01Who we are
Procurable, Inc. ("Procurable", "we", "us") makes cloud software for manufacturing procurement: cost intelligence (should-cost benchmarks) and an RFQ platform (the "Service"). This policy explains how we handle personal data for our website, accounts, billing and marketing.
Procurable, Inc.10501 Wilshire Blvd, Unit 2011
Los Angeles, CA 90024, United States
privacy@procurable.ai
02Controller and processor
We are the controller for our own website, account, billing and marketing data.
When a customer puts data into the Service, such as parts, pricing, drawings, supplier records, RFQs and quotes, the customer is the controller and we are the processor. That processing is governed by our Data Processing Addendum, not by this policy.
03EU and UK representative
We have not yet appointed a representative in the EU or the UK. Until we do, contact us at privacy@procurable.ai.
04What we collect
Information you give us
- Name, business email, phone number, job title and company
- Account credentials
- Messages you send us
- Marketing preferences
Information collected automatically
- IP address
- Browser and device data
- Pages viewed
- Approximate location derived from your IP address
- Logs
Information from others
- Your company
- Public business sources
- Fraud and security signals
Customer files
Drawings, part files and quote text are customer data. They may contain names or email addresses if the customer puts them there. We handle them under the DPA.
What we do not collect
We do not collect special-category data or children's data. You must be 18 or older to use the Service.
05Legal bases
- Contract and legitimate interests to provide the Service, give support, keep the Service secure, and send business-to-business marketing. Every marketing email includes an opt-out.
- Consent for non-essential cookies.
- Legal obligation where the law requires us to process data.
07International transfers
We process data in the United States, in AWS us-east-1 and in Bubble's US hosting. For transfers from the EEA or the UK, we use the EU Standard Contractual Clauses and the UK International Data Transfer Addendum, together with the DPA.
08Retention
| Data | How long we keep it |
|---|---|
| Customer platform data | Subscription term plus 30 days. Backups are deleted within 90 days. |
| Accounts and billing | Account life plus 24 months |
| Demo and sales contacts | 24 months |
| Support tickets | 24 months after the ticket is closed |
| Security logs | 12 months |
| Cookie and analytics data | Up to 13 months, or sooner if you reject cookies |
| Free trial customer data | Deleted within one month after the trial ends. A contracted pilot follows the customer platform data row. |
09Your rights
You can ask us to:
- Give you access to your personal data
- Correct it
- Delete it
- Restrict how we use it
- Stop using it (objection)
- Give you a portable copy
- Stop processing based on consent, by withdrawing it
Email privacy@procurable.ai. We respond within 30 days. If we hold the data only on behalf of a customer, we forward your request to that customer. You can also complain to a data protection supervisory authority.
10California
We do not sell personal information. California residents can use the rights described in section 09 by emailing privacy@procurable.ai.
12Security
- TLS encryption in transit
- Encryption at rest
- Unique user accounts
- Multi-factor authentication on production and admin access
- Least-privilege access with periodic access reviews
- Logging
- Data protection terms in our vendor contracts
- A documented incident response process
13Changes to this policy
When we change this policy, we update this page and the date at the top.
14Contact
Questions or requests about privacy: privacy@procurable.ai.