Privacy Policy

1. Data We Collect

We collect only the information required to deliver contracted services, secure accounts, and produce evidence records.

• Account and organization details (name, role, school or institution affiliation, email).
• Service metadata (timestamps, device identifiers, audit events, and system logs).
• Uploaded evidence and associated integrity data when institutions enable those workflows.

2. How We Use Data

We use data to operate the platform, secure the environment, support institutional reporting, and meet legal or contractual obligations. We do not sell personal information.

3. Sharing and Disclosure

• We share data with vetted service providers only when needed to run the platform.
• We may disclose information when required by law, court order, or valid legal process.
• We provide institution-directed access controls for authorized administrators and staff.

4. FERPA, COPPA, and Education Privacy

For education deployments, Archive Origin supports FERPA-aligned school-official processing and COPPA-aware operational controls. Institutions remain responsible for student and guardian notices, consent workflows, and local policy enforcement.

5. Security Safeguards

• Encryption in transit and at rest.
• Role-based access controls and authentication protections.
• Security monitoring, vulnerability management, and periodic control reviews.
• Secure development lifecycle practices integrated into engineering workflows.

6. Data Retention and Deletion

We keep data only as long as needed for service delivery, compliance, and contractual requirements. At contract end, data export and deletion are handled per agreement terms and institutional instructions.

7. Access and Corrections

Institutions and authorized users may request access, correction, export, or deletion based on role and applicable law. We verify identity and permissions before processing requests.

8. Policy Updates

We may update this policy as our services evolve or legal requirements change. Material updates will be posted here with an effective date.

9. Contact

Privacy questions: damion@archiveorigin.com

Effective date: February 28, 2026