Privacy Policy

OriginProof provides a compliance workspace for consumer brands substantiating U.S.-origin claims. This policy describes what we collect through the application at this domain, the supplier affidavit portal, and our public marketing pages.

Authentication is handled by our managed backend provider. When you create an account we store your email address, a hashed password (we never see the plaintext), your workspace role (member or compliance lead), and sign-in timestamps. We do not use this data for advertising and we do not sell it.

Products, SKUs, claim types, bill-of-materials components, cost percentages, origin countries, assembly records, supplier records, scores and generated substantiation binders are stored on behalf of your brand. Access is scoped per brand at the database level using row-level security, so users authenticated to one brand cannot read another brand's records. Content you enter is yours; we act as a processor for it.

Suppliers submit affidavits through a tokenised link without creating an account. When an affidavit is submitted we record the attesting person's name, title, email, the declarations they certify, any uploaded document, and — because the submission is a signed attestation made under penalty of perjury — the submitting IP address and browser user-agent, together with a timestamp.

That IP and user-agent capture exists solely to evidence the provenance of an attestation in an audit or regulatory response. It is disclosed to the supplier on the submission form before they sign. It is retained with the affidavit record and is visible to the brand that requested the affidavit.

Paid plans are billed through Stripe. Card details are entered on Stripe's systems and are never transmitted to or stored by us. We store a Stripe customer ID, subscription ID, plan tier, SKU allowance, and subscription status so the application knows what your account is entitled to. Sales enquiries submitted from the pricing page (company name, work email, approximate SKU count, optional message) are stored so we can respond.

We keep server and application error reports to keep the service working. These may incidentally include a URL, a route name and an account identifier. We do not run third-party advertising or cross-site tracking scripts.

Compliance records are deliberately durable: substantiation binders and audit history are immutable once generated, because their value depends on being tamper-evident. Records are soft-voided rather than hard-deleted. If you close your account you can request export and deletion of your brand's data, subject to any records we must retain for our own tax or legal obligations.

We will never withhold read access or binder exports for billing or plan-limit reasons. If an account lapses, write access may be restricted, but you can always read and export your compliance record.

Questions, access requests or deletion requests: hello@getoriginproof.com.