Trust · Privacy

Privacy policy

What we collect, what we do not do with it, and how deletion works. Short by design.

ProcureTrace processes the documents you upload for the sole purpose of your procurement review. We collect account information (email address, hashed credential, role, verification and account status) and operational logs of actions taken in the product, including the network address of requests for abuse prevention.

Automated document reading. To read your uploaded documents, ProcureTrace transmits their content to cloud document-analysis and AI services operated by Microsoft Azure, under ProcureTrace's subscription, solely to extract the values the review compares. Extracted values are independently verified against your original documents before they are used, and the review decision itself is made by ProcureTrace's own deterministic comparison engine — never by an AI model. Your documents are not used to train models — ours or any provider's.

When you submit the inquiry form on this site, or when ProcureTrace sends you an account email (verification, password reset), the message is delivered through our email provider (Resend). Inquiry records are used only to reply and to prevent form abuse — never added to a marketing list.

We do not sell data or share your documents with third parties other than the processing providers named above. Deleting a review removes its documents, extracted data, runs, and findings from the application immediately, leaving an id-only deletion record; short-lived operational backups held by our infrastructure providers expire on their standard schedules. Questions and deletion requests: admin@procuretrace.com.

Account inactivity. Accounts and associated review data are automatically deleted after 14 consecutive days without signing in. Signing in resets that period. Deleted data may remain temporarily in our providers' backup and recovery systems — currently up to 7 days of database point-in-time backups and 7 days of storage soft-delete retention — until those periods expire; it is not immediately erased from every backup.