Política de Privacidade

Data da última alteração: 17 de junho de 2026

Introduction:

At Originality AI Inc. (hereinafter Originality.AI, we, us, our), we respect, value, and protect the privacy rights of our users, customers, institutions, and other individuals whose data may be processed through our Services. Protecting privacy and maintaining trust is essential to us, and we implement appropriate technical, administrative, and contractual controls that support the responsible handling of personal information in accordance with applicable privacy and data protection laws.

This Privacy Policy is incorporated into and forms part of Originality AI Inc.’s Terms and Conditions (Terms). It governs how we collect, use, disclose, transfer, store, retain, return, delete, and otherwise process personal information when you visit, browse and use our Services available on the website, app, Chrome extension, API, Moodle plugin, educational integrations, and other features or services we make available to you as an individual or Enterprise customer. It also applies when you attend our events, engage with our social media pages, contact support or sales, or participate in our marketing and other online communications (collectively, the Services).

Personal Data/ Personal Information: In this Privacy Policy, Personal Data or Personal Information means information that identifies, relates to, describes, can reasonably be associated with, or could reasonably be linked to an individual. Information that is aggregated or de-identified and cannot reasonably be linked to an identifiable individual is not treated as personal information. We use personal information to provide, secure, maintain, support, and improve the services, subject to the limits described in this policy. By using the services, contracting with us or browsing our website, you acknowledge that you have read and understood this Privacy Policy.

If you do not want us to collect or use your personal information, please avoid using the services or contact us before using them. If you are a school, district, college, university, or other institution seeking a privacy-restricted implementation, please contact us so that we can discuss available controls, contractual terms, and data-minimization options.

Please read this Privacy Policy with our Cookies Policy and the Terms and Conditions.

1. Accountability 

Originality.AI Inc. offers services to web publishers, content agencies, digital marketing companies, schools, colleges, universities, and other institutions, among others. Our Services may include plagiarism detection, AI detection, grammar and readability checking, fact-checking, optimization features, educational integrators, and related reporting and workflow functionality.

Many of our customers operate websites or digital publishing services and may already be familiar with privacy requirements, including privacy rights, the collection and use of Personal Information, and the use of cookies and similar technologies. However, this Privacy Policy is intended for all users. You do not need to be a website owner, content creator, or digital marketing professional to understand it, and no specialized knowledge is required.

AI Use Disclaimer: While our Services may leverage AI and machine learning techniques, we do not use your personal data or any Student Data to train AI or large language models; the only "data" used is the scans/input text (not any personal information), and ALL users have the option to opt out of the use of their scan/input text to help train and improve our models. We also do not use your personal or Student Data for targeted advertising, commercial profiling unrelated to the school-authorized educational purpose, or other secondary uses that are inconsistent with applicable law or our contract with the institution.

Scan History: When you use our service to check whether text was AI-generated or human-written, the text you input, and the result generated may constitute scan history. Unless you opt out, we may use your scan history and scan results to help train and improve our models. 

For school-authorized educational use under an official institutional agreement with Originality.ai, scan history that is Student Data will be used only to provide, secure, maintain, support, and improve the contracted educational service in a manner permitted by law and contract, and will not be used to train general-purpose AI models.

2. Interpretation and Definitions

2.1 Interpretation

Capitalized terms have the meanings set out below, whether used in singular or plural form.

2.2 Definitions 

  • Account: a unique account created for you or your organization to access our Services.
  • Application: the Originality.AI platform and Services provided in cloud-based, self-hosted, mobile, desktop, plug-in, extension, or API format.
  • Company: Originality AI Inc., 64 Hurontario St, Collingwood, Ontario L9Y 2L6, Canada.
  • Customer Data: information submitted to us by or on behalf of a customer or its authorized users in connection with use of the Services.
  • Education Records: means records, in any medium, that are directly related to a student and maintained by a School Customer, or by Originality.AI acting on the School Customer’s behalf, as determined under applicable law. Depending on the context, Education Records may include student-submitted assignments, essays, reports, scan results, originality or plagiarism outputs, and related account or usage information where maintained for a school-authorized educational purpose.
  • School Customer: means a school, school district, college, university, or other educational institution or educational agency that uses the Services for a school-authorized educational purpose. Where applicable, Originality.AI provides the Services to the School Customer as a service provider, contractor, or other party acting for or on behalf of the School Customer, subject to the parties’ agreement and applicable law. 
  • Services: means Originality AI’s products, features, and related services that we make available, including our website, web application, Chrome extension, API, and any related tools, functionalities, content scanning, plagiarism detection, AI detection, fact-checking, grammar and spelling review, SEO optimization, support, communications, and other services we provide.
  • Service Provider: a third party that processes information on behalf of the Company to provide hosting, storage, payment processing, analytics, support, security, or similar operational services.
  • Student Data: means Personal Information, User Content, and related records or data concerning a student that are provided to, generated through, or maintained in the Services in connection with a School Customer’s use of the Services for a school-authorized educational purpose under an official institutional agreement with Originality.ai. Depending on the context, Student Data may include account identifiers, pseudonymous or hashed identifiers, student-submitted assignments or essays, scan results, originality or plagiarism outputs, support records, and other information reasonably linkable to a student.
  • Third-party Sign-In Service: a third-party authentication provider, such as Google SSO, through which a user may log in or create an account
  • User Content: all text, documents, prompts, files, essays, assignments, and other content uploaded, entered, transmitted, or otherwise made available through the Services
  • Usage Data: data collected automatically from use of the Services or supporting infrastructure, such as IP address, browser type, device information, timestamps, pages viewed, and diagnostic information
  • Website: the Originality.AI website at https://originality.ai/.
  • You: the individual using the Services, or the company or other legal entity on whose behalf the individual uses the Services.

3. Who We Are

Originality.AI provides AI detection, plagiarism detection, fact checking, grammar and writing tools, and related services designed to help organizations and individuals evaluate content integrity, originality, and quality. We serve individuals, teams, educators, institutions, publishers, and writers. commercial customers and educational institutions, and we aim to process Personal Information in a manner that is proportionate to the purpose for which the Services are used.

4. Personal Information We Collect and Why

We collect the following categories of Personal Information, depending on how you interact with the Services:

  • Account and organization information: such as name, business or institutional email address, username, password, organization name, team role, and contact details needed to create and administer accounts.
  •  Customer payment and transaction information: such as billing details, order history, and limited payment-related information received from our payment processor. We do not store full payment card details.
  •  Usage, device, and log data: such as IP address, browser type, device type, operating system, timestamps, language settings, approximate location derived from IP, diagnostic information, and records of interactions with the Services.
  •  User Content and scan results: such as text, files, essays, assignments, prompts, submissions, scan history, originality scores, AI detection results, plagiarism reports, and related outputs. In educational contexts, this content may include Student Data or Education Records.
  •  Support and communications data: such as information you provide when you contact support, respond to surveys, participate in demos, attend events, or communicate with us by email, chat, phone, or social media.
  •  Identifiers selected by enterprise or school customers: which may include employee IDs, institutional usernames, pseudonymous IDs, or hashed identifiers where implemented by the customer or supported by the Services.
  • Institution and administrator information: Where a school or other institution deploys the Services, we collect administrator, instructor, and billing contact details, along with institution configuration settings and related account-management data necessary to provision and manage the account.
  • Student-related identifiers and education-use data: When the Services are used by a School Customer under an official institutional agreement with Originality.ai, we process limited student-related identifiers and associated records required to deliver the Services, such as institution-issued IDs, class or roster references, and assignment metadata. Where feasible, we support data minimization practices, including the use of pseudonymous, internal, or hashed identifiers instead of direct identifiers.
  • Inferences and analytics: such as information about how the Services are used, product performance, and customer preferences. We do not use Student Data for targeted advertising, sale, or general-purpose AI training.
  • Cookies and similar technologies: We use cookies and related technologies to support core functionality, maintain security, remember user preferences, and measure performance. Where permitted, these technologies may also be used for analytics and limited marketing purposes.

The table below summarizes the main categories of Personal Information we collect, the sources of that information, and the purposes for which it is collected.

