Privacy information
The pilot boundary
The public checker may only be used with the bundled demo files until final privacy terms, production infrastructure and deletion controls are approved.
Hosting and processors
The website is hosted by Netlify at origindiligence.netlify.app. The custom domain origindiligence.com is pending. Accounts and saved records are intended for Firebase project origindiligence: Authentication (europe-west), Firestore (eur3) and Cloud Functions (europe-west1). Website request handling on Netlify may take place outside the EEA. Map tiles come from OpenFreeMap. Transactional email uses Resend. Payments would use Mollie if checkout is enabled. Aggregate measurement would use Plausible if approved. Live screening would send plot geometry to Global Forest Watch and any optional providers that are switched on. Signed processor terms still need privacy review.
Retention, export and deletion
Until legal approval, treat the following as product defaults, not a published legal commitment. Raw uploads: 90 days. Tile and overlay cache: 30 days. Supplier return links: 90 days unless revoked. Evidence packs and cleaned files: kept while the workspace exists. You can request an account export or deletion at hello@origindiligence.com. A production restore test has not been completed. Customer files are not accepted during the pilot.
Incidents
For a suspected incident, including a leaked collection link, write to hello@origindiligence.com. There is no response-time promise.
Website measurement
Aggregate website measurement remains off until the provider, privacy wording and production configuration are approved. If enabled, we will not send names, email addresses, filenames, supplier data or free-text content, and browser privacy signals will be respected.
Supplier collection
Suppliers will be told which buyer requested the data, why it is requested and how to ask a question before they submit. A supplier account is not required.
Contact
Questions about privacy can be sent to hello@origindiligence.com.