Legal

Privacy Policy

How Prokuro collects, uses, and protects your account details and the bill-of-materials data you upload.

Last updated July 27, 2026

Applies to prokuro.ai and the Prokuro web app

At a glance

We collect your account details, the BOM files you upload, and basic technical logs.
Your BOM contents stay in your account. We do not expose them to other customers.
We do not sell your data and we run no advertising or analytics trackers.
We do not process payments yet, so we never receive card details.

Who we are

Prokuro ("Prokuro," "we," "us") operates prokuro.ai and the Prokuro web application, an AI procurement analyst for hardware supply chains. We are based in San Francisco, California, United States.

For any privacy question, or to exercise the rights described below, email sales@prokuro.ai.

What we collect

We only collect what we need to run the product. This table lists every category we handle today.

Category	Examples	Source
Account	Email address, first and last name, company name	You, at sign-up or in account settings
Authentication	Email verification codes, session tokens, Google account identifier if you use Google sign-in	You / Google
BOM and procurement data	Uploaded CSV and Excel files, part numbers, manufacturers, quantities, reference designators, AML alternates, your saved column mappings, and the analysis we generate from them	You, when you upload a BOM
Demo requests	First and last name, work email, phone number (optional), notes (optional)	You, on the booking form
Technical logs	IP address, browser and device type, pages requested, timestamps, error traces	Collected automatically

What we do not collect

Payment or card details. Prokuro does not process payments today, so no billing data reaches us.
Advertising identifiers. We run no ad networks, no analytics trackers, and no cross-site tracking pixels.
Special-category data. We do not ask for health, biometric, financial account, government ID, or precise location data.
Data from third-party data brokers. Everything we hold about you comes from you or is generated by your use of the product.

How we use it

Create and authenticate your account
Parse your BOM files and resolve each line to a component identity
Produce lifecycle, availability, lead-time, tariff, and risk analysis, and generate the recommendations shown in your report
Save your BOMs and column mappings so you can return to them
Respond to support requests and demo bookings
Keep the service secure, diagnose faults, and prevent abuse
Meet legal and accounting obligations

Automated analysis. Risk scores and alternate suggestions are produced automatically from component data and your BOM context. They are recommendations for a human to review, not automated decisions about you as an individual, and they carry no legal or similarly significant effect on you.

Legal bases

Where the GDPR or UK GDPR applies, we rely on the following bases:

Contract. Providing the account, BOM analysis, and reports you asked for.
Legitimate interests. Securing the service, preventing abuse, diagnosing faults, and improving product quality.
Consent. Optional fields such as a phone number, and any future non-essential cookies or marketing email.
Legal obligation. Where retention or disclosure is required by law.

Your BOM data

Your uploaded files and the analysis derived from them are stored against your account and are not visible to other Prokuro customers.

To analyze a line, we send part numbers and manufacturer names to component data providers. We do not send your file, your quantities, your company name, or the rest of your BOM. Tariff and HTS rates are computed from public datasets we hold ourselves, so no data leaves our systems for that step.

We do not use your identifiable BOM contents to train models for other customers. If we later use aggregated substitution signals to improve recommendations, those signals will be de-identified and will never reveal your company or the contents of a specific file. We will update this policy before that changes.

Who we share with

We do not sell personal information and we do not share it for advertising. We use the following processors to run the service:

Provider	Purpose	Region
Amazon Web Services	Hosting, authentication (Cognito), BOM storage, and databases	United States
Google	Optional "Continue with Google" sign-in	United States
Calendly	Demo scheduling and calendar invitations	United States
Digi-Key	Component lifecycle, stock, and lead-time lookups	United States

We may also disclose information where required by law, to enforce our terms, or to protect the rights and safety of our users. If Prokuro is involved in a merger or acquisition, we will give notice before your information becomes subject to a different policy.

Retention

Account and BOM data: kept while your account is active. We delete it within 30 days of a deletion request, except where law requires us to keep records.
Technical logs: kept for a limited period for security and debugging, then discarded or aggregated.
Demo bookings and sales email: kept for as long as needed to manage the relationship.
Backups: deleted data may persist briefly in encrypted backups before being overwritten.

Security

We encrypt data in transit with TLS and rely on our cloud provider's encryption at rest. Access to BOM data requires an authenticated session, and each account can only reach its own files. Internal access is limited to the people who need it to operate or support the service.

No system is completely secure. We cannot guarantee absolute security, and you are responsible for keeping access to your email account secure, since it is used to sign in.

Your rights

Depending on where you live, you may have the right to access, correct, delete, export, or restrict the use of your personal information, to object to processing, and to withdraw consent. California residents have rights under the CCPA and CPRA, including the right to know, delete, and correct, and to opt out of sale or sharing. We do neither.

Update your details: edit your name and company directly in account settings.
Delete your account and BOM data: email sales@prokuro.ai and we will action it. In-app deletion is not available yet.
Get a copy of your data: email us and we will provide an export.

We respond within 30 days. We will not discriminate against you for exercising these rights. If you are in the EEA or UK, you may also complain to your local data protection authority.

Cookies

We use only what the product needs to work. There is no advertising or analytics tracking on prokuro.ai today, so there is no consent banner.

Authentication: session tokens that keep you signed in.
Preferences: a small cookie remembering interface state, such as whether the sidebar is collapsed.

If we add product analytics later, we will update this policy and request consent where the law requires it.

International transfers

Prokuro is operated from the United States, and our processors listed above are US-based. If you use the service from outside the United States, your information is transferred to and processed in the US. Where required, we rely on Standard Contractual Clauses or an equivalent transfer mechanism.

Children's data

Prokuro is a business product intended for use by adults in a professional capacity. It is not directed to children, and we do not knowingly collect information from anyone under 16. If you believe a child has given us information, email us and we will delete it.

Changes

We may update this policy as the product evolves. We will post the revised version here and update the date above. For material changes, we will notify account holders by email before the change takes effect.

Contact

Questions about this policy, or a request about your data: sales@prokuro.ai

Prokuro · San Francisco, California, United States