We strive to keep Personal Information accurate and up to date; you should notify us of changes to your account or contact information so that our records remain current. 

We always minimize the Personal Information we collect and, where feasible and operationally appropriate, support the use of low-identifiability account information, such as pseudonymous, institution-issued, or hashed identifiers.

For individuals in the EEA, Switzerland, and the UK, we process Personal Information only where we have a valid legal basis, including consent, performance of a contract, compliance with legal obligations, and legitimate interests that are not overridden by your rights and interests. For individuals in Canada, we generally process Personal Information with consent or as otherwise permitted or required by applicable law.

Withdrawal of Consent: Where permitted by applicable law and where we rely on consent as the legal basis for processing, you may withdraw your consent at any time by contacting our Privacy Compliance Officer at support@originality.ai  with “Withdrawal of Consent” in the subject line. The withdrawal of consent will not affect the lawfulness of any processing conducted prior to such withdrawal.

Data Retention: We retain Personal Information only for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by applicable law. Retention periods vary depending on the nature of the information and are determined based on applicable legal obligations, contractual requirements, and legitimate operational needs, including tax, accounting, security, dispute resolution, and investigation considerations.

Where appropriate, we may de-identify or anonymize Personal Information so that it can no longer reasonably be associated with an identified or identifiable individual. De-identified or anonymized information may be used and disclosed for legitimate business purposes to the extent permitted by applicable law. If you have questions about our data retention practices, please contact us at support@originality.ai.

5. How We Use Personal Information

We use Personal Information for the following purposes, as applicable and in accordance with this Privacy Policy, our contractual obligations, and applicable law:

  • to provide, operate, maintain, support, and improve the Services;
  • to create, administer, authenticate, secure, and support user accounts;
  • to process payments, subscriptions, and other transactions;
  • to generate scan results, reports, and other outputs requested by users, customers, or school customers;
  • to monitor usage and service performance, troubleshoot errors, prevent fraud, detect misuse or abuse, and protect the security, availability, and integrity of the Services;
  • to communicate with you about the Services, including service-related announcements, updates, billing, support, administrative, and other transactional communications;
  • to send marketing or promotional communications where permitted by applicable law and subject to your preferences and rights;
  • to comply with applicable law, regulations, legal process, or enforceable governmental requests;
  • to enforce our Terms and other applicable agreements, and to protect our rights, privacy, safety, property, and those of our users, customers, school customers, and others; and
  • to assist customers and school customers with account administration, record management, and privacy, data protection, security, or compliance-related requests.

Consent. Where required by applicable law, we will obtain your consent before processing your Personal Information for a purpose that requires consent. Where we rely on consent, you may withdraw it at any time using the method made available at the time of collection or through other means we make available, such as an unsubscribe link, account settings, or similar preference tools. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

Student Data: We process Student Data solely on behalf of and under the direction of the applicable School Customer when that School Customer is under an official institutional agreement with Originality.ai, and only for authorized educational purposes, service delivery, service administration, security, safety, legal compliance, and other purposes permitted by applicable law and our agreement with the School Customer. We do not use Student Data for targeted advertising, do not sell Student Data, and, so long as the customer has chosen to opt-out of training, we do not use Student Data to train our artificial intelligence models. To the extent Student Data is subject to applicable U.S. student privacy laws, including the Family Educational Rights and Privacy Act (“FERPA”), the Children’s Online Privacy Protection Act (“COPPA”), and applicable US state student privacy laws, we process such data in a manner consistent with those laws and our agreements with School Customers.

6. How We Share Personal Information

We may disclose Personal Information as described in this Privacy Policy, as permitted by applicable law, and as reasonably necessary to provide, operate, administer, secure, support, and improve the Services.

A. Disclosures for Service Delivery and Business Operations

We may disclose Personal Information to the following categories of recipients:

1. Personnel and Authorized Workforce Members: Access to Personal Information is limited to employees, contractors, and other personnel who have a legitimate business need to access such information to provide, operate, maintain, secure, support, or improve the Services, or to respond to customer inquiries and support requests. Such personnel are authorized to access only the Personal Information necessary to perform their assigned responsibilities and are subject to stringent confidentiality and security obligations.

