ProCURE LLC Beta Privacy Policy

Last updated: August 28, 2026 · Applies to: the ProCURE free beta

1. Who we are

ProCURE LLC ("ProCURE," "we," "us") is a Missouri limited liability company. You can reach us at info@procurelabs.io. ProCURE is a buyer-side inventory and analytics platform for licensed cannabis retailers.

2. What this covers

This policy covers information handled through the ProCURE application. It does not cover your own business's handling of your customers' data, which remains your responsibility.

3. What we collect

• Account information. This includes your name, work email, role, and the company you belong to.
• Authentication. This is handled by our authentication provider (Supabase), and we do not store your password.
• Usage and technical information. This covers pages viewed, actions taken, IP address, browser and device type, timestamps, and error logs, which we use to operate, secure, and improve the Service.
• Your business data. This is the product, cost, inventory, and sales data you upload or connect. You own this data, and we process it to run the analytics you asked for (see the Data Processing Addendum and the Beta Terms).

4. What we do NOT collect

ProCURE is a buyer-side analytics tool that runs on product, cost, and sales data, not on your shoppers. Consumer and patient identifying information contained in an uploaded file (names, contact details, medical-card or patient IDs, and similar) is actively stripped at the point of upload and is never stored by the Service. We do not collect, store, or have access to your end-customers' or patients' personal information.

5. How we use information

We use the information above only to: provide and operate the Service; secure it and prevent abuse; diagnose and fix problems; provide support; and improve the product. We do not sell your information, and we do not share it across tenants.

6. Service providers (sub-processors)

We rely on a small set of established, independently-audited providers to run ProCURE. Each processes data only to provide its part of the Service:

• Supabase provides our database, authentication, and storage, with data hosted in the United States.
• Vercel provides application hosting and delivery.
• Cloudflare provides encrypted offsite backup storage (R2) and DNS.
• Resend handles transactional email such as account invites and password resets.
• Sentry provides error monitoring for diagnosis, and personal data is scrubbed before storage.

We share data with these providers only as needed to run the Service, and with law enforcement only when required by law. A current list of providers is available on request.

7. How long we keep it, and deletion

During the beta, we retain your business data so the Service works. At the end of the beta, you can export your data, and on request we will permanently delete it within 30 days and confirm the deletion in writing (see Beta Terms §8). You can ask us about, correct, or request deletion of your account information at any time by emailing info@procurelabs.io.

8. Security

We protect data with encryption in transit and at rest, tenant isolation, least-privilege access, and tested encrypted backups. No system is perfectly secure, but security is a first-order priority, not an afterthought. If you believe you've found a vulnerability, email info@procurelabs.io.

9. Your California privacy rights (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act, as amended by the CPRA, gives you certain rights over your personal information. Because ProCURE strips consumer and patient information at upload (see §4), the only personal information we hold is the account and usage information described in §3. That means your name, work email, role, and technical and usage logs.

• We do not sell or share your personal information as those terms are defined under the CCPA/CPRA, and we have not done so in the preceding 12 months. We do not offer financial incentives in exchange for personal information.
• You have the right to know and access the personal information we hold about you, to request its deletion, to request correction of inaccurate information, and not to be discriminated against for exercising these rights.
• To exercise a right, email info@procurelabs.io. We will verify your request against your account and respond within the timeframes the law requires. You may use an authorized agent to make a request on your behalf.

10. Changes and contact

Because this is a beta, this policy may change. We will post the updated version here and notify you of material changes. Questions about this policy or your data can go to info@procurelabs.io.