Draft — pending legal review

Privacy Policy

This draft explains how PROKUR may collect and use data for RFQ capture, supplier matching, quote comparison, and account operations in India.

Data We Collect

RFQ details such as category, product description, quantity, delivery city, pincode, required date, notes, and attachments you choose to upload.
Contact details such as name, company, email address, and phone number submitted through RFQ, supplier, or account forms.
Supplier profile, document, category coverage, city coverage, quote, and activity data used to operate the PROKUR sourcing workflow.
Technical data needed to run the service, including authentication records, basic logs, rate-limit identifiers, and security events.

To receive RFQs, match them with relevant suppliers, request and compare quotes, and keep a sourcing record for the buyer and PROKUR administrators.
To send RFQ confirmations, supplier invites, quote notifications, password recovery links, and service-related messages.
To review supplier eligibility, support admin operations, prevent abuse, and improve marketplace quality.

RFQ, quote, supplier, document, and activity records may be retained as sourcing history unless deletion is required by law or operational policy.
Attachments and logs are retained only for as long as needed for the sourcing workflow, dispute review, security, or legal requirements.
Specific retention schedules are draft placeholders and must be confirmed during legal review.

Relevant RFQ requirement details may be shared with matched suppliers so they can decide whether to quote.
Supplier quote, profile, verification, and contact details may be visible to PROKUR administrators and, where released, to buyers.
Service providers such as Supabase, email delivery providers, hosting providers, and analytics/security tools may process data for PROKUR operations.
Raw supplier contact details are not public by default and are controlled through the current admin release workflow.

Users may request access, correction, updating, or deletion of personal data, subject to identity verification and legal or operational retention requirements.
Users may withdraw consent for future processing where consent is the applicable basis, noting that withdrawal may limit PROKUR's ability to process an RFQ or account request.
This section is drafted with awareness of India's Digital Personal Data Protection Act, 2023, but remains pending legal review.

Placeholder: Grievance Officer name, designation, postal address, email, and response process to be added after legal appointment and review.

For privacy requests or questions, contact support@prokur.in. Legal notices and formal grievance workflows are placeholders pending legal review.