2. Service Providers: We may disclose Personal Information to third-party vendors, contractors, consultants, and other service providers that perform services on our behalf, such as payment processing, hosting, cloud storage, customer support, security monitoring, analytics, communications delivery, and product development. These service providers are contractually restricted from using or disclosing Personal Information except as necessary to perform services for us or as otherwise required by law.

3. Analytics and Similar Providers: We may disclose limited Personal Information to analytics and similar providers that assist us in measuring usage of the Services, evaluating performance, understanding engagement with our content, and improving the user experience, products, services, and related communications. Where required by applicable law, we will provide any required notice, choice, consent, or opt-out rights before engaging in such disclosures.

4. Legal, Compliance, and Protection Purposes: We may disclose Personal Information to courts, law enforcement, regulators, government authorities, advisors, or other third parties where we believe such disclosure is necessary or appropriate to: comply with applicable law, regulation, legal process, or enforceable governmental request; enforce our Terms or other agreements; detect, investigate, prevent, or address fraud, abuse, security incidents, or other unlawful activity; or protect the rights, property, safety, and security of Originality.AI, our users, our Customers, School Customers, or others.

B. Categories of Personal Information Disclosed for Business Purposes

During the preceding 12 months, we may have disclosed the following categories of Personal Information to service providers, contractors, and other authorized recipients for business purposes consistent with this Privacy Policy:

  • Contact Data: including name, email address, billing address, mailing address, telephone number, professional title, and company name, to payment processors, cloud hosting and storage providers, customer support providers, communications providers, and analytics providers.
  • Transactional Data: including information relating to subscriptions, orders, billing, and transaction history, to payment processors, finance providers, and customer support providers.
  • Usage, Device, and Geolocation Data: including IP address and information regarding interactions with the Services, to analytics providers, hosting providers, security providers, and platform operators.
  • Profile, Communications, and Account Data: including account credentials, support inquiries, and communications history, to customer support providers, cloud providers, and security providers; and
  • Inferences or derived insights: where applicable, to analytics and service providers that help us understand product usage, improve service functionality, and support internal business operations.

We require all recipients (third-party vendors, contractors, consultants, and other service providers) that process Personal Information on our behalf to use it only for authorized purposes and to protect it in accordance with applicable contractual, technical, and organizational safeguards.

C. Sales, Sharing, and Targeted Advertising

We do not sell Personal Information in exchange for monetary consideration. We may, however, disclose certain identifiers, usage information, and similar data to analytics, advertising, or similar partners in a manner that may be considered sharing, targeted advertising, or a similar regulated disclosure under certain U.S. state privacy laws. 

Where required by applicable law, we provide the rights and choices required by law, including consent where applicable and the ability to opt out of targeted advertising or other regulated sharing activities. We do not sell or share Personal Information of individuals whom we know to be under 18 years of age.

D. Student Data

Notwithstanding anything else in this Privacy Policy, Student Data is disclosed only as necessary to provide the Services on behalf of and under the direction and/or official institutional agreement of the applicable School Customer, to maintain and secure the Services, to comply with law, or as otherwise permitted by applicable law and contract. We do not use Student Data for targeted advertising. We do not sell Student Data. We do not disclose Student Data except as authorized by the School Customer, required to provide the Services, required by law, or otherwise permitted under applicable student privacy laws and our agreements with School Customers.

E. Privacy Rights and Requests

Where applicable, U.S. privacy laws provide a right to opt out of targeted advertising, sharing, or similar regulated disclosures. Individuals may exercise those rights through the designated privacy choices link or other mechanisms described in this Privacy Policy.

7. How We Protect Personal Information

We maintain adequate administrative, technical, and physical safeguards designed to protect Personal Information against unauthorized access, loss, acquisition, disclosure, alteration, or destruction. These safeguards are designed to be appropriate to the nature of the Personal Information processed and the risks presented by the processing.

