Origo →
Privacy Policy
How ArsOrigo handles personal data, digital identity and interactions with its technical infrastructure.
This Privacy Policy explains how OmniaID S.r.l. (“ArsOrigo”, “AO”, “we”) processes personal data in accordance with Regulation (EU) 2016/679 (GDPR) and applicable data protection laws.
ArsOrigo is a digital working environment and technical platform for artists, artisans, creators, studios and professionals who create, manage and preserve digital identity and digital assets, including blockchain-based digital passports and related content.
Data Controller
Via Miraglia, 1 – 30170 Mestre (VE) – Italy
VAT / Tax ID: 012345678
Website:
www.arsorigo.com
Support & privacy:
support@arsorigo.com
Personal Data We Process
Email address, username, name where provided, account identifiers, OAuth identifiers and information required to authenticate and maintain an ArsOrigo account.
Public Polygon wallet addresses, Identitas contract references, token ownership information and blockchain transaction records associated with ArsOrigo services.
Images, video, 3D files, metadata, descriptions, traits, profile information, chat messages and other content submitted through the platform.
IP address, user agent, session identifiers, device information, security events, anti-fraud information and cookie preferences.
Payment identifiers, transaction outcomes, credit balances and billing metadata. Payment card details are processed by the payment provider and are not stored by ArsOrigo.
Text submitted to ArsOrigo Assistant and, when voice features are used, audio and related voice input necessary to understand the request and provide the requested assistance.
Why We Process Data
| Purpose | Legal Basis | Data |
|---|---|---|
| Account authentication and platform functionality | Performance of a contract | Account, identity and technical data |
| Wallet authorization and blockchain operations | Performance of a contract | Wallet addresses, authorization and blockchain records |
| Content creation, TokenURI generation, storage and Mint/Update services | Performance of a contract | Content, metadata and blockchain data |
| Payments, billing and credit management | Performance of a contract; legal obligations | Transaction and billing data |
| ArsOrigo Assistant and support | Performance of a contract | Account, communication, text and voice data |
| Security, abuse prevention and fraud detection | Legitimate interest; legal obligations where applicable | Technical, security and usage data |
| Platform analytics and improvement | Consent; legitimate interest where applicable | Usage and technical data |
| Marketing and third-party tracking technologies | Consent | Online identifiers and events |
ArsOrigo Wallet & Authorization
An ArsOrigo account may be associated with a public Polygon wallet address. ArsOrigo Wallet can be used to access the blockchain identity and ArsOrigo assets associated with that address and, where supported, to authorize account or asset-related operations.
ArsOrigo services are designed so that the user's private key is retained by the user and may be stored or imported into ArsOrigo Wallet or another compatible wallet. Users are responsible for protecting their private keys and recovery information.
QR-based authorization may exchange temporary challenge and authorization information between ArsOrigo services and ArsOrigo Wallet in order to verify control of the relevant wallet address.
ArsOrigo Assistant
ArsOrigo Assistant provides contextual assistance relating to the ArsOrigo platform and its services.
When the Assistant is used, ArsOrigo may process the text entered by the user. When voice interaction is used, audio and related voice input may also be processed as necessary to understand the request and generate or deliver a response.
Information submitted to the Assistant may be processed using third-party artificial intelligence and technical service providers acting according to their applicable contractual and data-protection arrangements.
Users should not intentionally submit passwords, private keys, seed phrases or other authentication secrets to ArsOrigo Assistant.
Blockchain, Identitas & Relayer
ArsOrigo supports the creation and management of blockchain-based digital passports and related assets on public blockchain infrastructure.
ArsOrigo may create or associate a personal ERC-721 Identitas contract with a user account through the platform's technical infrastructure.
Supported on-chain operations may be submitted through the ArsOrigo Relayer. ArsOrigo may handle the blockchain gas required for operations performed through supported platform flows.
Public blockchain records may include wallet addresses, contract addresses, token identifiers, transaction hashes and other information inherent to the blockchain transaction.
Technical infrastructure may execute supported operations only within the applicable platform flow and according to the authorization mechanisms provided for that operation.
