Who we are
Procright is an AI procurement analyst for high-stakes purchases. This policy covers procright.com and the forms on it: the free test run, the 20-minute booking, and the quote request.
For data protection purposes, Procright is the controller of the information described here. If your organisation uploads documents to us, we act as a processor for those documents and handle them only as described in Files you send us.
What we collect
Information you give us
- Contact details — your name, work email and company. Every form on the site asks for these three and nothing more.
- What you want us to look at — the category you are buying, or a spec document you attach for a gap analysis.
- Your numbers, if you ask for a quote — purchases per year, seats, main categories and any audit requirements.
- Meeting details — the slot you pick when you book 20 minutes with us.
- Anything you write to us — email, or notes you add to a form.
We do not ask for payment details on this website, and we do not process card data here.
Information collected automatically
- Usage data — pages viewed, which buttons were used, roughly how long a visit lasted.
- Technical data — browser, operating system, approximate location derived from IP address, and the IP address itself.
- Cookies — see Cookies and analytics. Analytics cookies only run if you accept them.
Files you send us
If you send a specification for a gap analysis, that document usually belongs to your organisation, not to us. So we treat it differently from the rest:
- It is stored as an attachment on your record in our CRM, in the European Union.
- It is used only to produce the analysis you asked for. It is not used to train models, it is not shared with other customers, and it is not sold.
- We work on a copy. Nothing in your live systems is touched.
- We delete it after the work is finished unless you ask us to keep it. Ask at any time and we delete it sooner.
- We are happy to sign your NDA before you send anything. Just ask.
Please do not send us personal data you do not need to send. A specification rarely needs to contain names, salaries or customer records — if yours does, redact it first or tell us and we will agree a safer route.
How we use it
- To do the thing you asked for: run the test, prepare the analysis, produce a quote, hold the meeting.
- To reply to you, and to follow up on a conversation you started.
- To keep the service working, secure and free of abuse.
- To understand which parts of the site are useful, in aggregate.
- To meet our legal and accounting obligations.
We do not sell personal information. We do not send unsolicited bulk email that points at procright.com, and every marketing email we do send carries a working unsubscribe link.
Our legal basis, if you are in the EU, UK or Türkiye
- Contract — delivering what you requested.
- Legitimate interests — replying to business enquiries, keeping the site secure, understanding aggregate usage.
- Consent — analytics cookies, and marketing email. You can withdraw it at any time.
- Legal obligation — where the law requires us to keep records.
How long we keep it
- Uploaded specifications — deleted once the analysis is done, unless you ask us to keep them.
- Enquiries and quotes — kept while there is a live conversation, then up to 24 months so we know what was already discussed.
- Meeting records — kept while the relationship is live.
- Analytics — aggregated, and retained no longer than 14 months.
- Accounting records — kept for as long as tax law requires.
Ask us to delete your data sooner and we will, unless we are legally obliged to keep it.
Your rights
Wherever you are, you can ask us to:
- tell you what we hold about you, and give you a copy;
- correct anything that is wrong;
- delete it;
- stop or limit how we use it;
- hand it to you, or to someone else, in a portable format;
- withdraw a consent you gave earlier.
Write to hi@procright.com. We answer within 30 days and we do not charge for it.
If you are in the EU or UK and you think we have got it wrong, you may complain to your local data protection authority. If you are in Türkiye, KVKK gives you equivalent rights and you may apply to the Kişisel Verileri Koruma Kurumu. If you are in California, CCPA gives you the right to know and the right to delete; we do not sell personal information, so there is nothing to opt out of.
Security
- Everything on this site is served over HTTPS.
- Uploaded files sit in an isolated workspace, not on a laptop and not in a shared drive.
- Access is limited to the people who need it to do the work.
- Our booking service never exposes credentials to your browser; it talks to a server we control.
No system is perfectly secure, and we will not pretend otherwise. If you believe you have found a vulnerability, please tell us at hi@procright.com and we will respond quickly.
Where your data sits
Your enquiry, your quote and any document you upload are stored in the European Union. Some of our suppliers are based in the United States, so certain data reaches them there — video meetings, analytics and hosting in particular. Those transfers rely on the European Commission's Standard Contractual Clauses or an equivalent safeguard.
Children
Procright is a tool for businesses. It is not aimed at children and we do not knowingly collect information from anyone under 16. If we learn that we have, we delete it.
Changes to this policy
If we change how we handle your information we will update this page and move the effective date at the top. Where a change matters, we will say so plainly rather than hoping you do not notice.
Contact
Procright
Delaware, United States
hi@procright.com
Privacy questions, deletion requests and NDAs all go to the same address. A person reads it.