Your information.
Clear boundaries.

Last updated: 9 September 2026

Project enquiries

When you submit our form, Node Origami stores your name, email, and description so our team can review your request and respond. We do not automatically subscribe you to marketing. Contact sales@nodeorigami.com to ask about access, correction, or deletion of information you provided.

Ask Node conversations

Before using the assistant, we ask you to acknowledge that your questions and its replies are stored for our team to review enquiries, improve our service, and understand recurring business needs. Messages are sent to OpenAI to generate replies. We request that OpenAI does not store the response object; its separate operational and abuse-monitoring policies may still apply.

The assistant has no access to private accounts. Please do not share passwords, payment details, sensitive personal information, or confidential business records. AI answers can be wrong and do not constitute a quotation.

Website activity

We count page loads and selected actions, such as opening the assistant or choosing a service. Our analytics database holds daily totals by page and action, without visitor profiles, raw IP addresses, advertising identifiers, or session replay. Counts are not unique people. We cannot identify everyone visiting the site.

A random conversation identifier groups the messages in your current chat. We do not match anonymous page activity to your email or identify you across websites. Cloudflare processes connection information to deliver the site and prevent abuse; network addresses are hashed transiently for rate limiting.

Storage and access

Enquiries and conversations are stored in a Cloudflare D1 database configured for EU jurisdiction. Only authenticated owner access exposes the dashboard. Our service providers, including Cloudflare and OpenAI, process information to provide the website and assistant. See Cloudflare’s privacy policy and OpenAI’s privacy policy.

Retention

We keep enquiry and conversation records for up to 12 months for follow-up and service analysis, then remove them from the active database automatically. Aggregate activity totals contain no visitor identity. Provider backups may expire on a separate schedule. Please include the approximate date and the email or topic you used when making a data request, so we can locate the relevant record.

Cookies

Public activity counters do not use analytics cookies. The private owner dashboard uses a secure session cookie for sign-in, which expires after 12 hours.