Privacy Policy for OriginDot

Psyque.net ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, share, and protect your information when you use OriginDot, including any mobile, web, or API interfaces (collectively, the "Platform"). By accessing or using OriginDot, you agree to this Policy.

1. Our Guiding Principles

• Privacy by design. Our systems are built from the ground up to protect your information.
• We do not sell your data. Ever.
• We do not profile you for advertisers. Our business model is subscription-based, so we do not need to.
• We practice data minimization. We only collect the data necessary to provide and improve our service.
• We are transparent. We aim to be clear about our data practices.

2. Information We Collect

We collect the following types of information:

• Account Information: When you create an account, we collect a username, primary email address, and a hashed password. We also collect account settings and preferences, plus subscription status and related billing state (not full payment card details).
• Age Verification Information (Roadmap): Where required by law and/or when enabled in the future, your email address or other identifiers may be used to initiate a third-party age verification check. Data used for age verification is processed only for that purpose and legal compliance, and we may retain verification records as required by law or for fraud prevention.
• User-Generated Content: Any content you create or share on the Platform, such as posts, messages, comments, profile information, uploaded media, and documents.
• Well-being Dashboard Data: You may have access to a well-being dashboard to monitor your digital habits. This data is for your use, stored locally on your device, and is not used by us for any other purpose.
• Technical & Usage Information: We may collect basic log data for security and operational purposes, such as your IP address, browser type, and interactions with the Platform. This data is used for troubleshooting, security monitoring, and performance diagnostics.
• Analytics: We collect aggregated, de-identified data to understand usage patterns and improve the Platform. This data cannot be used to track you across other services.

3. How We Use Your Information

We use your information for the following purposes:

• To Provide and Maintain the Service: To operate the Platform, authenticate you, and display your content.
• To Manage Accounts and Subscriptions: To manage your account settings, subscription status, and billing state.
• To Communicate With You: To send you service-related notifications, updates, or respond to your support requests.
• For Security and Safety: To protect the Platform and our users from fraud, abuse, and security risks.
• To Improve the Platform: We may use aggregated and anonymized data to understand how our Platform is used and how we can improve it.
• Tracking: We do not use device identifiers, advertising identifiers, or any personal data for cross-app or cross-website tracking purposes. We do not sell user data or share it with third parties for advertising.

4. Legal Basis for Processing (GDPR)

If you are in the EU or UK, our legal bases for processing include:

• Performance of a contract: Providing the Platform and its features.
• Legal compliance: Meeting applicable laws and regulatory obligations.
• Legitimate interests: Security, analytics, and platform improvement.

5. How We Share Your Information

We do not share your personal data with third parties, except in the following limited circumstances:

• With Your Consent: We may share information if you give us your explicit consent to do so.
• Service Providers: We may use third-party service providers for functions like payment processing, hosting, email delivery, or age verification (if enabled). These providers are contractually obligated to protect your data and are not permitted to use it for their own purposes.
• For Legal Reasons: We may disclose your information if we believe it is reasonably necessary to comply with a law, regulation, legal process, or governmental request.

6. International Data Transfers

Where we rely on service providers or infrastructure outside the EU/UK, personal data may be transferred internationally. When we do so, we use appropriate safeguards, such as Standard Contractual Clauses or other lawful transfer mechanisms.

7. Data Security

We implement modern technical and organizational measures to protect your information and reduce the risk of unauthorized access, loss, or misuse.

8. Data Retention

We retain personal data as needed to provide the Platform, comply with legal obligations, resolve disputes, and enforce agreements. Operational logs are retained for up to 90 days unless a longer period is required for security or legal compliance. If you delete your account, we will delete or de-identify your personal data, except where retention is required by law or for legitimate business purposes (e.g., security or fraud prevention).

9. Your Rights (GDPR Compliance)

As a user, you have rights over your personal data. In line with GDPR, these rights include:

• The right to access: You can request a copy of the personal data we hold about you.
• The right to rectification: You can request that we correct any inaccurate or incomplete data.
• The right to erasure ("right to be forgotten"): You can request that we delete your personal data.
• The right to restrict processing: You can request that we limit the processing of your personal data.
• The right to data portability: You can request that we provide you with your data in a structured, commonly used format.

To exercise any of these rights, please contact us at privacy@psyque.net.

10. Age Requirements and Verification

OriginDot does not allow users below the minimum legal age (16 or the applicable local legal minimum, whichever is higher). Age verification is on our roadmap. If required by law and/or if enabled in the future, you may be asked to complete a third-party age verification process to access certain features. If verification is completed, we may retain a record of verification as required by law or for fraud prevention.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any significant changes by posting the new policy on this page and, where appropriate, through a notification on the Platform.

12. Contact Us

If you have any questions or concerns about this Privacy Policy, please contact us at privacy@psyque.net.

Data Protection Officer (Spain/EU): dpo@psyque.net for GDPR and data residency inquiries.