Privacy Policy

1. Introduction

ORIGINOTE (the "Service") respects your privacy and is committed to protecting your personal information. This Policy explains what information we collect, how we use it, and how we protect it.

2. Information We Collect

2.1 Account Information

• Email address
• Password (stored encrypted)
• Display name (optional)
• Creator ID (optional)

2.2 Identity Verification Information

• Phone number (for SMS verification; only the last 4 digits are stored after verification)
• Linked social media account information (e.g., Bluesky username)

2.3 Content Information

• Hash values of uploaded files
• Metadata of signed files
• Signing timestamps

2.4 Usage Information

• Access logs (IP address, browser information)
• Service usage patterns
• Information collected through cookies and similar technologies

3. How We Use Your Information

We use collected information to:

• Provide and operate the Service
• Authenticate users and manage accounts
• Generate and verify C2PA signatures
• Display identity verification information on verification pages
• Improve the Service and develop new features
• Provide customer support
• Prevent fraudulent use
• Comply with legal obligations

4. Information Sharing

We do not share your personal information with third parties except in the following cases:

• With your consent
• With service providers necessary for operations (Supabase, Stripe, Firebase, etc.)
• When required by law
• Information you consent to publish on verification pages

5. Data Storage and Security

Your data is stored on servers with appropriate security measures. All communications are encrypted using SSL/TLS. Passwords are hashed and never stored in plain text.

6. Cookies

We use cookies to:

• Maintain login sessions
• Analyze service usage (Firebase Analytics)
• Improve user experience

7. Your Rights

You have the right to:

• Access your personal information
• Request correction or deletion of your data
• Request data portability (export)
• Restrict processing or object to processing

To exercise these rights, please contact us through our contact form.

8. Children's Privacy

The Service is not intended for users under 16 years of age. We do not knowingly collect personal information from anyone under 16.

9. International Data Transfers

As we use cloud services, your data may be stored on servers outside Japan. In such cases, we ensure appropriate data protection measures are in place.

10. Policy Updates

This Policy may be updated as needed. We will notify you of significant changes within the Service.

11. Contact

For privacy-related inquiries, please contact us at:

Email: privacy@originote.jp