Privacy Policy

Last updated: February 14, 2026

Orchrd (“we,” “us,” or “our”) operates the Orchrd plant collection and marketplace platform at myorchrd.app. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform.

Information We Collect

Account Information

When you create an account, we collect your email address and optional profile information such as your username, display name, avatar, and profile bio. This information is used to identify your account and enable features like public profiles and seller storefronts.

Collection Data

When you use our collection management features, we store information about your plants including species identification, observations, photos, trait data, and care logs. Photos are stored in secure cloud storage. This data is private by default unless you choose to share it.

Marketplace Data

When you buy or sell on our marketplace, we collect transaction details including listing information, order data, and shipping addresses. Payment processing is handled by Stripe — we do not store credit card numbers or full payment details on our servers.

Usage Data

We automatically collect certain information when you visit our platform, including your IP address, browser type, operating system, referring URLs, and pages visited. This data helps us improve performance and understand how the platform is used.

How We Use Your Information

  • To provide and maintain our platform services
  • To process marketplace transactions and deliver order notifications
  • To send transactional emails (order confirmations, trade proposals, messages)
  • To personalize your experience and improve our features
  • To prevent fraud and ensure platform security
  • To comply with legal obligations

Third-Party Services

We use the following third-party services that may process your data:

  • Supabase — Database hosting and authentication. Your account data and collection information are stored on Supabase's infrastructure.
  • Stripe — Payment processing for marketplace transactions. Stripe handles all payment card data under their own privacy policy.
  • Vercel — Web hosting and deployment. Vercel processes web requests and may collect standard server logs.
  • Resend — Transactional email delivery. Email addresses are shared with Resend to deliver order confirmations and notifications.

Data Sharing

We do not sell your personal information. We share data only in the following cases:

  • Public profiles: If you enable a public profile, your username, avatar, and collection data you choose to share are visible to other users and search engines.
  • Marketplace transactions: When you buy or sell, relevant order and shipping information is shared between buyer and seller to complete the transaction.
  • Legal requirements: We may disclose information if required by law or to protect our rights, safety, or property.

Data Retention

We retain your account data for as long as your account is active. Collection data, observations, and photos are retained until you delete them or your account. Transaction records are retained for legal and accounting purposes even after account deletion.

Your Rights

You have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate data
  • Request deletion of your account and associated data
  • Export your collection data
  • Opt out of non-essential communications

To exercise these rights, contact us at hello@myorchrd.app.

Cookies

We use essential cookies for authentication and session management. These cookies are required for the platform to function and cannot be disabled. We do not use advertising or tracking cookies.

Security

We implement industry-standard security measures including HTTPS encryption, secure authentication through Supabase, and row-level security policies on all database tables. However, no method of transmission over the Internet is 100% secure.

Children's Privacy

Our platform is not intended for children under 13. We do not knowingly collect personal information from children under 13. If we learn that we have collected such information, we will delete it promptly.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page with an updated “Last updated” date.

Contact Us

If you have questions about this Privacy Policy, please contact us at hello@myorchrd.app or visit our contact page.