...
Last updated: June 25, 2026
Account data: name, email address, password (stored only as a secure hash), role (collector/vendor), and optional profile details such as location, store name, phone number, and avatar.
Marketplace data: watches you register, listings, orders, shipping addresses you enter at checkout, messages with other users, and reviews.
Uploads: photos and documents you add to watches or listings.
Technical & usage data: IP address, device and browser type, operating system, language preference, the site or page that referred you, and an approximate location (country) derived from your IP. We use this to secure the service (rate limiting, abuse prevention) and understand where interest comes from. Country is resolved on our own servers — your IP is never sent to a third-party location service — and for our waitlist your IP is stored only as a one-way hash, never in the clear.
To run the marketplace: showing your listings, processing orders, delivering messages and notifications, sending account emails (verification, password reset), preventing fraud and abuse, and improving the product. We do not sell your personal data.
Orvion uses one essential cookie: a session token that keeps you signed in. It is required for the service to work. We do not use advertising or cross-site tracking cookies.
We share data only with the providers needed to run Orvion:
We do not use advertising networks, third-party trackers, or data brokers, and we do not sell or rent your personal data.
Your public profile shows your name, avatar, role, trust score, verification status, and general location (country). Your email address and phone number are never shown publicly. When you buy or sell, the other party receives the information needed to complete the order, such as the shipping address you provide.
We keep your data while your account is active. Completed-order records are retained as required for dispute resolution and legal obligations. You can request deletion of your account and associated personal data by contacting support@orvion.watch.
Depending on your jurisdiction (e.g., GDPR in the EU), you may have the right to access, correct, export, or delete your personal data, and to object to certain processing. Email us and we will respond within 30 days.
Passwords are hashed with PBKDF2 (a slow, salted one-way hash), traffic is encrypted with TLS, access to production systems is restricted, mutating requests are protected against CSRF, and uploads are checked by file type before storage. No system is perfectly secure — if we learn of a breach affecting your data, we will notify you as required by law.
Privacy questions, data requests, and general support: support@orvion.watch.