A. Security Safeguards

Our security measures include safeguards intended to support the confidentiality, integrity, and availability of Personal Information. For example, we use encryption in transit, including HTTPS/TLS, access controls, and other reasonable and appropriate security measures designed to limit unauthorized access to Personal Information.

Notwithstanding the foregoing, no method of transmitting information over the Internet, and no method of electronic storage, can be guaranteed to be completely secure. As a result, although we use reasonable safeguards designed to protect Personal Information, we cannot guarantee absolute security.

B. Security Incidents and Breach Response

We maintain processes designed to identify, investigate, contain, and remediate suspected or confirmed security incidents involving Personal Information.

If we determine that a breach or other security incident affecting Personal Information has occurred, we will take steps consistent with applicable law and our contractual obligations, which may include:

  • notifying affected individuals, Customers, or School Customers, as appropriate and as required by law;
  • providing available information regarding the nature of the incident, including, where known and appropriate, the categories of Personal Information involved;
  • describing steps individuals can take to help protect themselves from potential harm;
  • implementing remediation and containment measures designed to address the incident and reduce the likelihood of recurrence; and
  • notifying regulators, law enforcement, or other authorities where required by applicable law.

For Student Data, we will notify the applicable School Customer in accordance with our agreement and applicable law.

C. Regulatory Compliance and Complaints

We offer the Services to users and Customers in multiple jurisdictions and seek to maintain privacy and security practices designed to comply with applicable laws, regulations, and contractual commitments, including, where applicable, U.S. state privacy laws, student privacy laws, Canada’s federal and provincial privacy laws, the EU General Data Protection Regulation, and the UK General Data Protection Regulation.

If you believe that we have handled your Personal Information in a manner that is inconsistent with this Privacy Policy or applicable law, you may submit a privacy-related complaint or inquiry using the contact information below. We will review such inquiries in accordance with applicable law and our internal complaint-handling procedures and respond as required by law.

D. Privacy Compliance Contact

Originality.AI has designated a Privacy Compliance Officer to oversee privacy compliance and privacy-related inquiries.

Privacy Compliance Officer
Email: support@originality.ai
Subject line: Privacy Inquiry

For matters involving Student Data, parents, guardians, and students should generally direct privacy questions or requests to the applicable School Customer first, as the School Customer is typically responsible for decisions regarding Student Data processing, access, correction, and related rights, unless applicable law or our agreement provides otherwise.

8. Your Rights and Choices over Your Personal Information

Depending on your jurisdiction and the nature of your relationship with us, you may have certain rights regarding your Personal Information, subject to applicable law and any exceptions or limitations permitted by law. These rights may include the right to:

  • Be informed about how and why we collect, use, disclose, and otherwise process your Personal Information;
  • Request access to the Personal Information we maintain about you;
  • Request correction of inaccurate Personal Information;
  • Request the deletion of your Personal Information;
  • Request restriction of processing, or object to certain processing of your Personal Information;
  • Withdraw consent where we rely on consent as the legal basis for processing;
  • Request a copy of certain Personal Information in a portable format; and
  • Lodge a complaint with a competent privacy or data protection authority, where applicable.

To exercise your rights, to submit a privacy request, or to manage applicable privacy choices, please visit our Do Not Sell or Share My Personal Information or Privacy Settings page at https://Originality.AI/, or contact our Privacy Compliance Officer at support@originality.ai. We will respond to your request in accordance with applicable law. In some cases, we may need to verify your identity before processing your request.

These rights are subject to restrictions and exceptions under applicable law. For example, we may decline to fulfill part or all of a request where an exemption applies, where we cannot verify the request, or where retention of certain information is required or permitted by law.

