OneOrigin Privacy Policy

OneOrigin, Inc., a Delaware corporation headquartered in Scottsdale, Arizona ("OneOrigin," "we," "us," or "our"), respects your privacy. This Privacy Policy explains how we and our subsidiaries and affiliates collect, use, share, and protect personal information across our websites, mobile applications, and services. By using our websites or services, you agree to the practices described in this policy.

1. Scope of This Policy

This Privacy Policy applies to:

• OneOrigin websites on the oneorigin.us domain and its subdomains

• OneOrigin mobile applications

• Products and services accessed through our websites

• Event registrations, demos, and marketing interactions

• Personal information we process on behalf of our subscribers and institutional customers in the course of providing our services

This policy does not apply to third-party websites or services we do not control, even where we link to them.

2. Information We Collect

We collect the following categories of personal information:

• Identifiers: name, email address, phone number, mailing address, and any profile photo you provide.

• Account information: login credentials, role, organization, and subscription details.

• Usage data: browser type, device information, IP address, pages viewed, and interactions with our sites and services.

• Communications: messages, support requests, chat transcripts, and social media handles you share with us.

• Transactional data: records of orders and payments. Payment card details are handled by our third-party payment processors and are not stored by OneOrigin.

• Marketing and event data: preferences, survey responses, event attendance, and accessibility or dietary needs you voluntarily provide.

We do not intentionally collect sensitive personal information unless you choose to provide it or it is required to deliver a service you request.

3. How We Collect Information

• Directly from you, when you fill out a form, register, request a demo, contact us, or otherwise communicate with us.

• Automatically, through cookies, pixels, log files, and similar technologies when you use our sites and services.

• From third parties, such as our institutional customers, business partners, social platforms, and analytics providers, consistent with their own terms and applicable law.

4. How We Use Your Information

We use personal information to:

• Provide, operate, maintain, and personalize our websites, products, and support

• Process transactions and manage billing and subscriptions

• Communicate with you about products, updates, events, and campaigns you have asked to receive

• Perform our contractual obligations to you and to our institutional customers

• Improve, secure, and develop our products and services

• Detect, prevent, and respond to fraud, abuse, and security incidents

• Comply with legal obligations and enforce our agreements

5. How We Share Information

We may share personal information with:

• Our subsidiaries and affiliates

• Authorized service providers and subprocessors who process data on our behalf under contractual confidentiality and security obligations (for example, hosting, analytics, email delivery, and payment processing)

• Our institutional customers, where we process data on their behalf

• Legal, regulatory, or governmental authorities when required by law or to protect our rights, users, or systems

• A successor entity in connection with a merger, acquisition, financing, or sale of assets

• Any other party with your consent or at your direction

We do not sell your personal information, and we do not share it for cross-context behavioral advertising as those terms are defined under applicable US state privacy laws.

6. Cookies and Tracking Technologies

We use cookies and similar technologies to operate our sites, remember your preferences, measure usage, and improve your experience. You can control cookies through your browser settings and through the consent controls on our site.

We honor browser- and device-level privacy signals. When your browser or device sends a Global Privacy Control (GPC) or Do Not Track (DNT) signal, we treat it as an opt-out of non-essential tracking and analytics. You can review and adjust your cookie and AI-interaction preferences at any time through the consent notice on this site.

7. Data Retention

We retain personal information only for as long as necessary to fulfill the purposes described in this policy, to comply with our legal and contractual obligations, to resolve disputes, and to enforce our agreements. When data is no longer needed, we delete or de-identify it.

8. Data Security

We maintain reasonable administrative, technical, and organizational safeguards designed to protect personal information against unauthorized access, disclosure, alteration, and destruction. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

9. International Data Transfers

OneOrigin operates in the United States and works with affiliates and service providers in other countries, including India. Where we transfer personal information across borders, we use appropriate safeguards required by applicable law, including contractual protections such as standard contractual clauses where relevant.

10. Your Privacy Rights

Depending on where you live, you may have the right to:

• Access the personal information we hold about you

• Correct inaccurate information

• Delete your information

• Restrict or object to certain processing

• Withdraw consent where processing is based on consent

• Request a portable copy of your information

• Opt out of the sale or sharing of personal information (we do not sell or share personal information as those terms are defined under applicable law)

To exercise these rights, contact us at [email protected]. We will verify your request and respond within the timeframe required by applicable law. We will not discriminate against you for exercising your rights.

11. Children's Privacy

Our websites and services are not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided us personal information, contact us at [email protected] and we will delete it.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will update the "Last updated" date above and, where appropriate, provide additional notice by email or a prominent notice on our website.

13. Contact Us

If you have questions about this policy or wish to exercise your rights:

Email: [email protected]

United States: OneOrigin, Inc., 1375 N Scottsdale Rd, Ste 450, Scottsdale, AZ 85257

India (affiliate): PointOrgn Technologies India Pvt. Ltd, JP Nagar, Bangalore 560078