Privacy Policy

1. Introduction

Procub ("we," "our," or "us") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use the Procub enterprise procurement platform and related services ("Services").

By accessing or using our Services, you agree to the collection and use of information in accordance with this policy. If you do not agree with this policy, please do not access or use our Services.

2. Information We Collect

2.1 Information You Provide Directly

• Account registration information (name, email, company, job title)
• Billing and payment information (processed securely through third-party payment processors)
• Vendor and supplier data you upload to the platform
• Procurement documentation, contracts, and workflow configurations
• Communications and correspondence with our support team
• Information provided through contact forms, consultation requests, and demos

2.2 Information Collected Automatically

• Log data (IP address, browser type, pages visited, time spent)
• Device information (operating system, device identifiers)
• Usage analytics (features used, workflow patterns, performance metrics)
• Cookies and similar tracking technologies (see Section 7)

3. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Procub platform and Services
• Process transactions and send related information
• Respond to inquiries, provide customer support, and fulfill consultation requests
• Send administrative information including updates, security alerts, and account notifications
• Send marketing and promotional communications (with your consent where required)
• Analyze usage patterns to improve platform performance and user experience
• Detect, investigate, and prevent fraudulent transactions and security incidents
• Comply with legal obligations and enforce our agreements
• Generate aggregated, anonymized analytics and benchmarking data

4. Legal Basis for Processing (GDPR)

For users in the European Economic Area, our legal bases for processing personal data include:

• Contract Performance: Processing necessary to fulfill our contractual obligations to you
• Legitimate Interests: Processing for our legitimate business interests where not overridden by your rights
• Legal Obligation: Processing required to comply with applicable laws and regulations
• Consent: Processing based on your explicit consent, which you may withdraw at any time

5. Data Sharing and Disclosure

We do not sell your personal information. We may share your information with:

• Service Providers: Third-party vendors who assist in delivering our Services (cloud infrastructure, payment processing, analytics, email delivery)
• Business Transfers: In connection with a merger, acquisition, or sale of assets
• Legal Requirements: When required by law, court order, or governmental authority
• Protection of Rights: When necessary to protect the rights, property, or safety of Procub, our clients, or the public

6. Data Security

We implement enterprise-grade security measures to protect your information:

• AES-256 encryption for data at rest
• TLS 1.3 encryption for data in transit
• Role-based access controls and multi-factor authentication
• Regular security audits and penetration testing
• SOC 2 Type II compliance
• Complete audit logging of all platform activities

While we implement industry-leading security practices, no method of data transmission or storage is 100% secure. We cannot guarantee absolute security.

7. Cookies and Tracking Technologies

We use cookies and similar technologies to enhance your experience. These include essential cookies required for platform operation, analytics cookies to understand usage patterns, and preference cookies to remember your settings. You can control cookie preferences through your browser settings or our Cookie Policy.

8. Data Retention

We retain your information for as long as your account is active or as needed to provide Services. Upon account termination, we will delete or anonymize your data within 90 days, unless longer retention is required by law or necessary to resolve disputes.

9. Your Rights

Depending on your jurisdiction, you may have the right to:

• Access, correct, or delete your personal information
• Object to or restrict certain processing activities
• Data portability (receive your data in a structured format)
• Withdraw consent where processing is based on consent
• Lodge a complaint with a supervisory authority

To exercise these rights, contact us at support@procub.io.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission for transfers from the EEA.

11. Changes to This Policy

We may update this Privacy Policy periodically. We will notify you of material changes via email or through the platform. Continued use of our Services after changes constitutes acceptance of the updated policy.

12. Contact Us

For privacy-related inquiries, contact our Data Protection Officer at: