Legal
Privacy Policy
How Prokuro collects, uses, and protects your account details and the bill-of-materials data you upload.
At a glance
- We collect your account details, the BOM files you upload, and basic technical logs.
- Your BOM contents stay in your account. We do not expose them to other customers.
- We do not sell your data and we run no advertising or analytics trackers.
- We do not process payments yet, so we never receive card details.
Who we are
Prokuro ("Prokuro," "we," "us") operates prokuro.ai and the Prokuro web application, an AI procurement analyst for hardware supply chains. We are based in San Francisco, California, United States.
For any privacy question, or to exercise the rights described below, email sales@prokuro.ai.
What we collect
We only collect what we need to run the product. This table lists every category we handle today.
| Category | Examples | Source |
|---|---|---|
| Account | Email address, first and last name, company name | You, at sign-up or in account settings |
| Authentication | Email verification codes, session tokens, Google account identifier if you use Google sign-in | You / Google |
| BOM and procurement data | Uploaded CSV and Excel files, part numbers, manufacturers, quantities, reference designators, AML alternates, your saved column mappings, and the analysis we generate from them | You, when you upload a BOM |
| Demo requests | First and last name, work email, phone number (optional), notes (optional) | You, on the booking form |
| Technical logs | IP address, browser and device type, pages requested, timestamps, error traces | Collected automatically |
What we do not collect
- Payment or card details. Prokuro does not process payments today, so no billing data reaches us.
- Advertising identifiers. We run no ad networks, no analytics trackers, and no cross-site tracking pixels.
- Special-category data. We do not ask for health, biometric, financial account, government ID, or precise location data.
- Data from third-party data brokers. Everything we hold about you comes from you or is generated by your use of the product.
How we use it
- Create and authenticate your account
- Parse your BOM files and resolve each line to a component identity
- Produce lifecycle, availability, lead-time, tariff, and risk analysis, and generate the recommendations shown in your report
- Save your BOMs and column mappings so you can return to them
- Respond to support requests and demo bookings
- Keep the service secure, diagnose faults, and prevent abuse
- Meet legal and accounting obligations
Automated analysis. Risk scores and alternate suggestions are produced automatically from component data and your BOM context. They are recommendations for a human to review, not automated decisions about you as an individual, and they carry no legal or similarly significant effect on you.
Legal bases
Where the GDPR or UK GDPR applies, we rely on the following bases:
- Contract. Providing the account, BOM analysis, and reports you asked for.
- Legitimate interests. Securing the service, preventing abuse, diagnosing faults, and improving product quality.
- Consent. Optional fields such as a phone number, and any future non-essential cookies or marketing email.
- Legal obligation. Where retention or disclosure is required by law.
Your BOM data
Your uploaded files and the analysis derived from them are stored against your account and are not visible to other Prokuro customers.
To analyze a line, we send part numbers and manufacturer names to component data providers. We do not send your file, your quantities, your company name, or the rest of your BOM. Tariff and HTS rates are computed from public datasets we hold ourselves, so no data leaves our systems for that step.
We do not use your identifiable BOM contents to train models for other customers. If we later use aggregated substitution signals to improve recommendations, those signals will be de-identified and will never reveal your company or the contents of a specific file. We will update this policy before that changes.
Retention
- Account and BOM data: kept while your account is active. We delete it within 30 days of a deletion request, except where law requires us to keep records.
- Technical logs: kept for a limited period for security and debugging, then discarded or aggregated.
- Demo bookings and sales email: kept for as long as needed to manage the relationship.
- Backups: deleted data may persist briefly in encrypted backups before being overwritten.
Security
We encrypt data in transit with TLS and rely on our cloud provider's encryption at rest. Access to BOM data requires an authenticated session, and each account can only reach its own files. Internal access is limited to the people who need it to operate or support the service.
No system is completely secure. We cannot guarantee absolute security, and you are responsible for keeping access to your email account secure, since it is used to sign in.
Your rights
Depending on where you live, you may have the right to access, correct, delete, export, or restrict the use of your personal information, to object to processing, and to withdraw consent. California residents have rights under the CCPA and CPRA, including the right to know, delete, and correct, and to opt out of sale or sharing. We do neither.
- Update your details: edit your name and company directly in account settings.
- Delete your account and BOM data: email sales@prokuro.ai and we will action it. In-app deletion is not available yet.
- Get a copy of your data: email us and we will provide an export.
We respond within 30 days. We will not discriminate against you for exercising these rights. If you are in the EEA or UK, you may also complain to your local data protection authority.
International transfers
Prokuro is operated from the United States, and our processors listed above are US-based. If you use the service from outside the United States, your information is transferred to and processed in the US. Where required, we rely on Standard Contractual Clauses or an equivalent transfer mechanism.
Children's data
Prokuro is a business product intended for use by adults in a professional capacity. It is not directed to children, and we do not knowingly collect information from anyone under 16. If you believe a child has given us information, email us and we will delete it.
Changes
We may update this policy as the product evolves. We will post the revised version here and update the date above. For material changes, we will notify account holders by email before the change takes effect.
Contact
Questions about this policy, or a request about your data: sales@prokuro.ai