Last Updated: 12 October 2026
Introduction ProcureFlow is a product of Eezee Pte. Ltd. (UEN 201609153D), a company incorporated in Singapore ("Eezee", "we", "us" or "our"). We are committed to protecting your privacy and your personal information. This policy explains how we collect, use, share, and safeguard information across (1) our marketing website at procureflow.ai, and (2) the ProcureFlow procurement platform that we provide to enterprise customers and their authorised users.
Who This Policy Covers
Information We Collect We collect the following personal information from you:
How We Collect Your Information We collect your information through the forms on our website, such as our contact and careers pages. You provide this information voluntarily to inquire about our services or to apply for a role. Usage data is collected automatically as you browse.
Use of Your Information The information you provide is used to:
Cookies & Analytics on Our Website Our website uses Google Analytics and the Google Ads conversion tag, which are provided by Google and set their own cookies, to measure visits and the effectiveness of our advertising. We also record page views with our own first-party analytics, which sets a cookie that recognises your browser across procureflow.ai and the platform for up to one year. You can block or delete cookies through your browser settings.
This section applies whether you access the ProcureFlow platform through our web application or our mobile app.
Our Role: Controller and Processor For our marketing website, we act as the data controller. For the platform, your organisation is the data controller and we act as a data processor (a "data intermediary" under Singapore's PDPA), processing personal data on your organisation's behalf and in accordance with its instructions, our services agreement, and any applicable Data Processing Addendum.
Information We Collect on the Platform
How We Collect It
How We Use Platform Data
Artificial Intelligence Processing Certain features use third-party AI providers to process the data you submit, solely to generate the output you requested. These providers are contractually restricted from using your data to train their models.
Cookies & Analytics The platform uses cookies that are strictly necessary to keep you signed in and to maintain your session. We also use first-party analytics: we record the pages you view and the features you use, linked to your account, and store these events in our own Google Cloud environment to understand how the platform is used and to improve it. We do not use third-party analytics, advertising, or session-recording tools on the platform or in our mobile app, and we do not share this usage data with an analytics provider.
Service Providers We use a limited number of trusted third-party service providers to help us host, operate, and deliver the platform, including Google Cloud Platform for hosting, Mailgun for email delivery, and the AI providers described above. They process data only on our behalf, only as needed to provide their services to us, and under appropriate confidentiality and data-protection obligations. A full list of our current service providers is available on request. We do not sell your personal data.
Sharing Within Your Organisation Procurement is collaborative. Information you enter, such as requests, approvals, and comments, is visible to other authorised users within your organisation in line with their roles and permissions.
Sharing With Suppliers When your organisation sends a request for quotation, a purchase order, or a similar document to a supplier, the information needed for that transaction is shared with that supplier.
Data Retention We retain platform data for as long as your organisation's account is active and as needed to provide the service. When your organisation's subscription ends:
Before deletion, we return personal data to your organisation where our agreement with it provides for this.
International Transfers & Hosting The platform and its data are hosted on secure cloud infrastructure, which may store and process data in one or more regions. Where personal data is transferred across borders, we put appropriate safeguards in place as required by applicable law.
Your Rights as a Platform User Because your organisation controls the personal data held in the platform, please direct requests to access, correct, or delete your data to your organisation, and we will support those requests as its processor. Subject to applicable law, including Singapore's Personal Data Protection Act (PDPA) and, where it applies, the EU/UK General Data Protection Regulation (GDPR), you may have rights to access, correct, delete, or restrict the processing of your personal data. Your rights under the PDPA are set out in full below.
Data Security We are committed to ensuring that your information is secure. To prevent unauthorised access, use, or disclosure, we have implemented robust security measures, including encryption of data in transit and at rest, role-based access controls, audit logging, and storage in secure, encrypted databases. We adhere to stringent security standards and are ISO 27001 certified, which demonstrates our commitment to managing and protecting data responsibly.
Sharing of Information Other than with the service providers described above, the suppliers your organisation transacts with, and within your own organisation, we do not share your personal information with third parties, except as required by law.
Children's Privacy Our website and platform are not intended for individuals under the age of 18, and we do not knowingly collect personal data from children. If you believe we have collected information from a child, please contact us.
Third-Party Links Our website and platform may link to third-party websites or services. We are not responsible for their privacy practices, and we encourage you to read their privacy policies before providing any personal information.
Consent We collect, use and disclose personal data only for the purposes you have consented to, or as permitted by law. You can withdraw consent at any time by emailing [email protected]. We will tell you what withdrawing means, for example if we can no longer provide part of the service.
Access and Correction You can ask for a copy of your personal data, and how it was used or disclosed in the year before your request, or ask us to correct it, by emailing [email protected]. We will verify your identity first. We respond as soon as reasonably possible. If we cannot respond within 30 days, we will tell you in writing within those 30 days when we will. For platform data, your organisation controls the data; we will help it respond.
Data Breaches If we have credible grounds to believe a data breach has occurred, we assess within 30 days whether it is notifiable. If it is, we notify the Personal Data Protection Commission (PDPC) no later than 3 calendar days after that assessment, and notify affected individuals where required. Where we process data for your organisation, we notify your organisation without undue delay.
Data Protection Officer Eezee Pte. Ltd., 71 Ayer Rajah Crescent #05-22/23, Singapore 139951. Email: [email protected].
Complaints If you are not satisfied with our response, you can contact the PDPC at www.pdpc.gov.sg.
Where the EU or UK General Data Protection Regulation (GDPR) applies and we act as the data controller, we process your personal data on the following legal bases:
You may also have the right to receive your data in a portable format, to object to processing based on our legitimate interests, and to lodge a complaint with your local supervisory authority. For platform data, your organisation is the controller and determines the legal basis.
Changes to This Policy This policy is provided in good faith and to the best of our knowledge. We reserve the right to update or amend it at any time, and any changes will be posted on this page.
Contact Us If you have any questions or concerns about this privacy policy or the handling of your personal information, email us at [email protected] or use our contact form.
Address Eezee Pte. Ltd., 71 Ayer Rajah Crescent #05-22/23, JTC Launchpad, Singapore 139951