Privacy Policy
Last updated: June 2026
This notice explains how ORANGE PLUS d.o.o. ("PropManage") collects, uses, and protects your personal data when you use our website and platform.
1. Who We Are
PropManage is a multi-tenant property management platform operated by ORANGE PLUS d.o.o., a company registered in Montenegro (PIB 03606040), registered office Trg Dara Petkovića 8, PC Račica, Tivat, Montenegro. This policy is governed by the Montenegrin Law on Personal Data Protection (PDPL). For any question or to exercise your rights, email support@orange-plus.me. Where our business customers enter data about their own staff or clients into the platform, that customer is the controller of such data and we act as their processor.
2. What Data We Collect
Landing page form: name, business email, phone (optional), company name, estimated number of managed properties, and an optional message. Platform (registered users): the same contact details plus account data (passwords stored only as a bcrypt hash, short-lived session tokens) and the operational data you enter — work orders, contractor records, and property records. We also generate technical usage logs (access times, IP address, basic metadata) to keep the service secure and running. We do not collect special categories of data.
3. Why We Process Your Data and On What Basis
Contact-form data: to answer your inquiry and follow up about the product, on the basis of the consent you give when submitting the form. Platform data: to provide the service under our agreement with you, to keep the platform secure, and to meet our legal obligations. We use Cloudflare Turnstile to protect our forms from bots; it briefly processes technical signals including your IP address. Where we rely on consent, you can withdraw it at any time.
4. Sharing and Service Providers
We do not sell your data and do not share it for marketing. We share data only with providers who help us run the service and are contractually bound to act on our instructions: Hetzner (hosting, Germany), Resend (transactional email, USA), and Cloudflare (bot protection). Each receives only what its function needs. We may disclose data where legally required by a competent authority.
5. Where Your Data Is Stored and Cross-Border Transfer
The platform is hosted in Germany (Hetzner, Frankfurt), an EU country that ensures an adequate level of data protection. Our company administers the data from Montenegro. Some providers (Resend, Cloudflare) may process limited data in the United States. For such transfers we apply appropriate safeguards, such as standard contractual clauses or the provider's certification under the EU–US Data Privacy Framework. You can request details at support@orange-plus.me.
6. Data Security and Tenant Isolation
We host each tenant's data in a logically isolated database schema, separated from other tenants. Passwords are stored only as bcrypt hashes, and access is protected by session tokens. Upon a verified request from the controlling customer, we can fully delete a tenant's data, including its schema.
7. Data Retention
Contact-form data: kept only as long as needed to handle your inquiry, then deleted if you do not become a customer. Account and platform data: kept for the life of your account; after closure we delete or anonymise it within 90 days, unless law requires longer retention. Usage logs are kept for a limited period for security.
8. Your Rights
You have the right to access your data, correct it, request its deletion or blocking, and — following recent amendments to the PDPL — to receive a copy of the data you provided in a structured, machine-readable format. Where processing rests on consent, you may withdraw it at any time. To exercise any right, email support@orange-plus.me. If you believe your rights have been breached, you may lodge a complaint with the Agency for Personal Data Protection and Free Access to Information (AZLP), the Montenegrin supervisory authority.
9. Cookies
We use only strictly necessary cookies: a session cookie (pm-auth, a JWT that keeps you logged in) and a language preference cookie (pm-lang). We do not use tracking, analytics, or advertising cookies, and we do not load third-party trackers.