Privacy Policy

Last updated: 6 February, 2025

1. Introduction

This Privacy Policy explains how OpenOrigins Limited and any of its subsidiaries or affiliates (collectively, “OpenOrigins”,  “Company”, “we”, “our” or “us”) collect, use, and discloses personal data or other information about you (“Personal Information”) collected through the OpenOrigins application (the “App”), and the features, content, applications, or services we provide (collectively, the “Services”), including through https://www.openorigins.com/ (the “Sites”). We encourage you to read the Privacy Policy carefully. When you use the Services, you are consenting to the collection, transfer, storage, disclosure, and other uses of your information as described in this Privacy Policy.

2. Information We Collect

a. Information You Provide

• Account Information: Name, email address, username, password, and a live photo taken during signup to verify authenticity.

• User Content: Media files (e.g., images, videos) uploaded to the App, including metadata such as timestamps and device information.

b. Information We Collect Automatically

• Device Information: IP address, device type, operating system, and browser type.

• Usage Data: App interactions, posts, media anchoring activity, and time spent on features.

• Log Data: Access times, error logs, and other diagnostic information.

c. Cookies and Tracking Technologies

‍We use cookies and similar tracking technologies to enhance user experience, analyze trends, and improve our services. You can manage cookie preferences through your browser settings.3. How We Use Your InformationWe use the collected data to:

• Provide and improve the App's functionality.

• Authenticate users during signup and login.

• Anchor media content using the Archive Anchoring backend.

• Sync and integrate posts with the Bluesky network.

• Communicate updates, respond to inquiries, and provide customer support.

• Detect, prevent, and address fraud or security issues.

• Comply with legal and regulatory obligations.

4. How We Share Your Information

‍We do not sell your personal data. However, we may share it with:

‍a. Service Providers

‍Third-party vendors that help us deliver our services, such as cloud hosting, analytics, or security providers.

‍b. Bluesky Integration

‍We share minimal data, such as media hashes and Bluesky Post IDs, to facilitate synchronization with the Bluesky platform.

‍c. Legal and Regulatory Authorities

‍We may disclose personal data when required by law, such as to comply with legal proceedings, enforce our Terms, or protect our rights.

‍d. Business Transfers

‍In the event of a merger, acquisition, or sale of assets, your data may be transferred to the acquiring entity.

‍5. Data Retention

‍We retain personal data only as long as necessary to fulfill the purposes outlined in this policy or as required by law. Media files and associated metadata may be retained to maintain the integrity of the Archive Anchoring backend.

By law we have to keep basic information about our customers (including contact, identity, financial and transaction data) for a number of years after they cease being customers for tax and other legal purposes.

In some circumstances you have the right to ask us to delete your data. In some circumstances we will anonymise your Personal Information (so that it can no longer be associated with you) for research or statistical purposes, in which case we may use this information indefinitely without further notice to you.

‍6. Your Rights

‍Depending on your location, you may have the following rights:

• Access: Request a copy of your personal data.

• Correction: Update inaccurate or incomplete information.

• Deletion: Request deletion of your data, subject to legal or contractual obligations.

• Objection: Object to specific data processing activities.

• Portability: Receive your data in a portable format.

• Withdraw Consent: Revoke consent for specific data processing activities.

To exercise these rights, contact us at legal@openorigins.com.

‍7. Data Security

‍We implement industry-standard security measures to protect your data, including:

• Encryption of sensitive information.

• Regular security audits.

• Restricted access to data by authorized personnel only.

While we take precautions to secure your data, no system is entirely foolproof.

‍8. International Data Transfers

‍We process and store your information in the United Kingdom. However, we and our service providers may transfer your Personal Information to, or store it in, other jurisdictions.

Whenever we transfer your personal data out of the UK, we ensure a similar degree of protection is afforded to it by ensuring at least one of the following safeguards is implemented:

• We will only transfer your personal data to countries that have been deemed to provide an adequate level of protection for personal data.

• Where we use certain service providers, we may use specific contracts approved by the UK which give personal data the same protection it has in the UK.

We ensure your personal data is protected by requiring all our group companies to follow the same rules when processing your personal data.

‍9. Updates to This Privacy Policy

‍We may amend this Privacy Policy at any time by posting the amended version on the Site, through the App or otherwise through our Services including the date of the amendment. If we make changes, we will notify you by posting an announcement on the Services or sending you an email. Your use of the Services after any changes to the Privacy Policy constitutes your consent to the changes and you are bound by the amended Privacy Policy.

‍10. Contact Us

‍For any questions or concerns about this Privacy Policy, please contact us at:

‍OpenOrigins Ltd

‍Email: legal@openorigins.com

‍Registered Office: 2nd Floor, 53/54 Grosvenor Street, London, England, W1K 3HU, United Kingdom.