Privacy Policy

The controller of personal data processed through Procura is BETTER SOLUTIONS SHPKNJP, Filip Vtori Makedonski 3/11, Centar, Skopje, North Macedonia (EMBS 7641087, EDB 4080022610528). Contact us about privacy at info@procura.cc.

• Account data: name, email address, password (stored only as a one-way hash), role, organization, login and security events (such as sign-ins, IP address, browser), and two-factor authentication settings.
• Sign-in with Google or Facebook: if you choose it, the provider sends us your account identifier, name and email address, and whether it has verified that address. We use them only to sign you in. We do not receive your password, contacts, friends or posts.
• Organization and tender data: company profile information, documents you upload, tenders you track, extracted requirements, and your alert preferences.
• Billing data: your plan, subscription status, payment and invoice history, and the identifiers Paddle gives your customer record, subscription and payments, with the details Paddle reports about each payment (such as the amount, tax and currency). We never receive or store your card number or security code.
• Communications: messages you send us, and the emails we send you (verification codes, tender alerts, billing and service notices).
• Cookies: cookies needed to keep you signed in and, with your consent, analytics cookies, managed through our cookie banner.

• To provide Procura and process payments: performance of our contract with you.
• To keep accounts secure and prevent fraud and abuse: our legitimate interest in a secure service.
• To keep accounting and tax records: legal obligation.
• To send product news or use optional cookies: your consent, which you can withdraw at any time.

Paddle.com is our online reseller and Merchant of Record. When you subscribe, you buy from Paddle: Paddle collects the details needed for the order (such as your name, email address, country, billing address, tax number if you give one, and your payment details), takes the payment, applies strong customer authentication (such as 3-D Secure), calculates tax and issues your invoices. Paddle is an independent controller for this data, under its own privacy policy.

So that the order is linked to your Procura account, we pass Paddle your email address and our account identifier when you open the checkout. Paddle sends us back what we need to run your subscription: its status, billing period, the amounts and tax charged, invoice numbers and Paddle's identifiers.

We share data only with service providers that process it on our behalf and under our instructions, and with Paddle as described above:

• hosting and infrastructure: OVHcloud (servers in the EU);
• database: Supabase (EU region);
• file storage: Amazon Web Services (EU region);
• email delivery: Google Workspace;
• orders and payments: Paddle.com, our reseller and Merchant of Record (see above);
• AI processing for the features you use, such as requirement extraction and document categorization: model providers accessed through OpenRouter (for example Google and OpenAI), which receive only the content needed to produce the result;
• cookie consent: Cookiebot.

We do not sell your personal data.

Some providers process data outside North Macedonia and the European Economic Area. Paddle is based in the United Kingdom, which the European Commission recognizes as providing adequate protection. Others, such as AI model providers, may process data in the United States; where this happens, we rely on appropriate safeguards, such as the European Commission's standard contractual clauses or an adequacy decision.

• account, organization and tender data: while your account is active, then deleted within 30 days of account deletion, except where we must keep it longer;
• billing and accounting records: as long as required by accounting and tax law;
• security logs: up to 12 months.

You can ask to access, correct, delete or export your data, to restrict or object to its processing, and withdraw any consent you gave. Email info@procura.cc; we reply within one month. To delete your account, follow the steps on our User Data Deletion page.

You can also complain to the Personal Data Protection Agency of North Macedonia, or to the data protection authority in your own country.

We protect data with encryption in transit (HTTPS), access controls, role-based permissions, optional two-factor authentication and audit logs. No system is perfectly secure; if a breach affects your data, we will notify you as the law requires.

Procura is a business service and is not intended for anyone under 18.

We may update this policy and will tell you about material changes by email or in the app. See also our Terms of Service.