Privacy
Draft privacy explanation for the Prqur MVP. Replace with a counsel-approved privacy notice before public launch.
What Prqur needs
Prqur stores account, business, capability, procurement request, quotation, message, feedback, membership and audit information needed to operate the network.
Buyer protection
A buyer can keep the organization identity undisclosed during quotation. Personal contact information is not intended to be exposed to matched suppliers through the opportunity workflow. Clarifications can remain inside Prqur messaging.
Supplier protection
Suppliers do not need to publish a full catalogue, public inventory or public quotation prices. Quotations are restricted to the relevant request context.
Files
Uploaded request and quotation files are stored in protected application storage and are served through authorization checks rather than direct public file URLs.
Location
Browser location is optional and used to improve request/supplier matching when the user chooses to share it.
Security
Prqur uses access controls, CSRF protection, password hashing, prepared database statements and private file handling in this MVP. Production deployment should add monitoring, rate limiting, MFA for administrators, backup/recovery and an independent security review.
Retention and rights
Production policy must define retention, deletion, correction, export and lawful disclosure processes under applicable Bahrain/GCC requirements.
Final legal review required
This page explains the technical privacy model in the MVP and is not a substitute for a final privacy policy prepared for the jurisdictions where Prqur operates.