Privacy policy

This Privacy Policy (“Policy”) explains how Origin Studio Co (“we,” “us,” or “our”) collects, uses, and shares personal data (also referred to as personal information) of individuals outside our organization. This includes, but is not limited to, job applicants, customers, prospective customers, affiliates, website visitors, service providers, and their respective representatives (collectively referred to as “you” or “your”).

For clarity, this Policy does not apply to personal data collected by our customers through their use of Origin Studio Co’s services to develop or operate their own websites, applications, databases, or other digital solutions (“Customer Applications”). In such cases, the customer is the Data Controller, and Origin Studio Co acts solely as a Data Processor in accordance with our Data Processing Agreement (DPA).

For information regarding how personal data is handled in connection with a specific Customer Application, please contact the relevant customer or application operator directly.

1. Definitions

1.1 Customer Applications. Websites, applications, databases, or other digital solutions developed or operated by Origin Studio Co‘s customers using our services.

1.2 Data Controller. The entity that determines the purposes and means of processing personal data. For data collected through Customer Applications, the customer acts as the Data Controller.

1.3 Data Processor. The entity that processes personal data on behalf of the Data Controller. Origin Studio Co acts as a Data Processor for Customer Applications, processing data in accordance with the Data Processing Agreement (DPA).

1.4 Data Processing Agreement (DPA). A contractual agreement between Origin Studio Co and its customers that outlines the terms and conditions under which personal data is processed by the Company on behalf of the customer.

2. Personal Data Collection.

We collect and use your personal information solely to provide access to and maintain the Origin Studio Co application, and to communicate with you regarding our services. If you choose to upload any documents or information to our platform, we treat the privacy and confidentiality of that content with the utmost care.

We do not share your personal information with third parties without your consent, except in the following circumstances:

  • To fulfill a specific request you have made;
  • Where necessary to enforce our Terms of Service or comply with legal obligations;
  • To detect, prevent, or address fraud, security, or technical issues;
  • To protect the rights, property, or safety of Origin Studio Co, our users, or others.

2.1 Personal Data You Provide to Us. When you use our services, we may ask you to provide certain personally identifiable information, including:

  • Basic User Information: Name, email address, phone number, and social media avatars.
  • Company Information: Professional affiliation and related details.
  • Communication Data: Any information provided when creating an account or requesting support.

2.2 Payment Information. Origin Studio Co does not collect or store financial information, such as credit card numbers. All transactions are securely handled by our third-party provider, Mollie. Please refer to Stripe’s Privacy Policy for details on their data handling.

2.3 Sensitive Personal Data. We ask that you do not submit sensitive personal information (e.g., Social Security numbers, health data, racial origin, religious beliefs, or sexual orientation). Origin Studio Co does not intentionally collect such data and reserves the right to delete it if submitted.

2.4 Personal Data Collected Automatically. We automatically collect technical and usage information, including:

  • Browser type and version;
  • Device identifiers and IP addresses;
  • Access dates, times, and usage duration;
  • Debugging data and usage statistics.

2.5 Information from Third Parties. We may collect information from publicly available sources and platforms such as LinkedIn, Dribbble, or X (formerly Twitter), where permitted by law.

2.6 Access to Your Content. In limited circumstances, Origin Studio Co may access your hosted content to respond to support inquiries, resolve security vulnerabilities, or enforce our Terms of Service, subject to strict internal access controls.

3. Use of Collected Information.

For individuals in the European Economic Area (EEA), our processing is justified on the following legal bases:

  1. Contractual Necessity: To perform our agreement with you.
  2. Legal Obligation: To comply with relevant laws.
  3. Legitimate Interest: To improve our services, ensure security, and manage risk, provided these interests are not overridden by your privacy rights.
  4. Consent: Where you have explicitly granted permission.

We do not sell, rent, or lease your personal data to third parties.

4. Security

Protecting your information is a priority. We implement appropriate technical and organizational measures, including Transport Layer Security (TLS) encryption for all network communications.

While we take commercially reasonable steps to protect your data, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security and are not liable for unauthorized access beyond our reasonable control.

4.1 Personal Information Breach Notification. If a security breach occurs that is likely to result in a risk to your rights, Origin Studio Co will notify the competent supervisory authority without undue delay (generally within 72 hours) and inform affected individuals as required by law.

5. Retention of Data.

We generally retain personal information for no longer than one year, unless you request earlier deletion or a longer period is required to:

  • Comply with legal, tax, or accounting obligations;
  • Defend legal claims or respond to regulatory requirements.

6. Minors.

Our Services are not intended for individuals under the age of 18. We do not knowingly collect information from children. If we discover such data has been inadvertently collected, we will take immediate steps to delete it.

7. GDPR / EU Rights

Under the GDPR, you have the following rights:

  • Right of Access: Obtain a copy of your data and processing details.
  • Right to Rectification: Correct inaccurate or incomplete data.
  • Right to Erasure: Request deletion (“Right to be Forgotten”).
  • Right to Restrict Processing: Limit how we use your data.
  • Right to Data Portability: Receive your data in a machine-readable format.
  • Right to Object/Withdraw Consent: Stop processing based on consent or legitimate interest.

To exercise these rights, contact us at legal@originstudio.nl In the Netherlands, the relevant authority is the Autoriteit Persoongegevens.

8. Third-Party Links

Our Services may contain links to third-party sites. We do not control these sites and are not responsible for their privacy practices. We encourage you to review the privacy policies of any third-party service you visit.