ArsOrigo provides technical infrastructure and interfaces. Use of the Relayer or other ArsOrigo infrastructure does not by itself make ArsOrigo the owner, co-owner, author or rights holder of a user's token, digital passport or underlying asset.
Blockchain transactions are public and, once confirmed on-chain, generally cannot be altered or deleted through conventional database deletion mechanisms.
IPFS, TokenURI & Recent Work
Content and metadata generated through ArsOrigo may be stored using IPFS (InterPlanetary File System). TokenURIs may reference metadata stored through this infrastructure.
ArsOrigo may use dedicated IPFS infrastructure, pinning and gateways to support access to content. Because IPFS is decentralized, long-term availability may also depend on distributed infrastructure outside ArsOrigo's direct control.
Recent Work may temporarily retain generated TokenURIs and related information so authenticated users can recover recently generated work without immediately repeating the same generation process.
Users should preserve important TokenURIs and other references required for their digital assets.
Data Retention
Account data is retained for the duration necessary to provide the contractual service and comply with applicable obligations.
Security and technical logs may typically be retained for approximately 6–24 months where necessary for security, diagnostics and fraud prevention.
Billing and accounting information is retained according to applicable legal and tax obligations.
Platform content is retained as necessary to provide the service or until deletion where deletion is technically and legally possible, subject to backups and decentralized infrastructure.
Data Sharing & Service Providers
ArsOrigo does not sell personal data.
Data may be processed by providers supporting hosting, infrastructure, email, authentication, payments, analytics, security, artificial intelligence, blockchain infrastructure and other technical services required to operate ArsOrigo.
Where required by applicable law, providers acting on behalf of ArsOrigo are engaged under appropriate data-processing arrangements. Information may also be disclosed to public authorities where required by law.
International Data Transfers
Some service providers may process data outside the European Economic Area. Where required, international transfers are carried out using mechanisms provided by applicable data-protection law, including adequacy decisions, Standard Contractual Clauses and supplementary safeguards where appropriate.
Further information may be requested at support@arsorigo.com.
Cookies & Similar Technologies
ArsOrigo uses strictly necessary technologies required for operation and security. Optional functional, analytics or marketing technologies are used according to the user's consent choices where consent is required.
| Category | Examples | Typical Retention | Legal Basis |
|---|---|---|---|
| Necessary | Session, security, authentication | Session / required period | Contract necessity / legitimate interest |
| Functional | Preferences and optional functionality | According to configured preference duration | Consent where required |
| Analytics | Usage measurement | According to configured analytics duration | Consent where required |
| Marketing | Optional marketing technologies | According to configured provider duration | Consent |
Authentication & Third-Party Integrations
ArsOrigo may support authentication through external identity providers such as Google, Discord, Facebook and Instagram, as well as wallet-based authorization through supported ArsOrigo flows.
External providers process information according to their own roles, services and privacy terms. ArsOrigo receives only the information required by the applicable integration and platform flow.
Nature of Data Provision
Data necessary for authentication, security, payments, requested services and supported blockchain operations is required in order to provide the relevant functionality.
Optional functionality and consent-based technologies remain voluntary. Refusing optional processing does not prevent use of functionality that does not depend on that processing.
Your Data Protection Rights
Where applicable, users may exercise their rights under Articles 15–22 GDPR, including access, rectification, erasure, restriction, portability and objection, by contacting support@arsorigo.com.
Users may also lodge a complaint with the competent supervisory authority, including the Italian Data Protection Authority (Garante per la Protezione dei Dati Personali).
Some information recorded on a public blockchain cannot be erased or altered by ArsOrigo in the same manner as information stored in a conventional database.
Minors
The service is intended for users aged 14 or older, or the applicable minimum age for digital consent in the user's jurisdiction.
Where required by applicable law, authorization from a parent or legal guardian may be necessary. If ArsOrigo becomes aware that personal data has been collected contrary to applicable requirements, reasonable steps will be taken where appropriate.
Changes to This Privacy Policy
ArsOrigo may update this Privacy Policy to reflect changes in law, technology, infrastructure or platform services.
The revision date displayed at the top identifies the current version.