Privacy Policy

Overview

Origami is a terminal workspace manager operated by Ricardo Bucho, trading as Origami, based in Portugal. Ricardo Bucho is the data controller for the personal data described here. This policy explains what data we collect, why, and every connection the Origami app makes to the internet on its own. The short version: we collect the minimum needed to run the licensing system and deliver updates, and we don't track, profile, or sell your data.

What we collect

When you subscribe

Your email address and payment details are collected by Stripe during checkout. We receive your email address and Stripe customer and subscription identifiers. We do not receive or store your card number, CVC, or billing address. Stripe handles all payment data directly.

When you activate a device

The Origami app sends your license key, a device fingerprint, your device's name (its hostname), and the app version to our server. The fingerprint is a SHA-256 hash of your device's hardware identifier, so the identifier itself never leaves your device. We store these to enforce the device limit on your license and to let you manage your devices.

While Origami+ is active

Every 15 minutes while the app is open, and when it starts, it checks that your license is still valid. This sends your license key, the device fingerprint, and the app version. We record when each device was last seen and which version it runs.

When you use Origami+ Enterprise

The person who buys an Enterprise subscription manages it for their organisation. We store the organisation's name, its number of seats, and the email address of each member they invite. The organisation's owner can see each member's email address and, for each of their devices, its name, the start of its fingerprint, its app version, and when it was last seen. The owner can export this list and remove devices or members.

When you contact support

The support form sends us your name, email address, subject, and message by email. We use them only to answer you.

When you visit the website

We do not use analytics, tracking pixels, or advertising cookies. The website sets a session cookie required for form submissions (CSRF protection) and to keep you signed in to the pages where you manage a license. Certain forms use Cloudflare Turnstile to prevent abuse, which may process your IP address and browser signals to verify you are human. Your IP address appears in standard server logs, which are retained for up to 30 days for security and debugging purposes.

Connections the app makes

These are the only connections Origami makes to the internet by itself. Every request includes your IP address, as all internet traffic does. None of them carries the contents of your terminals, files, or conversations.

• Update checks: storage.tryorigami.app, run by us on Cloudflare, every minute while the app is open. Downloading an update uses the same address; some early versions download updates from a Cloudflare R2 address (r2.dev) instead. For each request we count its kind (an update check, a download, or an update), the version, the country Cloudflare places the request in, and the response status. We do not store IP addresses, device identifiers, or anything else that identifies you.
• Licensing: tryorigami.app, to activate and validate Origami+ as described above. The app only makes these requests once you have entered a license key.
• Changelog: tryorigami.app, to show what changed in a release. Nothing about you is sent.
• Agent updates: the npm registry (registry.npmjs.org) and the GitHub API (api.github.com), at launch and every hour, to tell you when a newer release of an AI agent you have enabled is out. Only the agent's public package or repository name is sent.
• Model prices: models.dev, at most once a day when you open the usage view's activity, to estimate what your usage would cost. Nothing about you is sent.
• Plan limits: when you open the usage view, Origami asks the AI tools you have enabled how much of their plan is left. For Claude Code, Codex, Antigravity, and Grok it asks the tool itself, which contacts its own provider. For GitHub Copilot it calls api.github.com with your own GitHub token; for the Gemini CLI on a Google licence it calls oauth2.googleapis.com and cloudcode-pa.googleapis.com with your own Google sign-in. Your credentials go only to the provider that issued them, never to us.
• Site icons: when you open a website in a browser tab, Origami fetches that site's icon from the site itself, at most once a week per site, and keeps it on your device.

Origami's MCP server and the listener its agents report their status to only accept connections from your own device (127.0.0.1). They are not reachable from the network.

Connections you start

Some features connect to third parties because you ask them to. We do not see or receive any of this traffic.

