Privacy Policy

1. Scope of This Policy

This Privacy Policy applies when you:

• visit or interact with our website;
• contact us regarding a data requirement, sample, pilot, or partnership;
• engage us for custom real-world data collection or dataset production;
• receive project documentation, evaluation materials, or dataset deliveries;
• participate in authorized field collection or operational activities; or
• otherwise communicate or conduct business with Origin Data Lab.

Project-specific agreements, data processing terms, statements of work, or customer instructions may impose additional privacy and security requirements. Where applicable, those terms will govern the relevant project.

2. Information We Collect

Business and contact information

We may collect names, business email addresses, telephone numbers, company names, job titles, country or region, and other professional contact information.

Inquiry and project information

We may collect information you provide about your organization, AI model, research objective, operational design domain, target scenarios, data gaps, technical requirements, delivery format, quality criteria, project timing, and procurement needs.

Communications

We may retain emails, meeting notes, support requests, feedback, contract discussions, evaluation requests, and other communications exchanged with us.

Transaction and billing information

We may receive transaction records, billing names, billing addresses, tax-related information, payment status, invoice details, and limited payment-related information from our payment providers.

Website and technical information

When you use our website, standard technical information may be collected, including IP address, browser type, device type, operating system, referring page, pages visited, approximate region, access time, and security or diagnostic logs.

3. Field Data Collection and Hunter App Operations

Origin Data Lab operates authorized field data collection workflows for the production of real-world datasets used in artificial intelligence, machine learning, computer vision, robotics, mobility, perception, and related research or development.

Depending on the approved mission and project configuration, our field collection systems may process:

• video, image, audio, or sensor-based field recordings;
• capture timestamps and recording duration;
• GPS or approximate location information;
• device, camera, orientation, motion, and IMU-related information;
• mission, scene, environment, route, weather, or lighting information;
• file integrity, upload, synchronization, and quality-control information;
• operator, session, device, or mission identifiers; and
• other project-specific metadata required for validation and delivery.

The purpose of field collection is to document real-world environments and scenarios under defined project instructions. It is not our purpose to identify, profile, or track members of the public.

Real-world recordings may incidentally include people, vehicles, license plates, storefronts, voices, or other elements visible or audible in public or authorized environments. Where required by the project, applicable law, customer agreement, or delivery specification, we may apply measures such as filtering, exclusion, redaction, anonymization, face blurring, license-plate blurring, access controls, or restricted distribution.

Exact field data types, metadata fields, anonymization requirements, geographic scope, and quality rules are determined by the applicable collection policy, project specification, customer agreement, and operational instructions.

4. How We Use Information

We may use information to:

• respond to inquiries and evaluate potential projects;
• understand a customer’s model, research, or data requirement;
• prepare proposals, feasibility reviews, pilot scopes, and statements of work;
• plan and perform custom real-world data collection;
• produce, validate, document, package, and deliver datasets;
• operate the Hunter App and related collection infrastructure;
• perform quality assurance, fraud prevention, integrity checks, and troubleshooting;
• manage customer support, billing, payments, and accounting;
• maintain project, contractual, security, and operational records;
• protect our systems, customers, field operators, and intellectual property;
• comply with legal, regulatory, tax, and contractual obligations; and
• improve our services, workflows, documentation, and technical systems.

5. Legal Bases for Processing

Depending on the context and applicable law, we process information based on one or more of the following:

• performance of a contract or steps requested before entering a contract;
• our legitimate interests in operating and protecting our business;
• compliance with legal, regulatory, accounting, or tax obligations;
• consent, where consent is required and obtained; or
• another lawful basis permitted by applicable law.

6. Payments and Billing

Payments may be processed by third-party payment providers such as Paddle or another provider identified during checkout, invoicing, or contract execution.

We do not normally store full payment card numbers, card verification codes, or complete payment credentials on our own servers. Payment providers process payment information according to their own privacy notices, security practices, and legal obligations.

We may retain limited transaction information necessary for project administration, customer support, fraud prevention, accounting, taxation, legal compliance, and dispute resolution.

