Legal & governance

Privacy policy

This notice explains what personal information OriginStack collects through this corporate website, why we use it, and the choices available to you.

This policy applies to the OriginStack corporate website and enquiries submitted through it. A separate notice may apply to a contracted product or partner service. OriginStack LLC is the controller of the information described here unless another notice states otherwise.

Information we collect

We collect information you choose to provide, including your name, work email, company, role, product interest, project requirements and correspondence. We may also receive limited technical and security information such as IP address, browser type, device information, request timestamps and anti-abuse signals when the production contact service is enabled. Please do not submit sensitive personal information through the contact form.

Purposes and legal bases

We use information to respond to enquiries, evaluate partnership or service requests, operate and secure the website, prevent abuse, comply with law, and establish or defend legal claims. Where applicable, we rely on steps requested before entering a contract, performance of a contract, legitimate interests in operating and protecting our business, compliance with legal obligations, or consent. You may withdraw consent at any time without affecting earlier lawful processing.

Disclosure and international transfers

We may disclose relevant information to vetted hosting, security, communications and professional-service providers acting under appropriate instructions, or when required by law. We do not sell personal information or share it for cross-context behavioural advertising through this website. If information is transferred across borders, we use an available legal transfer mechanism and safeguards required by applicable law.

Retention and security

Enquiry data is retained only for as long as reasonably necessary to respond, develop a business relationship, meet legal or accounting duties, and resolve disputes. Retention depends on the nature of the enquiry and any resulting contract. We use proportionate technical and organisational safeguards, but no internet transmission or storage system can be guaranteed completely secure.

Your privacy rights

Depending on where you live and whether the relevant law applies, you may request access, correction, deletion, restriction, portability, or an objection to certain processing. You may also withdraw consent, opt out of targeted advertising, sale or sharing, limit certain uses of sensitive information, or appeal a denied request where those rights exist. We will not discriminate against you for exercising a privacy right. We may need to verify your identity and authority before acting.

EEA and UK individuals may complain to their local data-protection authority. Residents of applicable U.S. states may use an authorised agent where permitted. Because this website does not sell or share personal information for behavioural advertising, an opt-out signal such as Global Privacy Control does not change any active sale or sharing practice; we will continue to honour such signals if those practices change.

Children

This corporate website is intended for business audiences and is not directed to children. We do not knowingly collect personal information from children through this website.

Third-party services

The production contact form may use Google reCAPTCHA for security. reCAPTCHA is loaded only when the form is submitted and is subject to Google's privacy policy and terms. Links to third-party websites are governed by those organisations' own notices.

Changes and contact

We may update this notice as our website or legal obligations change. The date above identifies the latest version. To exercise a right or ask a privacy question, use the OriginStack contact form and select “Privacy or legal”.