Privacy Policy
Data we collect
OrigamiFalcon collects the data needed to create and manage your account, process payments, deliver signals and support, and comply with legal obligations. This includes:
- Account data: email address, name, phone (optional), avatar, password hash.
- Payment data: transaction records, payment method type, and processor references. Full card numbers are never stored; the payment processor handles PCI scope.
- Usage data: page views, session duration, clicks, device and browser information (user agent, screen size).
- Communication data: support tickets, messages, and notification preferences.
- Technical data: IP address (anonymized), cookies and session identifiers.
How we use it
- To deliver the service you subscribed to, including signal access and downloads.
- To manage your account, authenticate sessions, and send transactional communications.
- To process, verify, and reconcile payments and refunds.
- To analyse usage for reliability, fraud prevention, and service improvement.
- To comply with tax, accounting, and legal obligations.
Legal basis
Consent (marketing communications), contract (service delivery), legitimate interest (analytics, fraud prevention), and legal obligation (tax and audit records).
Data sharing
We do not sell personal data. Data is shared only with service providers acting on our instructions: payment processors (Razorpay or equivalent), hosting and infrastructure (Cloudflare, Supabase), email (Zoho), and self-hosted analytics. No advertising networks. No third-party ad tracking.
Data retention
| Data type | Retention |
|---|---|
| Account data (profile, settings) | While active plus 30 days after deletion |
| Orders and payments | 7 years (tax compliance) |
| Payment proof screenshots | 7 years |
| Tickets and messages | 2 years |
| Audit logs | 1 year |
| Session events (replay) | 30 days |
| Analytics (anonymized) | 2 years |
| Backups | 7 days (free tier) |
Your rights
- Access: request a copy of your personal data.
- Correction: update inaccurate profile information.
- Deletion: request account deletion; data is removed within 30 days, subject to legal retention requirements.
- Portability: receive data in a machine-readable (JSON) export.
- Opt-out: unsubscribe from marketing emails and reject non-essential analytics cookies.
- Restrict processing: ask us to limit certain uses of your data.
International transfers
Data is stored in India (Supabase ap-south-1). Cross-border transfer occurs only with consent and adequate safeguards where required.
Children
OrigamiFalcon is not intended for users under 18. Age is verified at signup.
Updates
Policy changes are communicated by email and an in-app banner. Continued use after notice constitutes acceptance.
Contact
Privacy questions: privacy@origamifalcon.in. We respond within 30 days.
Last updated: 23 October 2026 · Origami Falcon