Last updated: August 1, 2026
Controller and scope
The data controller is [DENUMIREA JURIDICĂ COMPLETĂ], established at [ADRESA POȘTALĂ COMPLETĂ]. Privacy requests can be sent to support@origintalium.com.
Information we process
Account information includes your email address, display name, authentication identifiers, confirmation state, and password security data managed by Supabase Auth. Newsletter information is limited to the email address you submit and the subscription, confirmation, delivery, and unsubscribe records maintained by Brevo. Profile information may include your optional bio, location, avatar, and banner. Community information includes posts, comments, reactions, and links you choose to share. Content Studio records identify administrators who create or update platform content. Access and billing records include membership status, Course purchase status, Stripe customer and transaction references, payment amounts, currency, and relevant dates. Media records for profile images and protected platform content may include the file name, type, size, owner, private storage key, and technical media details. Origintalium does not receive or store your complete card number.
Why we use it
Information is used to create and secure accounts, provide requested Community and Course features, confirm payments and access, display member profiles and conversations, deliver private media, answer support questions, prevent misuse, maintain service reliability, and keep necessary financial or legal records. Processing is based, as applicable, on performing the agreement with you, complying with legal obligations, protecting the service and its members through legitimate interests, and consent where the law requires it.
Services that support Origintalium
Supabase provides authentication, database, access control, server functions, and the account-confirmation and password-reset email workflows. Brevo delivers those transactional emails and manages newsletter subscriptions, confirmations, campaigns, delivery records, and unsubscribes. Stripe processes payments, subscriptions, and billing management. Cloudflare provides website delivery, private media storage, email routing, and Turnstile anti-bot verification for the newsletter form. Zoom provides live gatherings, while Google Forms may collect questions or feedback when you choose to use those links. Each provider processes information under its own privacy terms and security practices.
Newsletter and direct contact
When you submit the newsletter form, the email address and a Cloudflare Turnstile verification token are sent securely to an Origintalium server function. The token is checked only to prevent automated misuse. Brevo then sends a double-opt-in confirmation email. You are added to the Origintalium Newsletter list only after you click the confirmation link. Newsletter emails include an unsubscribe option, and you may withdraw consent at any time. Messages sent to support@origintalium.com are forwarded to the operator's support inbox and used to answer and manage your request.
Community visibility
Your display name and avatar identify you inside the private Community. Your bio and location are shown to other members only when the related profile settings are enabled. Posts, comments, reactions, and shared links are visible to authorized Community members. The Community Chat does not accept member file or image uploads. Your account email and billing information are not displayed to other members.
Private media
Profile images and protected platform files are stored in a private Cloudflare R2 bucket. Origintalium provides short-lived, access-checked URLs when an authorized person requests an avatar, banner, Course image, recording, workbook, or other protected platform file. Permanent public media links and storage credentials are not provided through the website.
Retention
Account and Community information is retained while needed to operate and protect the service. Newsletter subscription and consent records are retained by Brevo while you remain subscribed and as reasonably necessary to honor unsubscribes and demonstrate consent. Deleted Chat posts and comments are removed from ordinary member view, and a scheduled database process permanently deletes Community Chat messages after three years. Related reactions and database relationships are removed according to their configured deletion rules. Profile media and protected platform content are retained while they remain connected to the relevant account or platform content and as otherwise reasonably necessary. After account deletion, completed Course transaction records may remain with the user reference removed for financial recordkeeping. Stripe and other providers may retain records under their own legal obligations. Direct emails are retained only as long as reasonably needed for the request and any applicable recordkeeping duty.
Your choices and rights
You can edit your profile, control bio and location visibility, manage subscription renewal through the Stripe portal, change your password, permanently delete a non-administrator account from Settings, or unsubscribe from newsletter emails through the link included in every campaign. Depending on applicable law, you may also have rights to access, correct, erase, restrict, or object to processing, receive portable data, withdraw consent where processing relies on consent, and complain to the competent data-protection authority. Contact support to exercise a right that is not available directly in your account. Some records may be retained where the law requires or permits this.
Security and international processing
Origintalium uses authentication, row-level database security, private object storage, short-lived media URLs, and restricted server credentials. No online service can promise absolute security. Service providers may process information in countries different from your own, subject to their contractual and legal safeguards.
Children
Origintalium is not directed to children under the age required to consent to online services in their country. Please do not create an account if you cannot legally agree to these terms without a parent or guardian.
Policy changes
Material changes will be posted on this page with an updated date. Where required, additional notice will be provided before a new use of personal information begins.
Contact
Privacy questions and requests can be sent to support@origintalium.com.
