Scope and who we are
This Privacy Policy explains how Qort Inc., operating the Procuraz brand ("Procuraz", "we", "us"), handles personal data when organizations and their authorized users use the Procuraz Platform Owner, Company, Vendor and Seller Partner workspaces, public websites, support services and payment flows.
Procuraz is a business-to-business procurement SaaS. A customer organization normally determines why its employee, Vendor and procurement data is processed, while Procuraz provides the hosted platform and related support.
Information we collect
Depending on the workspace and workflow, we may collect:
- Account data such as name, business email, phone number, role, department and authentication events.
- Organization data such as legal name, address, registration and tax identifiers, business categories and authorized contacts.
- Procurement data such as requisitions, RFQs, quotations, purchase orders, dispatches, invoices, receipts, returns, ratings, support tickets and reports.
- Subscription and transaction data such as package selected, payment request, amount, currency, gateway reference, settlement status, credit-ledger entries and invoice records.
- Technical and security data such as IP address, device/browser information, request identifiers, cookies, session activity and audit events.
- Files deliberately uploaded through secure workflows, including supplier invoices and payment proof.
Why we use information
- To create, authenticate and secure accounts.
- To provide procurement, Vendor collaboration, subscription, billing, reporting and support functions.
- To process and verify payments, generate invoices after successful settlement and manage valid Company subscription credit.
- To send operational email such as invitations, password resets, RFQ notices, supply updates and payment confirmations.
- To prevent abuse, fraud, unauthorized access and duplicate or inconsistent transactions.
- To meet contractual, accounting, tax, audit, legal and regulatory obligations.
- To improve reliability, usability and customer support using aggregated operational information.
Grounds for processing
We process information where it is necessary to perform the contract with the subscribing organization, comply with law, protect legitimate business and security interests, or act on valid consent where consent is required. Customer organizations are responsible for providing appropriate notices and permissions to their employees, Vendors and other users whose information they enter into Procuraz.
How information is shared
Information may be shared with:
- Authorized users within the relevant Company, Vendor or Seller Partner organization according to role permissions.
- Payment processors, banks and payment networks needed to create checkout, verify payment, handle disputes or process an approved refund.
- Email, hosting, database, security and other service providers acting under contractual controls.
- Professional advisers, auditors, insurers, regulators, courts or law-enforcement authorities where legally required.
- A successor in connection with a legitimate merger, financing, acquisition or transfer, subject to applicable protections.
We do not sell personal data as a standalone commercial product.
Payments and payment providers
Payment providers process payment credentials under their own privacy notices. Procuraz receives transaction identifiers, amount, currency, status and limited payer information needed for verification, reconciliation, fraud prevention and invoicing. A subscription invoice is created only after payment or eligible Company credit is successfully settled.
Cookies and local storage
Procuraz uses essential cookies and browser storage for secure sessions, workspace routing, fraud prevention, preferences and application operation. See the Cookie Policy for details.
Retention
We retain account and operational data for the active customer relationship and for a reasonable period afterward. Financial, tax, audit, security and dispute records may be kept longer where required by law or legitimate recordkeeping needs. Secure files are deleted or anonymized when no longer required, subject to backup and legal-hold cycles.
Security
Procuraz uses role-based access, tenant isolation, secure session cookies, encryption for configured secrets, private document storage, audit logging and transport encryption. No internet service can guarantee absolute security; users must protect credentials, use authorized devices and report suspected compromise promptly.
Data rights and choices
Subject to applicable law, an individual may request access, correction, deletion, restriction, consent withdrawal or information about processing. Requests should be sent to support@procuraz.com and should identify the relevant organization and account. We may verify identity and coordinate with the customer organization that controls the data.
International processing
Service providers or users may operate in different countries. Where data crosses borders, Procuraz applies contractual and technical safeguards appropriate to the transfer and applicable law.
Children
Procuraz is intended for business users and is not directed to children. Organizations must not create accounts for persons who cannot legally enter into business or employment-related arrangements in their jurisdiction.
Changes to this policy
We may update this Policy to reflect service, legal or operational changes. Material changes will be communicated through the platform, email or another appropriate method. The effective and last-updated dates appear at the top of this page.
Privacy contact
Privacy questions and requests may be sent to support@procuraz.com. Complaints may also be escalated through the Grievance Redressal process.