To keep the platform secure and prevent fraud and spam (legitimate interest).

We do not sell personal data and we do not use it for advertising.

4. Cookies

The dashboard uses one essential cookie that keeps you signed in. origentify.com and the sites we host do not use advertising or analytics cookies by default. Some sites embed third-party content such as maps or videos, which may set their own cookies when shown.

5. Who we share it with

Stripe for payments.
Hosting and infrastructure providers that run our servers and backups.
Our email delivery provider to send account and notification emails.
Authorities, when the law requires it.

These providers may process data outside your country, including in the United States and the European Union, with appropriate safeguards such as standard contractual clauses.

6. How long we keep it

Account and website content: while your plan is active, and up to 30 days after it ends so you can return or export it.
Form messages on hosted sites: until the site owner deletes them, or the site is removed.
Billing records: as long as tax and accounting law requires.
Backups are overwritten on a rolling basis.

7. Security

Passwords are stored only as salted hashes, connections use HTTPS, dashboard access is limited to the people a customer invites, and we keep regular backups. No system is perfectly secure; if a breach affects your data we will tell you without undue delay.

8. Your rights

Depending on where you live (for example under the EU/UK GDPR, Turkey’s KVKK or US state privacy laws), you can ask to access, correct, delete or export your personal data, object to or restrict some uses, and complain to your data protection authority. Visitors of a hosted website should first contact that site’s owner; we will help them respond.

To make a request, email hello@origentify.com. We answer within 30 days.

9. Children

The Service is meant for businesses and is not directed at children under 16.

10. Changes

We will post updates here and change the date above. If a change is significant, we will also email customers.