Who is responsible for your data
Procurer, operating the website and service at procurer.io, is responsible for personal data collected on this website and for account data. For data that customers put into their workspaces (for example the names of their employees and suppliers), the customer decides what is processed and Procurer processes it on the customer's behalf.
What data we collect
- Account data: your work email address, the company size you select and the plan you are interested in.
- Confirmation data: a one time code sent to your email, stored only as a hash and deleted after use or expiry.
- Technical data: IP address, browser user agent, the page that sent you to us (referrer) and campaign parameters in the link (UTM tags).
- Workspace data: purchase requests, approvals, purchase orders, receipts, invoices, supplier records and budgets that your team enters.
- Billing data: plan, billing period and payment status. Card details are handled by our payment processor and never stored by Procurer.
- Messages you send to [email protected].
Why we use your data
- To create and confirm your account and send you the email code.
- To run your workspace and provide the features of your plan.
- To send service emails about your account, such as setup instructions and billing notices.
- To protect the service against abuse, for example by limiting repeated signup attempts.
- To understand which pages and campaigns bring visitors, in aggregate.
We do not sell personal data and do not use workspace data to train any model or for advertising.
Legal bases
We process data to perform our contract with you, to meet legal obligations such as tax and accounting rules, and on the basis of our legitimate interest in running and securing the service. Where the law requires consent, we ask for it.
How long we keep data
- Unconfirmed signups are deleted after 30 days.
- Account and workspace data are kept while your subscription is active and remain exportable after cancellation until you ask us to delete them.
- Billing records are kept for as long as tax and accounting rules require.
Your rights
You can ask to access, correct, export or delete your personal data, to restrict or object to processing, and to withdraw consent where processing is based on consent. Residents of California and other US states with privacy laws have the rights those laws provide, including the right to know and to delete. Write to [email protected] and we answer within 30 days.
How we protect data
Data is encrypted in transit and at rest, access is limited by role, and every change in a workspace is recorded in an audit log. More on the security page.
Changes to this policy
When we change this policy, we update the date at the top and, for material changes, tell account holders by email.