Privacy Policy
Effective August 14, 2026
This policy explains the information Procura processes, why it is used, who may receive it, and how long it may be retained.
Scope and roles
This policy applies to Procura users acting as Buyers, Suppliers, Country Admins, or Global Admins in the Philippines, Indonesia, Singapore, Cambodia, Laos, Timor-Leste, and Papua New Guinea. Procura provides a structured procurement platform. Business users are responsible for the lawfulness of information they submit about their personnel, representatives, and transactions.
Information Procura processes
Account and identity information may include email address, display name, sign-in provider identifiers, email-verification state, multi-factor enrollment metadata, role, account status, selected country, language, and session timestamps.
Business and profile information may include a name or company name, representative, category, contact number, address, official location codes and names, description, avatar, supplier logo, brochure or catalog images, reusable signature records, and supplier verification records. Verification may use business registration, tax registration, permits, government-issued registration, or equivalent documents required in the applicable country.
Procurement information may include RFQs, items, quantities, categories, deadlines, delivery locations, payment terms, quotations, prices, tax and warranty selections, awards, purchase orders, acknowledgments, signatures, generated documents, ratings, archives, and audit metadata.
Communication, service, and security information may include post-award messages, notifications, reports or feedback, optional screenshot evidence, Usage Credit entries, payment-reference data, subscription status, device notification identifiers and platform type, IP-derived country, security checks, rate-limit records, and administrative audit events.
Why information is used
Procura uses information to create and secure accounts; match RFQs to eligible Suppliers; support quotations, awards, purchase orders, signatures, messaging, verification, credits, subscriptions, notifications, reports, administration, and account deletion; prevent abuse; comply with law; and establish or defend legal claims. Processing may be based on the platform agreement, legal obligations, legitimate interests such as security and fraud prevention, or consent where applicable law requires it.
Identity protection and disclosure
Before award, the Buyer quotation view is designed to conceal the Supplier's identity. Eligible Suppliers receive the procurement information needed to respond, subject to role, category, country, and privacy controls. After award, the Buyer and selected Supplier may receive each other's permitted business contact details and gain access to their awarded conversation and purchase-order workflow. Losing Suppliers do not receive protected contact details through the award notice.
Service providers and international processing
Procura uses service providers for sign-in, data and file handling, notifications, application protection, transactional email, country matching, image-text screening, advertising, and payment verification where those services are enabled. Google and Facebook may process information when a user chooses their configured sign-in method. Information may be processed outside the user's country, subject to applicable agreements and safeguards.
The Android app may display advertising on Buyer and Supplier dashboard overview pages. Advertising is kept outside account, administration, payment, RFQ submission, quotation submission, award, declaration, signature, and purchase-order workflows. The advertising provider may process device, advertising identifier, consent, interaction, and approximate-location information according to the user's choices and applicable law. Core procurement features remain available when advertising consent is not granted. Procura does not claim to sell personal information.
Retention and deletion
Approved supplier verification images are scheduled for deletion one day after approval, while declined verification images are scheduled for prompt deletion. Related upload metadata is scheduled for deletion after thirty days, while the verification decision or certificate may remain as an audit record.
A verified Buyer or Supplier may request deletion through Settings after secure confirmation. Eligible account, profile, image, draft, notification, and device-notification information is deleted, scheduled for deletion, or de-identified. Open Buyer RFQs are archived and participant identities are anonymized where necessary.
Procurement, award, purchase-order, payment, declaration, signature, and related records may be retained for seven years. Awarded chat and trust-and-safety records may be retained for two years. Notifications and deletion-request metadata are scheduled for cleanup after one year. A valid legal hold may pause deletion. See the public account-deletion instructions.
Your rights and safeguards
Subject to applicable law, individuals may request access, correction, objection, restriction, portability, or deletion, and may complain to the relevant privacy authority. Requests may require identity verification and may be limited by legal retention, other persons' rights, fraud prevention, or legal claims.
Procura applies encryption in transit and at rest, role and country access controls, multi-factor authentication, bounded Admin sessions, file validation, rate limits, duplicate-operation protection, and audit records. No system can guarantee absolute security.