Privacy policy

This Privacy Policy explains how Origlots Ltd (“Origlots”, “we”, “us”) collects, uses and protects personal information when you use the Origlots website, applications and API (the “Service”).

1. Our Role

For individual accounts and account information, we are the controller. Where a school, university or other organisation provides you with access, that organisation is the controller of the documents submitted through it and we process them on its behalf. Please direct requests about those documents to your organisation first.

2. Information We Collect

• Account information: name, email address, password (stored in hashed form), organisation and role.
• Documents: files you submit, the text extracted from them and the reports we produce.
• Payment information: plan, transactions and billing country. Card details are handled by our payment providers.
• Usage and device information: pages visited, actions taken, errors, device type and approximate country.
• Communications: messages you send to our support or sales teams.

3. How We Use Information

We use personal information to:

• Provide the Service, including checking documents and producing reports.
• Manage accounts, payments and subscriptions.
• Keep the Service secure and prevent misuse.
• Provide support and send service messages.
• Improve the Service, using analytics only with your consent.
• Comply with legal obligations.

Where the GDPR applies, our legal bases are performance of a contract, legitimate interests, compliance with legal obligations and, for analytics and marketing, consent.

4. Your Documents

Documents are encrypted in storage and in transit. To find matching sources, we send short extracts (never whole documents) to public sources such as scholarly databases, publishers’ websites and search engines. AI-content analysis runs on our own systems. We do not sell documents or use them to train AI models. A document is added to the repository only if you or your organisation choose this; other institutions never see its text.

5. Cookies

We use only first-party cookies:

Cookie	Purpose	Duration
tatari_access, tatari_refresh, tatari_csrf	Sign-in and security	Session / up to 30 days
tatari_locale	Language preference	1 year
og_consent	Records your cookie choice	1 year
og_vid, og_sid	Analytics, only with your consent	1 year / session

You can change your choice at any time using Cookie settings at the bottom of each page of our website. We treat Global Privacy Control and Do Not Track signals as a refusal of analytics.

6. Sharing

We do not sell or rent personal information. We share it only with:

• Service providers that host, store, email or process payments for us, under contracts that protect your information.
• Your organisation, where you use the Service through it.
• Authorities, where required by law.
• A successor to our business, which must continue to protect it under this Policy.

7. International Transfers

Your information may be processed outside your country. Where required, we use appropriate safeguards such as Standard Contractual Clauses.

8. Security

We protect information with encryption, access controls, two-step sign-in and audit logging. No system is completely secure, but we notify affected users and regulators of serious data breaches as required by law.

9. Retention

We keep personal information only as long as needed for the purposes above. See our Data Retention Schedule.

10. Your Rights

Depending on where you live, you may have the right to access, correct, delete, restrict or object to the processing of your personal information, to data portability, and to withdraw consent. You can download your data and delete documents or your account in your account settings, or contact us at support@origlots.com. You may also complain to your data protection authority.

We do not sell or share personal information for targeted advertising, and we do not make decisions about you based solely on automated processing.

11. Children

Individual accounts are for users aged 16 and over. Younger students may use the Service only through their school, which is responsible for obtaining any required consent. We do not send marketing to students.

12. Marketing

We send marketing emails only if you opt in, and you can unsubscribe at any time.

13. Changes to This Policy

We may update this Policy from time to time. We will notify you of material changes before they take effect.

14. Contact

• Company: Origlots Ltd
• Website: origlots.com
• Email: support@origlots.com