A. Users in the EEA, Switzerland, the UK, and Canada

If you are located in the European Economic Area, Switzerland, the United Kingdom, or Canada, you may have some or all of the following rights under applicable privacy laws, subject to any limitations or conditions under those laws:

  • Right to be informed. You have the right to receive information about how we process your Personal Information, including the purposes for which we process it.
  • Right of access. You may request confirmation as to whether we process your Personal Information and, where applicable, request access to the Personal Information we hold about you, together with information such as the purposes of processing, categories of Personal Information involved, retention periods, and categories of recipients.
  • Right to rectification. You may request that we correct inaccurate or incomplete Personal Information that we maintain about you.
  • Right to withdraw consent. Where we rely on your consent to process Personal Information, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.
  • Right to data portability. Where applicable, you may request a copy of certain Personal Information in a structured, commonly used, and machine-readable format and, where technically feasible, request that it be transmitted to another controller.
  • Right to restrict processing. You may request that we restrict certain processing of your Personal Information where permitted by law.
  • Right to object. You may object to certain processing of your Personal Information where permitted by law.
  • Right to erasure. You may request that we erase your Personal Information in circumstances permitted by law.
  • Right to complain. If you believe we have handled your Personal Information in a manner inconsistent with applicable law, you may contact us at support@originality.ai. You may also have the right to lodge a complaint with the data protection authority, privacy regulator, or commissioner in your country, province, or jurisdiction.

B. U.S. State Privacy Rights

If you are a resident of a U.S. state that provides privacy rights under applicable law, you may have certain rights regarding your Personal Information, subject to verification and applicable legal exceptions. These rights may include:

  • Right to know/access. You may request confirmation of whether we process your Personal Information and request access to:
    • the categories of Personal Information we have collected about you;
    • the categories of sources from which the Personal Information was collected;
    • the business or commercial purposes for collecting, using, disclosing, selling, or sharing Personal Information;
    • the categories of third parties or recipients to whom we disclose Personal Information; and
    • in some jurisdictions, the specific pieces of Personal Information we have collected about you.
  • Right to correction. You may request correction of inaccurate Personal Information that we maintain about you, subject to appropriate verification.
  • Right to data portability. You may request a copy of certain Personal Information in a portable and, where required by law, readily usable format.
  • Right to deletion. You may request deletion of Personal Information we have collected from or about you, subject to legal exceptions. For example, we may retain certain information as necessary to complete transactions, detect or prevent fraud or illegal activity, exercise or defend legal claims, comply with legal obligations, or for other purposes permitted by law.
  • Right to opt out of sale, sharing, or targeted advertising. You may have the right to opt out of the “sale” or “sharing” of your Personal Information, or the use of your Personal Information for targeted advertising, as those terms are defined under applicable U.S. state privacy laws.
  • Right to opt out of certain profiling. In some states, you may have the right to opt out of profiling in furtherance of decisions that produce legal or similarly significant effects, where applicable.

To exercise applicable U.S. privacy rights or opt-out rights, please visit our Do Not Sell or Share My Personal Information or Privacy Settings page at https://Originality.AI/, or contact our Privacy Compliance Officer at support@originality.ai.

We will not discriminate against you for exercising privacy rights granted under applicable law.

C. Student Data and School-Provided Accounts

If your Personal Information is processed as Student Data on behalf of a School Customer and there is an official signed institutional agreement between the School Customer and Originality.ai, privacy rights requests relating to that Student Data should generally be directed to the applicable School Customer, because the School Customer typically controls decisions regarding access, correction, deletion, and other rights related to Student Data.

Where we process Student Data on behalf of a School Customer that is under an official institutional agreement with Originality.ai, we will assist the School Customer in responding to requests regarding Student Data as required by applicable law and our contractual obligations. We do not sell Student Data, do not share Student Data for targeted advertising, and do not use Student Data to train general-purpose AI models, so long as that School Customer or Student Customer has opted-out of AI training.

D. Requests Submitted by Authorized Agents

Only you, or a person legally authorized to act on your behalf, may submit a request relating to your Personal Information. Parents or legal guardians may also submit requests on behalf of their minor child where permitted by applicable law.

If you use an authorized agent, we may require proof of the agent’s authority to act on your behalf and may also require you to verify your identity directly with us. Authorized agents may use Personal Information only for purposes of submitting and fulfilling the request, verifying identity or authority, or preventing fraud, as permitted by law.

E. Verification of Requests

To protect Personal Information, we may take reasonable steps to verify your identity before processing requests to know, access, correct, delete, or otherwise exercise your rights. Verification may include matching the information you provide against our records and, where necessary, requesting additional information for verification purposes.

