Privacy Policy

Last updated 15 October 2026

This policy explains what personal data OrigTeX processes, why, and the choices you have.

What we collect

• Account data: name, email address, password hash (never the password), sign-in provider identifiers, two-factor settings.
• Content: the projects, files, comments, chat messages and history you create.
• Billing data: plan and subscription status. Card details are handled by Stripe and never reach our servers.
• Security logs: IP address and browser for active sessions, and an audit log of sign-ins and account changes.
• Connected services: if you connect GitHub or Dropbox, an access token (stored encrypted) and the account name.

Why we use it

To provide the service (contract), to keep it secure and prevent abuse (legitimate interest), to send transactional emails such as invitations and password resets, and to meet legal obligations such as tax records.

Who we share it with

Only processors needed to run the service: hosting, email delivery, Stripe for payments, and the identity provider you choose for sign-in. We do not sell personal data or use your documents to train models.

Fonts and tracking

All fonts and scripts are served from our own domain. We use one essential session cookie and no advertising or analytics cookies. See the Cookie notice.

Retention

Content is kept until you delete it or your account. Expired sessions and one-time tokens are removed automatically. Security logs are kept for up to 12 months.

Your rights

You can access and export your data (Settings → Privacy → Download my data), correct it, and delete your account. You may also object to processing or complain to your data protection authority.

Security

Data is encrypted in transit (HTTPS), secrets and third-party tokens are encrypted at rest, passwords are hashed with bcrypt, and documents compile in an isolated sandbox without network access. See Security.

Contact

Questions about this page: support@origlots.com · www.origtex.com