• AI agents and loops: Origami starts the AI tools you have installed, such as Claude Code, Codex, GitHub Copilot, opencode, Antigravity, or Grok, signed in with your own accounts. Those tools send your prompts and the code they work on to their providers under the providers' own terms and privacy policies. Origami does not proxy, store remotely, or have access to that traffic.
• Browser tabs: pages you open in a browser tab connect to those websites directly, like any web browser. Typing something that is not an address searches DuckDuckGo. Browser tabs share their cookies and site data on your device, unless a tab is set to keep its own, keep them to its workspace, or keep nothing once it stops.
• Installing and updating agents: when you press Install or Update for an agent, Origami runs that agent's own installer, which downloads it from its publisher.
• Git and your terminals: commands you run, including git fetches and pushes, connect wherever you point them.

What we don't collect

Origami does not collect, transmit, or have access to: the contents of your terminals, your shell commands or history, your files or code, your clipboard, your AI agent conversations, your browsing, your board, artifacts or notes, or any data from the projects you work on. There is no crash reporting, analytics, or telemetry in the app beyond the update counts described above. Everything you do in Origami stays on your device.

How we use your data

• Email address: to send your license key, magic links for device management, Enterprise invitations, answers to support requests, and critical service communications such as subscription changes. We do not send marketing emails.
• Device fingerprint and name: to enforce your license's device limit and let you identify and manage your devices.
• App version and last seen time: to show you and your organisation's owner which devices are in use, and to know which versions are in use in case we need to communicate about critical updates or deprecations.
• Stripe identifiers: to link your subscription to your license and process billing events (renewals, cancellations, seat changes).
• Update counts: to know how many people download and run each version.

Legal basis

We process your email address, license, device, and billing data because it is necessary to provide the subscription you entered into (performance of a contract). We process server logs, Turnstile checks, and update counts on the basis of our legitimate interest in keeping the service secure and knowing which versions are in use. For Enterprise members, the organisation that invited you decides why your data is processed; we process it on its behalf to provide the seats it bought.

Third parties

• Stripe processes payments and manages subscriptions. Stripe receives your email and payment details at checkout. See Stripe's privacy policy.
• Render hosts the website, the licensing server, and its database in Frankfurt, Germany. See Render's privacy policy.
• Mailtrap delivers transactional emails (license keys, magic links, invitations, support messages). Mailtrap processes your email address and the message to deliver it. See Mailtrap's privacy policy.
• Cloudflare hosts downloads and updates, counts them as described above, and provides bot protection (Turnstile) on website forms. Cloudflare may process IP addresses and request metadata. See Cloudflare's privacy policy.
• Setapp: if you use Origami through Setapp, your subscription is with MacPaw, and the Setapp framework built into that copy of Origami communicates with the Setapp app to check your access. See Setapp's privacy policy.

The services the app contacts by itself (the npm registry, GitHub, models.dev, and the sites whose icons it fetches) receive your IP address and the request, as described above. We do not share your data with anyone else. We do not sell data. We do not use advertising networks.

Where your data is stored

Our database and servers are in Frankfurt, Germany. Some of our providers (Stripe, Render, Cloudflare) are based in the United States and may process data there; where they do, transfers are covered by the EU-US Data Privacy Framework or the European Commission's Standard Contractual Clauses. All data transmitted between the Origami app and our servers is encrypted in transit via TLS. License keys are stored encrypted at rest.

Data retention

We retain your license and device data for as long as your account is active. If you cancel your subscription, your data is kept in case you resubscribe (your existing license key and devices are preserved). If an organisation removes you from its Enterprise subscription, your seat and its devices are removed. Server logs are kept for up to 30 days. Update counts contain no personal data. If you want your data deleted, email us and we will remove your license, device records, and email from our systems within 30 days, except for records we must keep by law, such as invoices.

Your rights (GDPR)

As we operate from Portugal and serve users in the European Union, you have the right to:

• Access the personal data we hold about you
• Correct inaccurate data
• Request deletion of your data
• Export your data in a portable format
• Object to or restrict processing of your data

To exercise any of these rights, email [email protected]. We will respond within 30 days. If you are an Enterprise member, you can also ask your organisation. You have the right to lodge a complaint with a supervisory authority; in Portugal, that is the Comissão Nacional de Proteção de Dados (cnpd.pt).

Changes to this policy

We may update this policy from time to time. If we make material changes, we will notify you by email or through the application. The "last updated" date at the top of this page reflects the most recent revision.

Contact

For privacy-related questions or requests, email [email protected].