MyProcureHub Privacy Policy

Effective date: 6 June 2026 · Last updated: June 2026 · Version: 2026-01

Operated by Brilliance Innovation Pvt Ltd (MyProcureHub / ProcureHub) at myprocurehub.com. This document applies uniformly across all ProcureHub hubs.

Introduction

Brilliance Innovation Pvt Ltd ("Company", "we", "us", "our") operates MyProcureHub and the ProcureHub B2B procurement platform (the "Platform"), including the Main Site, Buyer Hub, Seller Hub, Admin Hub, Affiliate Hub, and Leadership Hub, accessible via https://myprocurehub.com and associated sub-domains.

This Privacy Policy explains how we collect, use, store, share, and protect personal data and business information when you visit our websites, register for an account, post requirements, submit bids, use chat, contracts, payments, subscriptions, or other Platform features.

This policy is designed to comply with applicable Indian law, including the Information Technology Act, 2000 ("IT Act"), the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 ("SPDI Rules"), and the Digital Personal Data Protection Act, 2023 ("DPDP Act"), to the extent applicable. Where you access the Platform from outside India, additional laws may apply; we implement appropriate safeguards as required.

By registering on or using the Platform, you acknowledge this Privacy Policy. If you do not agree, please do not use the Platform.

1. Data We Collect

1.1 Data you provide

  • Account and profile: name, email, phone, job title, department, company name, company size, industry, addresses, and credentials.
  • Business verification and KYC: PAN, GSTIN, CIN, MSME details, incorporation documents, and verification outputs from third-party providers.
  • Procurement activity: requirements, specifications, budgets, bids, counter-offers, contracts, purchase orders, Award Confirmation Certificates (ACC), delivery confirmations, and related records.
  • Communications: messages, chat threads, proposals, support tickets, and feedback.
  • Payments and subscriptions: billing details, Razorpay or other payment-gateway metadata, invoices, and plan selections (we do not store full card credentials).
  • Affiliate programme: partner profile, referral activity, commission records, and payout information where applicable.

1.2 Data collected automatically

  • Usage and log data: sign-in times, pages visited, features used, IP address, browser, device identifiers, and error logs.
  • Security and fraud signals: authentication events, rate limits, anomaly flags, and moderation outcomes.
  • Cookies and similar technologies as described in Section 10.

1.3 Data from third parties

  • KYC and business verification providers.
  • Payment processors (e.g. Razorpay).
  • Cloud storage, email, analytics, e-signature, and AI service providers.
  • Public registers and commercial databases for verification.

1.4 AI-assisted features

When you use AI-assisted requirement creation, search, moderation, or analytics (including Jenny / ProcureAI), we may process text and documents you submit. Inputs may be sent to third-party AI providers (e.g. Google Gemini) under contract. AI outputs are assistive only and may be logged for quality and safety. Do not submit data you are not authorised to share. You may manage AI-related preferences in your account Privacy settings where available.

2. How We Use Your Data

  • Provide and operate the Platform: accounts, RFx/bidding, chat, contracts, ACC, payments, subscriptions, and affiliate tracking.
  • Verify users and businesses; prevent fraud and misuse.
  • Facilitate B2B transactions between Buyers and Sellers per Platform rules.
  • Communicate with you: OTPs, bid alerts, contract updates, and—with separate consent—marketing (opt-out available).
  • Improve and secure the Platform through aggregated analytics, moderation, and abuse detection.
  • Comply with legal, tax, and regulatory obligations.

We process personal data on lawful bases under the DPDP Act: consent, contract performance, legitimate uses permitted by law, or legal obligation. Essential Platform functions do not rely on marketing consent.

3. Sharing and Disclosure

  • Other users: as needed for procurement (e.g. bids, profiles, contact details per anonymity rules).
  • Service providers (Data Processors): hosting, email, SMS, analytics, payments, KYC, AI, and support vendors under written contract.
  • Advisers and affiliates of the Company where necessary, subject to confidentiality.
  • Legal and safety: regulators, courts, or law enforcement when required.
  • Business transfers: merger, acquisition, or asset sale.

We do not sell or rent your personal data for third-party marketing.

4. Data Retention

We retain data while your account is active and as needed for Services, disputes, legal/tax compliance, and audit. After closure, we retain records only as required by law (e.g. tax, contract evidence), then delete or anonymise when no longer necessary. See our internal retention schedule (available on request) for category-specific periods.

5. Security

We use reasonable technical and organisational measures—including access controls, encryption in transit where supported, audit logging, and vendor due diligence. You are responsible for safeguarding your credentials.

6. Your Rights (Data Principal)

Subject to the DPDP Act and applicable law, you may:

  • Access a summary of personal data we hold about you.
  • Correction of inaccurate or incomplete personal data.
  • Erasure when retention is no longer necessary (subject to legal holds).
  • Withdraw consent for processing that relies on consent (e.g. marketing).
  • Grievance redressal if you believe we have not handled your data properly.
  • Nomination of another individual to exercise your rights in the event of death or incapacity, as permitted when DPDP rules are notified.

To exercise these rights, use our Privacy & Data Requests page, email privacy@myprocurehub.com, or contact the Grievance Officer (Section 12). We may verify your identity before responding. We aim to respond within 30 days.

Note: Post-sales marketplace issues (delivery, payments, ACC disputes) are handled separately at Grievances (post-sales) — not via the privacy request channel.

7. Children

The Platform is for business users aged 18+. We do not knowingly collect children's data. Registration requires confirmation that you are 18 or older.

8. Cross-Border Processing

Data is primarily processed in India. Some service providers (e.g. cloud hosting, email, AI) may process data outside India. We use contractual safeguards and vendor due diligence as required by law and government notifications on permitted transfers. A list of key processors is available on request.

9. Personal Data Breach

If a personal data breach likely to affect you occurs, we will notify the Data Protection Board of India and affected Data Principals as required by the DPDP Act, after assessing the breach and taking containment steps.

10. Cookies and Tracking

We use essential cookies for authentication, security, and session management — these are required for the Platform to function. We also use analytics cookies to understand usage and improve the Platform. You may control cookies in your browser; disabling essential cookies may limit functionality.

11. Changes to This Policy

We may update this policy on the Platform with a new version date. Material changes may be notified by email or in-app notice and may require re-acceptance. Continued use constitutes acceptance where permitted by law.

12. Contact and Grievance Officer

For privacy questions, data principal requests, or DPDP complaints:

Acknowledgement

By using ProcureHub, you acknowledge that you have read and understood this Privacy Policy and consent to the collection, use, and disclosure of your data as described herein, where consent is required.

See also: Terms of Use