Privacy Policy

Oren (Pty) Ltd ("we", "us") operates OREN at https://oren.co.za. This Privacy Policy explains how we collect, use, disclose, and protect personal information when you use our Service.

We process personal information in accordance with the Protection of Personal Information Act, 2013 (POPIA) of Republic of South Africa, and other applicable laws. By using the Service, you acknowledge this Policy.

For purposes of POPIA, the responsible party is Oren (Pty) Ltd. For privacy enquiries or to exercise your rights, contact:

Email: hello@contact.oren.co.za

Account and profile data: name, email address, password (stored securely by our authentication provider), company name, address, phone, VAT number, and preferences you provide in settings.

Business data you enter: customer and supplier details, quotes, invoices, line items, and files you upload (e.g. logos).

Technical and usage data: IP address, browser type, device information, log data, and actions within the Service (e.g. sign-in times) for security, support, and service improvement.

Communications: messages you send to support and emails we send relating to your account.

We process personal information for purposes including:

• Providing, operating, and maintaining the Service.
• Authenticating users and securing accounts.
• Sending transactional emails (e.g. confirmations, invoices, team invites).
• Customer support and responding to enquiries.
• Complying with legal obligations and enforcing our Terms.
• Analytics and improvement of the Service (aggregated where possible).

Our lawful bases under POPIA include consent (where required), performance of a contract with you, and legitimate interests that are not overridden by your rights (such as security and fraud prevention).

We do not sell your personal information. We share data only as needed to run the Service, with trusted processors who are bound by confidentiality and data protection obligations, including:

• Supabase (hosting, database, authentication) — may process data in regions they operate.
• Vercel (application hosting and edge delivery).
• Resend or similar providers (transactional email delivery).
• Payment processors (when you subscribe to paid plans).

We may also disclose information if required by law, to protect rights and safety, or in connection with a merger or acquisition with appropriate safeguards.

Some processors may store or process data outside Republic of South Africa. Where required, we take reasonable steps to ensure appropriate safeguards (such as contractual clauses or provider certifications) are in place.

We retain personal information for as long as your account is active and as needed to provide the Service, resolve disputes, and meet legal obligations. You may request deletion subject to exceptions (e.g. billing records we must keep for tax purposes).

We implement technical and organisational measures appropriate to the risk, including encryption in transit, access controls, and row-level security in our database. No method of transmission or storage is completely secure; please use a strong, unique password.

Subject to POPIA and applicable law, you may have the right to:

• Request access to personal information we hold about you.
• Request correction of inaccurate or incomplete information.
• Request deletion, subject to lawful retention requirements.
• Object to certain processing or withdraw consent where processing is consent-based.
• Lodge a complaint with the Information Regulator (South Africa).

To exercise these rights, email hello@contact.oren.co.za. We may need to verify your identity before responding.

Information Regulator (South Africa): www.justice.gov.za/inforeg

We use essential cookies and local storage to keep you signed in, remember preferences (such as theme), and record cookie consent. These are necessary for the Service to function.

If we introduce non-essential cookies (e.g. analytics), we will update this section and request consent where required.

The Service is intended for businesses and is not directed at children under 18. We do not knowingly collect personal information from children.

We may update this Privacy Policy from time to time. The revised version will be posted on this page with an updated date. Material changes may be communicated by email or in-app notice.

Oren (Pty) Ltd
Email: hello@contact.oren.co.za