Privacy Policy

Last updated: March 24, 2026

OriginRound is built on a simple principle: we collect only what is necessary to run the platform and improve your experience. We do not sell your data, and we do not store anything we do not need.

01. What Data We Collect

Account Information

When you register, we collect your email address, username, and a securely hashed password. We never store your password in plain text.

Partner API Keys & Minimal Privileges

For Partners connecting a storefront, we collect Stripe Restricted API Keys to automate the creation of checkout sessions, manage subscriptions, and observe payment events on your behalf.

We operate on a principle of least privilege. We only request and utilise the minimum necessary permissions required to operate our automation bridge. These permissions are strictly limited to: Checkout Session Write, Subscription Write, Customer Write, Coupon Write, Invoice Read, and Credit Note Read.

We cannot route, split, touch, or process funds. All payments are processed directly between the Buyer and Partner via Stripe.

Activity Data

We track raw view counts on products to identify popular deals and understand platform performance. This data is not tied to individual users and cannot be used to identify or profile you.

Transaction Status

We receive webhook events from Stripe to determine whether a transaction succeeded, failed, or was refunded. This allows us to automatically grant or revoke access to digital assets. We do not collect, store, or have access to any payment or card details - all payment data is handled directly by Stripe between the buyer and seller.

Security & Device Data

To protect against fraud and abuse, we collect a device fingerprint when you initiate a purchase. This is used solely to enforce account-level restrictions - for example, blocking users flagged for chargebacks or policy violations. It is not linked to your identity beyond your account and is never used for tracking or advertising.

02. How We Use Your Data

We use the data we collect to:

03. Who We Share Your Data With

We never sell your personal data. We share data only with the third-party infrastructure providers required to operate OriginRound:

Each provider is bound by their own privacy policy and applicable data protection law.

04. Cookies & Tracking

We use essential cookies and strictly necessary device hashing to keep you logged in, maintain session security, and prevent fraudulent transactions. If you consent, we also use analytics cookies to understand aggregate site traffic. We do not use third-party advertising trackers, behavioural ad networks, or user profiling.

For full details, please refer to our Cookie Policy.

05. Your Rights & Data Deletion

You have the right to access, correct, and request deletion of your personal data at any time.

Requesting Deletion

You may request account deletion via your account settings or by contacting us at the email below. We will process your request within a reasonable timeframe. Upon deletion, your personal identifying data (email, password) will be mathematically anonymised and permanently decoupled from your account history.

Important - Digital Asset Access

If you delete your account, you will permanently lose access to your encrypted digital assets. Because OriginRound operates on a zero-trust model, asset connections cannot be recovered once an account is deleted. This action is irreversible.

GDPR / UK GDPR Rights

If you are located in the EEA or United Kingdom, you also have the right to:

06. Data Security

OriginRound operates on a zero-trust architecture. We take stringent technical and organisational measures to protect your data.

While we implement top-tier security measures, no system is entirely impenetrable. We require you to use a strong, unique password to secure your account credentials.

07. Data Retention

We retain your data for as long as your account is active or as required by law. Upon account deletion, personal data is removed or anonymised from our systems, subject to any legal retention obligations.

08. Changes to This Policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date at the top of this page. For significant changes, we will notify you by email or via a notice on the platform.

09. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact us:

OriginRound

Email: removed

For information about how we use cookies specifically, please refer to our Cookie Policy.