1. Introduction
Phanes Ltd ("Origin Auth," "we," "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform and services.
2. Information We Collect
2.1 Information You Provide
- Account creation data (name, email, password hash)
- Tenant registration details (organization name, subdomain, billing info)
- Communication content when you contact support
- Profile updates and custom metadata
2.2 Information Collected Automatically
- Authentication events (login attempts, MFA challenges)
- Device and browser information for security analysis
- IP addresses and geographic location data
- Usage metrics and API call logs
3. How We Use Your Data
- Provide and maintain authentication and identity services
- Process registrations and manage tenant accounts
- Monitor security and prevent fraud
- Send service notifications and security alerts
- Generate analytics and improve platform performance
- Comply with legal obligations
4. Data Sharing
We do not sell your personal data. We may share data with:
- Service providers (hosting, email, payment processing)
- Law enforcement when required by law
- Tenant administrators for their tenant's user management
5. Data Security
We implement industry-standard security measures including Argon2id password hashing, AES-256 encryption at rest, TLS 1.3 in transit, and field-level encryption for sensitive data. Our infrastructure undergoes regular security audits and penetration testing.
6. Your Rights (GDPR)
Under the GDPR, you have the right to: access your data, rectify incorrect data, erase your data (right to be forgotten), restrict processing, data portability, and object to processing. Submit requests to privacy@origin-auth.io.
7. Data Retention
Active user data is retained indefinitely until deletion is requested. Deleted data is anonymized after 7 years. Audit logs are retained for 7 years for compliance purposes.
8. Contact Us
For privacy-related inquiries, contact our Data Protection Officer at privacy@origin-auth.io