SIGNALSTACKS TECHNOLOGIES PRIVATE LTD owns and operates ProcureOS and is the controller of personal data processed for the ProcureOS service. References to ProcureOS, we, us, or our mean SIGNALSTACKS TECHNOLOGIES PRIVATE LTD operating ProcureOS and related services.

For privacy questions, deletion requests, access requests, or grievance-related concerns, contact karan@procureos.app.

We collect account information such as your name, email address, authentication provider details, organization or role information, subscription status, support messages, and consent/audit records.

We collect content you provide or generate in the service, including uploaded documents, requisitions, RFQs, vendor and item records, vendor quotes, comparison decks, cost sheets, purchase orders, playbook rules, notes, comments, feedback, prompts, exported content, and analysis results.

We collect technical and usage information such as IP address, user agent, device/browser details, pages visited, actions taken, timestamps, security logs, anti-abuse signals, cookies, and diagnostics.

We may process supplier communications you route through the service, price and index reference data, and third-party source material to provide procurement features.

We use information to provide, maintain, secure, and personalize ProcureOS; authenticate users; run AI analysis; generate quote comparisons and cost estimates; process uploads; stage and send procurement emails you approve; provide customer support; prevent abuse; manage subscriptions; and comply with legal obligations.

We use legal acceptance records to document that current Terms of Service and Privacy Policy were presented when you created or accessed an account.

We do not sell your personal data. We do not use your uploaded private documents to train our own general-purpose AI models.

For users who are not Enterprise customers, we may use account data, usage data, uploaded content, prompts, outputs, feedback, and derived analysis to maintain, debug, evaluate, improve, and develop ProcureOS, including product quality, retrieval, ranking, prompts, safety, reliability, and feature development.

Enterprise usage means use under an ENTERPRISE plan, an Enterprise organization or account, or a written enterprise agreement. Enterprise Customer Content means uploaded documents, prompts, notes, requisitions, RFQs, quotes, comparison decks, cost sheets, purchase orders, playbook rules, comments, and other customer-provided materials.

We do not use Enterprise Customer Content for platform improvement, model training, feature development, benchmarking, or analytics beyond providing and supporting that Enterprise customer's service, unless the Enterprise customer expressly permits it in writing.

We may still process Enterprise Customer Content and operational telemetry as needed for service delivery, security, reliability, debugging, support, billing, legal compliance, abuse prevention, and customer-requested troubleshooting.

To provide the service, we may send relevant text, document excerpts, metadata, prompts, and outputs to AI model providers, search providers, cloud infrastructure, storage, database, email, authentication, analytics, payment, security, and monitoring providers.

These providers process data for service delivery, security, support, and operational purposes. Their systems may be located in India or other jurisdictions, subject to applicable law and contractual or platform safeguards.

AI providers and infrastructure providers may have independent security, retention, and abuse-monitoring practices. We configure providers where reasonably available to avoid training on customer-uploaded private documents.

We use cookies and similar technologies for authentication, session management, security, abuse prevention, legal acceptance audit flows, and product functionality.

You sign in with your work email and a password. We store your email, name, and a salted hash of your password — never the password itself.

We retain account data, uploaded content, analysis outputs, and operational records for as long as needed to provide the service, comply with law, resolve disputes, enforce agreements, maintain security, and keep audit records.

If you delete your account or request deletion, we will delete or de-identify eligible data within a reasonable period, subject to backups, legal obligations, payment records, fraud prevention, security logs, and records we need to establish or defend legal claims.

Legal acceptance records may be retained even after account deletion where necessary to document agreement to the Terms of Service and Privacy Policy.

Subject to applicable law, you may request access, correction, deletion, withdrawal of consent, or information about how your personal data is processed by contacting karan@procureos.app.

Withdrawal or deletion may limit or prevent use of ProcureOS where the relevant data is required for authentication, security, billing, legal compliance, or service delivery.

You may also raise a grievance using karan@procureos.app. We may need to verify your identity before acting on a request.

We use reasonable technical and organizational safeguards designed to protect personal data, including encrypted transport, access controls, cloud security controls, logs, and monitoring. No system can be guaranteed completely secure.

If we become aware of a personal data breach that requires notification under applicable law, we will take steps required by law and provide relevant information through appropriate channels.

ProcureOS is not intended for children. Do not use ProcureOS if you are not legally capable of entering into these terms or if your use would require parental consent that has not been obtained.

We may update this Privacy Policy from time to time. Material changes may be notified by email, in-app notice, or by updating this page. Continued use after an update means you accept the updated policy.

For privacy-related inquiries, contact karan@procureos.app.