Privacy Policy
- 1. Scope and Key Terms
- 2. Information We Collect
- 3. How We Use Information
- 4. Legal Bases for Processing (EEA / UK Visitors)
- 5. How We Share Information
- 6. Cookies and Similar Technologies
- 7. Data Retention
- 8. Data Security
- 9. Your Privacy Rights
- 10. International Data Transfers
- 11. Children’s Privacy
- 12. Changes to This Policy
- 13. Contact Us
This Policy covers information Prokurit collects as a controller — primarily website and account data. It does not primarily govern the procurement records, supplier information, and other content a Customer and its authorized users submit into the Service (“Customer Data”). For Customer Data, Prokurit acts as a processor on the Customer’s behalf, and that processing is governed by our Data Processing Agreement and the Customer’s own agreement with Prokurit. If you are an authorized user submitting data into the Service on behalf of your employer, your employer’s own privacy notice may also apply, and you should direct data-subject requests about Customer Data to your employer in the first instance.
“Personal Data” means information that identifies or could reasonably be linked to an identified individual.
Information you provide directly — for example, when you request a demo, contact us, subscribe to communications, or create an account: name, work email address, phone number, job title, company name, and the content of any message you send us.
Information collected automatically — standard web server request data (such as IP address, browser type, device type, referring page, and pages visited) is generated by ordinary web traffic to the Site. As of the date above, Prokurit does not use third-party analytics, advertising, or tracking cookies on the Site; see our Cookie Policy for the current, authoritative list of any cookies in use and how that will be kept up to date if this changes.
Account and billing information — for Customers and authorized Service users: login credentials, role and permissions, and billing contact details. Payment card details are handled directly by Stripe, our payment processor, and are not stored on Prokurit’s own systems.
We use the information described above to:
- Provide, maintain, secure, and improve the Site and the Service;
- Respond to inquiries, demo requests, and support questions;
- Create and administer Customer and user accounts;
- Send product, billing, and security-related communications;
- Send marketing communications where permitted, with an opportunity to opt out of any non-essential message;
- Detect, investigate, and prevent fraud, abuse, and security incidents; and
- Comply with legal obligations and enforce our agreements.
Where the EU General Data Protection Regulation or the UK GDPR applies, we rely on the following legal bases: performance of a contract (e.g., providing the Service to a Customer), legitimate interests (e.g., securing the Site and the Service, responding to inquiries), consent (e.g., optional marketing communications, where required), and compliance with a legal obligation. You may withdraw consent at any time where processing is based on consent, without affecting the lawfulness of processing before withdrawal.
Prokurit retains website and account information for the life of your relationship with Prokurit — we do not currently apply a fixed deletion schedule to this information. You may still request deletion of your Personal Data at any time, as described in Your Privacy Rights below, subject to legitimate business or legal needs (such as billing records) that may require us to retain certain information longer. Customer Data retention following termination of a subscription is governed by the Customer’s agreement with Prokurit and our Data Processing Agreement.
Prokurit maintains a SOC 2 Type II certification and an ISO 27001 certification, and is GDPR Ready, reflecting administrative, technical, and physical safeguards designed to protect information against unauthorized access, disclosure, alteration, and destruction. No method of transmission or storage is completely secure; see our Security & Trust page for more detail on our security program.
Depending on where you live, you may have the right to request access to, correction of, deletion of, or a copy of your Personal Data, and to object to or restrict certain processing. Residents of New Mexico — Prokurit’s home state — and other U.S. states may have rights under applicable state privacy law, and individuals in the EEA and UK have rights under the GDPR / UK GDPR, including the right to lodge a complaint with a supervisory authority.
To exercise any of these rights, contact us using the details in Contact Us below. We will verify your request and respond within the time required by applicable law.
Prokurit is based in the United States, and information we collect is generally processed in the United States. Where we transfer Personal Data out of the EEA, UK, or Switzerland, we rely on an appropriate safeguard, namely the European Commission’s Standard Contractual Clauses.
The Site and the Service are directed at businesses and are not intended for individuals under 18. We do not knowingly collect Personal Data from children.
We may update this Policy from time to time. Material changes will be reflected by updating the “Last updated” date above, and, where required by law, we will provide additional notice.
Questions about this Policy or your Personal Data can be directed to [email protected] or Prokurit, Inc., 1209 Mountain Road Pl Ne, Albuquerque, NM 87110.