Privacy Policy

Last Updated: February 14, 2026
‍
This Privacy Policy explains how ProcureBase collects, uses, discloses, and protects information when you use the Service. It also describes your privacy rights and choices. (For California notice-at-collection style disclosures and GDPR-style transparency, see Sections 1–3 and 9–10.)  
‍
1) Information We Collect
We collect information in three main ways:
A. Information you provideAccount info: name, email, password (stored in hashed form), organization/workspace info, role.User Content: content you upload or create (e.g., RFQs, messages, comments, attachments, drawings/CAD files, part/project data).Support/communications: information you provide when you contact us.
B. Information collected automaticallyDevice/usage info: IP address, browser type, device identifiers, pages/actions, timestamps, referral URLs.Cookies and similar technologies: used for session/login, security, preferences, and analytics.  
C. Information from third partiesIf you use third-party login (SSO/OAuth), we may receive basic profile info (like your email).Service providers may provide us with service-related logs or analytics.
‍
2) How We Use Information
We use information to:Provide, maintain, and secure the Service (authentication, authorization, fraud prevention).Process and display User Content and enable collaboration as directed by you.Communicate with you (service messages, support, security notices).Improve and develop the Service (debugging, analytics, performance).Comply with legal obligations and enforce our Terms.
California notice-at-collection: the categories of personal information we collect and the purposes for use are described in Sections 1 and 2.  
‍
3) Legal Bases for Processing (EU/UK Users)
If GDPR/UK GDPR applies, we process personal data under one or more of the following legal bases:Contract (to provide the Service you request),Legitimate interests (security, preventing abuse, improving the Service),Consent (where required, e.g., certain cookies),Legal obligation (compliance and record-keeping).  
‍
4) How We Share Information
We may share information:With service providers (processors) that help us operate the Service (hosting, storage, email, analytics, support). They are authorized to use information only to provide services to us.With other users and third parties you choose (e.g., collaborators or vendors you invite/share with).For legal/safety reasons (to comply with law, protect rights/safety, investigate abuse).In a business transfer (merger, acquisition, financing, or sale of assets), subject to this Policy.
‍
5) “Sale” / “Share” (California)
We do not sell personal information for money.We do not share personal information for cross-context behavioral advertising.
If this changes (for example, if we use ad retargeting), we will update this Policy and provide required opt-out mechanisms.  
‍
6) Cookies and Analytics
We use:Essential cookies for login/session and security,Preference cookies to remember settings,Analytics to understand usage and improve the Service.
You can control cookies through your browser settings. If you block essential cookies, parts of the Service may not work.  
‍
7) Data Retention
We keep personal information only as long as necessary for the purposes described:Account data: retained while your account is active.User Content: retained until you delete it or delete your account, subject to collaboration/workspace settings and legal needs.Logs/security records: retained for a limited period for security and reliability.
Backups: deleted data may remain in backups for up to 30 days before being overwritten.
‍
8) Security
We use reasonable administrative, technical, and organizational safeguards to protect information. No system is 100% secure, so we cannot guarantee absolute security.
‍
9) Your Rights and Choices
A. All usersAccess/update certain account information through the Service (where available).Request account deletion by emailing contact@procurebase.com.
B. California privacy rights (CCPA/CPRA)Depending on applicability, California residents may have rights to know, delete, correct, and opt out of sale/share (if applicable), among others. To submit a request, email [contact@procurebase.com] with subject “California Privacy Request.” We may verify your request.  
C. EU/UK rights (GDPR/UK GDPR)Where applicable, you may have rights to access, rectify, delete, restrict processing, object, and data portability, and to lodge a complaint with a supervisory authority. To submit a request, email contact@procurebase.com with subject “GDPR Request.”  
‍
10) International Transfers
ProcureBase is based in the United States, and we may process and store information in the US and other countries where we or our service providers operate. For EU/UK transfers, we use appropriate safeguards where required (such as contractual protections).  
‍
11) Children’s Privacy
The Service is not directed to children under 13, and we do not knowingly collect personal information from children under 13. If you believe a child has provided personal information, contact us to request deletion.  
‍
12) Changes to This Policy
We may update this Policy from time to time. If changes are material, we will provide notice (e.g., in the Service or by email). The “Last Updated” date indicates when it was revised.
‍
13) Contact
Questions about these Terms: contact@procurebase.com