Privacy policy

ProcureMate is a privacy-first inventory tracker. This page summarizes what we collect, why, and how we handle it. The full security posture document covers infrastructure-level details.

What we collect

• Account information you provide: name, email, organization name, business type.
• Camera credentials, encrypted at rest with AES-256-GCM.
• Inventory data you record (item names, counts, sources, notes).
• Snapshots from your cameras, captured only when motion is detected. Snapshots auto-delete after 30 days.
• Standard web logs (IP, user agent) for security and abuse prevention.

What we don't collect

• Continuous video. We never store video — only individual snapshot images.
• Facial recognition data. We do not identify or track individuals in any frame.
• Personal information about people in your facility (residents, customers, patients, employees) beyond what's incidentally visible in a snapshot.

How we use your data

To provide the inventory tracking service: pass camera frames through Claude (via Anthropic's API) to identify items, store the resulting changes in your dashboard, send you the alerts you opt in to, and generate the reports you request.

Sharing

We share data only with the third-party processors required to run the product — Supabase (database + storage), Vercel (hosting), Anthropic (AI), and Resend (email). We never sell your data and never share it with advertisers.

Your rights

You can export everything we hold about your organization (CSV/PDF reports cover inventory and activity). Account deletion happens within 24 hours of request — email support@procuremateai.com.

Vertical-specific notes

Pharmacies and clinics: cameras must not be placed where PHI is visible. Shelters: supply room only — never sleeping or bathroom areas. Grocery and restaurants: post the included signage to comply with employee surveillance laws.