Privacy Policy

This Privacy Policy explains how Prokur, Inc. ("Prokur," "we," "us," or "our") collects, uses, discloses, and protects information when you visit our marketing website at prokur.io (the "Site").

This policy does not apply to our software applications at app.prokur.io or prokurcertify.com, which are governed by separate agreements and privacy notices. When we process customer data within those platforms, we act as a service provider or processor on behalf of our customers, who act as the data controllers.

(a) Information you provide

We collect information directly from you when you interact with the Site:

• Inquiries and Demos: If you submit our contact form or request a demo, we collect your name, organization, business email address, inquiry type, and message.
• Resource Library: If you subscribe to our guides, we collect your name, business email address, and organization.
• Scheduling: If you schedule a demo using our embedded Cal.com widget, we collect the details required to book your appointment.

(b) Information collected automatically

When you use the Site, our servers (provided by Floot) automatically capture log data. This includes your IP address, browser type, operating system, pages viewed, referring URLs, and timestamps.

(c) Cookies and local storage

We use a cookie banner that stores a cookie-consent key in your browser's local storage to remember your preference regarding website tracking.

(d) Business and firmographic data

Only if you consent to our use of analytics, we load a tag from Leadsy (Vtag) that identifies the business or organization visiting our Site.

(e) Information from partners

We may supplement the information you provide with publicly available business information to better understand your organization's needs.

We do not seek to collect sensitive personal information through our Site. Please do not submit government-issued identification numbers, financial account details, health information, or other sensitive data categories through our contact forms or demo scheduling tools.

We use the information we collect to:

• Respond to your inquiries and support requests.
• Deliver the resource guides and publications you requested.
• Schedule and manage product demos.
• Send transactional notifications and relevant marketing communications.
• Analyze and improve our Site's performance and user experience.
• Maintain the security of our infrastructure and prevent fraud.
• Comply with applicable legal obligations.

If you are located in the European Economic Area (EEA) or the United Kingdom (UK), our legal bases for processing your personal data are outlined below:

We use local storage and cookies to provide a customized experience.

You can control or withdraw your consent at any time by clicking "Decline" on our banner, clearing your browser's local storage, or using browser-based privacy controls. We also respect recognized Do Not Track (DNT) and Global Privacy Control (GPC) signals.

We share your information with trusted service providers who assist us in operating our Site and business:

We may also share information with professional advisors, in connection with a corporate transaction (such as a merger or acquisition), or when required by law or law enforcement.

We do not sell personal information for money. However, our use of visitor-identification tools (when consented to) may constitute "sharing" for cross-context behavioral advertising or "targeted advertising" under certain US state laws. You can opt out by declining the cookie banner.

Prokur is based in the United States. The information we collect is stored and processed on infrastructure located in the US. If you access our Site from outside the US, your information will be transferred to, stored, and processed in the US. We rely on appropriate safeguards, such as Standard Contractual Clauses, where legally required for such transfers.

We retain your personal information only for as long as necessary to fulfill the purposes for which it was collected. Contact form submissions are generally retained while the inquiry is active and up to 24 months after our last communication. Resource guide subscriber records are kept until you unsubscribe, plus a brief reconciliation period. Server logs are typically retained for 30 to 90 days. We may retain information longer if required by law or for dispute resolution.

We implement appropriate technical and organizational measures to protect your information. This includes role-based access controls, TLS 1.2+ encryption for data in transit, AES-256 encryption for data at rest, and least-privilege access principles. Our infrastructure is US-based, and our incident-response practices align with NIST SP 800-61 guidelines. However, please note that no method of transmission over the Internet or electronic storage is completely secure.

Depending on your location, you may have the right to request access to, correction of, or deletion of your personal information. To exercise your rights, please email us at support@prosperia.com. We will verify your identity before processing your request. We will respond within 45 days for US state privacy requests, or within one month for GDPR requests. We provide these services free of charge and will not discriminate against you for exercising your privacy rights. You may also designate an authorized agent to submit a request on your behalf.

Residents of California, Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, and other applicable states have specific rights. These include the right to know what personal information is collected, the right to delete or correct inaccurate information, the right to limit use of sensitive personal information, and the right to opt out of the sale or sharing of personal information for targeted advertising. If we deny your request, you have the right to appeal our decision.

Categories of personal information collected in the last 12 months:

Under California Civil Code Section 1798.83, California residents who have an established business relationship with us may request information about our disclosure of personal information to third parties for their direct marketing purposes. To make a request, please contact us at support@prosperia.com.

If you are covered by the GDPR, UK GDPR, or Swiss data protection laws, you have the right to access, rectify, or erase your personal data; restrict or object to its processing; and request data portability. You also have the right to withdraw your consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal. If you believe we have not complied with your data protection rights, you have the right to lodge a complaint with your local supervisory authority or the UK Information Commissioner's Office (ICO).

You may receive marketing emails from us if you request information or subscribe to our resources. You can unsubscribe from these communications at any time by clicking the "unsubscribe" link at the bottom of our emails or by contacting us. Even if you opt out of marketing, we may still send you transactional or service-related communications regarding your specific inquiries. Our communications comply with the CAN-SPAM Act.

We do not make decisions that produce legal or similarly significant effects concerning website visitors solely by automated means.

Our Site is a business-to-business platform and is not directed to or intended for children under the age of 16. We do not knowingly collect personal information from individuals under 16. If we become aware that we have collected such information, we will take steps to delete it promptly.

Our Site may contain links to other websites, including our application at app.prokur.io, our certification portal at prokurcertify.com, and third-party procurement resources. This Privacy Policy applies only to the prokur.io marketing website. We are not responsible for the privacy practices or content of other websites, and we encourage you to review their respective privacy policies.

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. When we do, we will revise the "Last updated" and "Effective" dates at the top of the policy. If we make material changes, we will provide a more prominent notice on the Site or communicate with you directly as required by law.

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

• Email: support@prosperia.com
• Mail: Prokur, Inc., 1600 Ponce de Leon Blvd, Suite 907, Coral Gables, FL 33134

You can also reach out to us via our Contact page.