7. How We Share Information

We do not sell personal information.

We may disclose limited information to:

• cloud hosting, storage, infrastructure, and security providers;
• payment, billing, accounting, and professional service providers;
• authorized employees, contractors, field operators, and quality reviewers;
• technology providers supporting communication, analytics, or project delivery;
• customers or project partners where disclosure is required for an authorized project;
• government authorities, regulators, courts, or law-enforcement bodies when legally required; or
• parties involved in a merger, acquisition, financing, restructuring, or sale of business assets.

Service providers and operational partners receive only the information reasonably necessary to perform their authorized functions and are expected to handle it in accordance with applicable obligations.

8. Customer Project Data

Customers may provide technical documents, collection instructions, scenario definitions, label taxonomies, model requirements, evaluation criteria, sample files, or other project information.

We use customer-provided information only as reasonably necessary to evaluate, plan, execute, validate, support, and deliver the applicable project, subject to the relevant agreement.

Confidentiality, ownership, licensing, retention, deletion, and reuse of customer project data may be further governed by a non-disclosure agreement, master services agreement, statement of work, data processing agreement, or other written contract.

9. Data Security

We use reasonable administrative, technical, and operational safeguards designed to protect information against unauthorized access, disclosure, alteration, loss, misuse, or destruction.

These measures may include access restrictions, role-based permissions, encrypted transmission, controlled storage, activity logging, file integrity checks, backup procedures, environment separation, project isolation, and security reviews.

No method of electronic transmission or storage is completely secure. We therefore cannot guarantee absolute security, but we work to maintain safeguards appropriate to the nature of the information and the relevant project risk.

10. Data Retention

We retain information only for as long as reasonably necessary for the purposes described in this Policy, including:

• responding to inquiries and managing customer relationships;
• performing and supporting contracted projects;
• maintaining dataset provenance, integrity, and quality records;
• meeting accounting, tax, legal, security, and compliance requirements;
• resolving disputes and enforcing agreements; and
• maintaining operational backups and audit records.

Retention periods may vary depending on the information type, project contract, customer instruction, legal requirement, and operational need. Information may be deleted, anonymized, aggregated, or securely archived when it is no longer required.

11. International Data Transfers

Origin Data Lab works with customers, infrastructure providers, contractors, and field operations across multiple countries. Information may therefore be processed or stored outside the country where it was originally collected.

Where required, we take reasonable steps to use contractual, organizational, or technical safeguards for international transfers in accordance with applicable law and project obligations.

12. Your Privacy Rights

Depending on your location and applicable law, you may have the right to:

• request access to personal information we hold about you;
• request correction of inaccurate or incomplete information;
• request deletion of certain personal information;
• object to or request restriction of certain processing;
• withdraw consent where processing is based on consent;
• request data portability where applicable; or
• submit a complaint to an appropriate data-protection authority.

We may need to verify your identity and may retain information where required or permitted by law, contract, security requirements, or legitimate business needs.

13. Children’s Privacy

Our website and commercial services are intended for businesses, institutions, researchers, and adult professionals. We do not knowingly solicit personal information directly from children through our website or business inquiry process.

Real-world field recordings may incidentally capture individuals of different ages in public or authorized environments. Such recordings are governed by the applicable collection policy, project requirements, access controls, privacy measures, and relevant law.

14. Third-Party Services and Links

Our website, payment process, documentation, or communications may contain links to third-party websites or services. Their privacy practices are governed by their own policies, and we are not responsible for the content or practices of third parties that we do not control.

15. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in our services, field operations, technology, legal obligations, or business practices.

The updated version will be posted on this page with a revised “Last updated” date. Material changes may also be communicated through the website, email, contractual notice, or another appropriate method.

16. Contact Us

Questions, requests, or concerns regarding this Privacy Policy may be sent to:

OriginDataLab Co., Ltd.
Origin Data Lab
Email: contact@origindatalab.io

Please include sufficient information for us to identify and respond to your request.