Privacy policy
Last updated 15 October 2026
This policy explains what Origami, Inc. (“Origami”, “we”) collects when you use our website, build an AI app, or talk to an app we host inside an AI assistant, and what we do with it. We collect as little as we can.
What we collect
When you contact us
Your name, email address and message, and your company website if you give it.
When we build an app or run an audit for you
Your website address. To build an app we read that site's public pages, the same pages anyone can visit, and store what we read to power the app. An audit reads the same pages but stores nothing after it finishes.
When you book a demo, we fetch the public logo of the website you enter to show you a preview. We keep the logo in a short-lived cache, not with your details.
When a buyer uses an app we host
When an AI assistant such as ChatGPT or Claude uses a company's Origami app, we log each request: a random session identifier, which assistant it came from, which tool it used, what was asked (for example a team size or a question about security) and the result. If a buyer gives an email address only to start a trial, we record that one was provided, not the address itself.
If a buyer asks the company's team to follow up, the app collects the name and email address they give, and passes them, with their quote, to that company. We act on the company's behalf for these details.
We don't receive the rest of the buyer's conversation with the assistant, their account details with that assistant, or anything the assistant doesn't send to the app.
When you use a workspace
Your email address, which workspaces you belong to and your role, who invited you, and when. Sign-in links are single-use and expire after 15 minutes (7 days for invitations).
When you browse this website
We don't use advertising trackers or third-party analytics. If you sign in to a workspace, we set one essential cookie to keep you signed in for up to 30 days; signing out removes it. Like any website, our hosting provider processes standard request data such as IP addresses to deliver pages and keep the service secure.
How we use it
- To run the service: building and hosting apps, answering requests and producing audits.
- To show the company that owns an app how it performs: questions asked, quotes given and trials started.
- To reply when you contact us.
- To keep the service secure and to fix problems.
How long we keep it
We keep messages you send us for as long as we need them to help you, or until you ask us to remove them. We keep an app's content and request log for as long as the app exists; deleting the app deletes both. We keep security logs only as long as we need them to protect the service.
Your choices and rights
You can ask us to show you, correct or delete the personal information we hold about you, or to stop contacting you. Depending on where you live, you may have further rights under laws such as the GDPR, the UK GDPR, the Australian Privacy Act or the CCPA, including the right to complain to your local data protection authority.
To make a request, contact us through our contact form. We'll respond within 30 days.
Security
We protect data with encryption in transit and access controls that limit who on our team can see it. No system is perfectly secure, but if a breach affects your information we'll tell you as the law requires.
International transfers
Origami runs on cloud infrastructure that may process data outside your country. When we transfer personal information internationally, we use the safeguards the law requires.
Children
Origami is a business service and isn't meant for anyone under 16. We don't knowingly collect information from children.
Changes to this policy
When we change this policy we'll update the date at the top, and for significant changes we'll tell app owners by email.
Contact
Questions about privacy? Reach us through our contact form.