If an authorized agent submits a request on your behalf, we may require documentation demonstrating the agent’s authority, including signed permission where required by law.

F. Right to Appeal

If we deny your request, in whole or in part, and you have a right to appeal under applicable law, you may submit an appeal by contacting us at support@originality.ai. We will review and respond to appeals in accordance with applicable law.

9. Other Sites and Services

The Services may contain links to websites, plug-ins, or services operated by third parties. Their privacy practices are governed by their own policies, not ours. We encourage you to review those third-party policies before submitting Personal Information.

If you access our Services through a third-party platform, integration, extension, or plug-in, information may also be collected by that third party and governed by its own privacy practices.

10. Security

We have implemented reasonable measures to protect the personal information we manage; however, no security system can eliminate the risk of unauthorized access or use. Our protective measures consist of physical, contractual, technical, and managerial safeguards designed to secure your personal information. Be conscious that ensuring security is also your responsibility - You must protect against unauthorized access to your passwords, computers, and other connected devices. Always log off when you're finished using a shared device and sign out of our websites. Note that no transmission over the Internet can be rendered completely secure; therefore, to the extent permitted by applicable law, we will not be liable for any disclosure of personal information that occurs due to transmission errors or actions taken by any third party.

11. International Data Transfers

Your Personal Information may be stored and processed in Canada, the United States, and other jurisdictions where our service providers or we operate. These jurisdictions may have privacy laws that differ from those in your place of residence. Where required, we implement appropriate safeguards for cross-border transfers, such as contractual protections and other lawful transfer mechanisms.

If you are located in the European Economic Area (EEA), Switzerland, the United Kingdom (UK) and Canada: If you are in the EEA, Switzerland, the UK, or Canada, we collect and use your personal information based on your consent and the context in which we collect it. Your data may be transferred to recipients in countries that do not provide the same level of protection as your country of residence. Where we transfer personal information outside your country, we will implement appropriate safeguards, including European Commission Standard Contractual Clauses under GDPR Article 46(2) or reliance on an adequacy decision under GDPR Article 45, where applicable. If you would like more information about these safeguards, please feel free to contact us at support@originality.ai.

12. Children and Student Data

Originality.AI provides services for business, professional, and educational use. Certain Services may be deployed by schools, colleges, universities, and other institutions in contexts involving students, including those under 13. In such cases, Originality.AI processes Student Data on behalf of the relevant School Customer and solely for a school-authorized educational purpose, in accordance with applicable law and contract.

Where the Children’s Online Privacy Protection Act (COPPA) applies, and a School Customer authorizes a child’s use of the Services, Originality.AI relies on the School Customer to provide any required notices, consents, and authorizations permitted by law. Originality.AI does not use Student Data or Education Records for targeted advertising, sale, profiling for non-educational purposes, or training general-purpose artificial intelligence models.

To the extent student submissions (such as essays, assignments, or related outputs) constitute Education Records under applicable law, they are processed strictly in Originality.AI’s capacity as a service provider, subject to the School Customer’s instructions and applicable legal requirements.

Parents, legal guardians, and Eligible Students seeking access to, correction of, export of, or deletion of Student Data or Education Records should direct requests to the relevant School Customer, unless otherwise required by law or contract. Originality.AI will reasonably assist School Customers in responding to such requests where required.

Outside of a School Customer context, Originality.AI does not knowingly collect personal information directly from children under 13. If such information is collected without a lawful basis or appropriate authorization, Originality.AI will take prompt steps to delete or remediate it. If you believe a child has provided personal information, please contact support@originality.ai

13. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will post the updated version on this page and, where required by law, provide additional notice for material changes. By continuing to use the Service after the updated Privacy Policy takes effect, you acknowledge that you have reviewed the changes. The Effective Date at the top of this Privacy Policy shows when it was last updated.

14. Contact Us

If you have questions about this Privacy Policy, how we process your personal information, or how to exercise your rights, please contact us at:

Email: support@originality.ai.

The Privacy Compliance Officer (PCO),

Originality AI Inc.

64 Hurontario St, Collingwood, Ontario L9Y 2L6