ORANGE CORE — PRIVACY POLICY

1. Introduction

OrangeCore LLC (\\"OrangeCore,\\" \\"we,\\" \\"us,\\" or \\"our\\") operates the website at orangecore.app and the application at app.orangecore.app (collectively, the \\"Service\\"). This Privacy Policy explains how we collect, use, disclose, and protect your information when you use our Service.

By accessing or using the Service, you agree to the collection and use of information in accordance with this policy. If you do not agree with the terms of this policy, please do not access the Service.

2. Information We Collect

2.1 Information You Provide Directly

We collect information you voluntarily provide when:

• You create an account (name, email, company name, phone number)
• You purchase credit packages (billing address, payment method — processed by Stripe)
• You submit property addresses for measurement or report generation
• You contact our support team or submit a feature request
• You subscribe to marketing communications

2.2 Information Collected Automatically

When you use the Service, we automatically collect:

• Usage data: pages visited, features used, reports requested, session duration
• Device data: IP address, browser type, operating system, device identifiers
• Log data: server logs including access times, error logs, and API call metadata
• Location data: approximate geographical location derived from the IP address

2.3 Property Data

When you submit a property address, we process publicly available property data, including satellite imagery, permit records, tax assessor data, and geographic information. This data comes from public records and licensed third-party data providers. We do not collect or store private owner information beyond what is necessary to generate the requested report.

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service, including processing property measurement and report requests
• Process transactions and manage your credit balance
• Send transactional emails (order confirmations, report delivery, account notifications)
• Respond to customer support inquiries and technical issues
• Improve the accuracy of our AI measurement models using aggregated and anonymized data
• Detect and prevent fraudulent activity, abuse, and security incidents
• Comply with legal obligations and enforce our Terms of Service
• Send marketing communications (only with your explicit consent; you can unsubscribe at any time)
• Analyze usage patterns to improve product features and user experience

4. Sharing Information

We do not sell, rent, or trade your personal information to third parties for their marketing purposes. We may share your information only in the following circumstances:

• Service providers: We share data with trusted providers who help us operate the Service, including Stripe (payment processing), AWS (cloud infrastructure), SendGrid (transactional email), and analytics providers. These providers are contractually obligated to use your data only to provide services to us.
• Business transfers: If OrangeCore is acquired, merged, or undergoes a change of control, your information may be transferred as part of that transaction. We will notify you by email and/or a prominent notice on our website before your data is transferred.
• Legal requirements: We may disclose your information if required by law, a court order, or a governmental authority, or if we believe that disclosure is necessary to protect our rights, your safety, or the safety of others.
• With your consent: We may share your information for any other purpose with your explicit consent.

5. Data Retention

We retain your personal information for as long as your account is active or as needed to provide you with the Service. Generated property reports are retained in your account indefinitely unless you delete them or close your account.

If you request account deletion, we will delete or anonymize your personal information within 30 days, except where we are required to retain it for legal, tax, or fraud prevention reasons (typically up to 7 years for financial records).

6. Security

We implement industry-standard security measures to protect your information, including TLS 1.3 encryption for all data in transit, AES-256 encryption for data at rest, multi-factor authentication options, regular security audits, and access controls aligned with SOC 2.

Payment card data is never stored on our servers. All payment processing is handled by Stripe, a PCI DSS Level 1 certified payment processor.

While we take reasonable precautions, no method of transmission over the internet or electronic storage is 100% secure. We cannot guarantee absolute security, and you use the Service at your own risk.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

To exercise any of these rights, contact us at . We will respond within 30 days.

8. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to operate and improve the Service. The types of cookies we use include:

• Essential cookies: Necessary for the operation of the Service (authentication tokens, session management). Cannot be disabled.
• Analytical cookies: Help us understand how users interact with the Service (pages viewed, feature usage). We use privacy-respecting analytics that do not track individuals across sites.
• Preference cookies: Remember your settings and preferences (language, display options).

You can control cookies through your browser settings. Disabling essential cookies may prevent the Service from functioning correctly.

9. Third-Party Services

The Service integrates with third-party services whose privacy practices are governed by their own policies. Key third-party services include:

• Stripe — — Payment processing
• Amazon Web Services — — Cloud infrastructure
• SendGrid — — Transactional email
• Google Maps Platform — — Satellite imagery and geocoding

We recommend reviewing the privacy policies of these third-party services. OrangeCore is not responsible for the privacy practices of third parties.

10. Children's Privacy

The Service is not directed to individuals under 18 years of age. We do not knowingly collect personal information from minors. If you become aware that a minor has provided us with personal information, please contact us at , and we will take steps to delete such information.

11. International Data Transfers

OrangeCore is headquartered in the United States. If you access the Service from outside the United States, your information may be transferred, stored, and processed in the United States, where data protection laws may differ from those in your country.

For users in the European Economic Area (EEA), we rely on the Standard Contractual Clauses (SCCs) approved by the European Commission as a legal basis for international data transfers.

12. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of any material changes by posting the new policy on this page and updating the \\"Last updated\\" date. For significant changes, we will send an email notification to registered users at least 30 days before the changes take effect.

Your continued use of the Service after the effective date of any changes constitutes your acceptance of the updated policy.

13. Contact Us

If you have questions, concerns, or requests related to this Privacy Policy or our data practices, please contact us: