TheOrangeCove

Privacy

Privacy Policy

Last updated: 5 June 2026

This Privacy Policy describes how TheOrangeCove processes personal data during controlled early-access onboarding and marketplace operation. It is written to be GDPR-aware and specific to the current product, and may be updated before broader public launch. It is not a claim of formal regulatory certification.

1. Who we are

TheOrangeCove operates this marketplace. The controller responsible for personal data processing is:

  • Legal entity: to be completed before public launch
  • Registered address: to be completed before public launch
  • Privacy contact: support@theorangecove.com

2. Data we collect

  • Account data: name, email, authentication identifiers.
  • Professional profile data: bio, category, location (country/city), languages, website and other public profile information you choose to publish.
  • Application and onboarding data: information submitted during the apply flow and admin review.
  • Listing data: service titles, descriptions, pricing, and metadata you publish.
  • Buyer inquiry and order data: buyer name and email, order details, and messages where applicable.
  • Payment status metadata: invoice id, order status, payment status, and timestamps from the relevant BTCPay Server.
  • BTCPay setup metadata: setup type, validation status, connection status, webhook status.
  • Guided setup request data: for Premium guided BTCPay support, the setup path, help topics, contact email, and notes you provide. Do not submit seed phrases, private keys, wallet passwords, server root passwords, or other sensitive secrets in these requests.
  • Technical, security, and audit data: server logs, IP, device, and browser metadata, and admin audit events kept for security, compliance, fraud prevention, support, and operational integrity.
  • Support and admin communications exchanged with you.

TheOrangeCove does not collect seed phrases, wallet private keys, wallet passwords, or Lightning node credentials, and never asks for them. BTCPay API keys, where provided, are encrypted at rest and used only for the Professional's own payment connection. Webhook secrets are encrypted.

3. Why we process data

  • Account creation and authentication.
  • Professional application review and admin curation.
  • Marketplace profile and listing publication.
  • Buyer inquiries and order handling.
  • Payment status tracking (non-custodial).
  • Security, fraud and abuse prevention, audit logs.
  • Support and admin communications.
  • Platform improvement during early access.
  • Legal and compliance obligations where applicable.

4. Legal bases (GDPR)

  • Performance of a contract (or pre-contractual steps) — for providing the marketplace, handling inquiries and orders.
  • Legitimate interests — for security, fraud prevention, service operation, admin review, and platform improvement.
  • Legal obligations — where applicable record-keeping or compliance applies.
  • Consent — where required for optional communications or non-essential processing.

5. How Bitcoin and BTCPay payment data works

Eligible Professionals may connect their own BTCPay Server. TheOrangeCove receives operational payment status metadata so that orders can be tracked and confirmed. TheOrangeCove does not custody buyer funds. Bitcoin blockchain transactions may be publicly observable and are outside TheOrangeCove's control.

6. Sharing data

We may share data, only as necessary, with:

  • Infrastructure providers (hosting, database, authentication).
  • Email delivery providers for transactional communications.
  • BTCPay and related payment infrastructure where applicable.
  • Professional or buyer counterparties as necessary to fulfil an order or inquiry.
  • Legal, security, or accounting advisers where reasonably necessary.
  • Authorities where legally required.

The list of processors may evolve as the product matures.

7. International transfers

Some of our providers may process personal data outside your country or the EEA. Where required, we rely on appropriate safeguards (such as European Commission Standard Contractual Clauses) to protect the data.

8. Retention

We retain personal data only as long as necessary for marketplace operation, account management, security, audit, dispute resolution, and legal or commercial obligations. Account deletion requests are reviewed manually. Some transactional and security records may be retained beyond account closure where legally appropriate.

9. Your rights

  • Access to your personal data.
  • Rectification of inaccurate data.
  • Erasure ("right to be forgotten"), subject to retention obligations.
  • Restriction of processing.
  • Objection to processing based on legitimate interests.
  • Data portability.
  • Withdrawing consent where processing is based on consent.
  • Lodging a complaint with your local data protection supervisory authority.

To exercise these rights, contact support@theorangecove.com.

10. Security

We use reasonable technical and organisational measures, including encrypted storage for sensitive BTCPay connection credentials, access controls, and audit logging. We never request seed phrases or wallet private keys. No system is perfectly secure; please report suspected vulnerabilities to support@theorangecove.com.

11. Cookies and analytics

At this stage, we use only essential technologies required to operate the service, unless otherwise indicated within the product. If we introduce non-essential analytics or cookies in the future, we will update this Policy and, where required, request consent. See our Cookie Notice for more detail.

12. Contact

Privacy questions can be sent to support@theorangecove.com.