Privacy Policy

Who we are

Origily is operated by [COMPANY NAME], [COUNTRY]. You can contact us at [CONTACT EMAIL].

Two kinds of data

Account data: the people who sign up for Origily (our customers). We are the controller of this data.

Visitor data: events collected on our customers' websites and apps through the Origily script. Our customer decides why and how this data is collected, so the customer is the controller and Origily acts as a processor on their behalf.

What we collect

Account data: your email address and a password (stored hashed by our authentication provider).

Visitor data sent by the script: a random visitor ID, the traffic source (for example a UTM parameter or the referring site), the campaign name, the page path, and event names such as signup or purchase, including purchase amounts and order IDs your server sends us.

We do not store IP addresses or names in our events table. Our hosting providers may process IP addresses in technical logs.

Billing data: payments are handled by Paddle, which acts as our merchant of record. We do not receive or store your card details.

Cookies and local storage

The script does not set cookies. It stores a random visitor ID and the first traffic source in the visitor's browser local storage so that a later purchase can be linked to where the visit came from. If you use Origily on your website, you are responsible for any notice or consent your visitors' location requires, and for describing this in your own privacy policy.

How we use data

To provide the service (dashboards, funnels, journeys and reports), to send the weekly email report you can switch off in your dashboard, to bill you, to keep the service secure, and to contact you about your account. We do not sell personal data and we do not use it for advertising.

Service providers

We use Supabase (database and authentication), Vercel (hosting), Resend (email) and Paddle (payments). They process data only to provide their services to us.

Retention

We keep your data while your account is active. If you delete your account or ask us to, we delete your account and project data within [30] days, except what we must keep for legal or accounting reasons.

Your rights

Depending on where you live, you may have the right to access, correct, export or delete your data, and to object to or restrict some processing. Write to [CONTACT EMAIL]. If you are a visitor on a customer's website, please contact that website first, as it controls your data.

International transfers

Our providers may process data in countries other than yours. Where required, we rely on appropriate safeguards.

Changes

We may update this policy. If the changes are material we will notify you by email or in the app.