1. Who is responsible for your personal data?
PurveO Technologies Private Limited, a company incorporated in India, decides why and how your personal data is processed through this website.
Under India’s Digital Personal Data Protection Act, 2023, that makes PurveO the Data Fiduciary. Under the UAE and Saudi Arabian personal data protection laws, and under the EU or UK GDPR where they apply, PurveO is the controller. In this policy, “PurveO”, “we” and “us” mean PurveO Technologies Private Limited.
2. What does this policy cover?
This policy covers the personal data collected when you visit www.purveo.ai, in English or Arabic, and when you request a demo.
It does not cover the data our customers put into the PurveO platform, such as purchase requests, purchase orders, invoices and supplier records. PurveO processes that data on the customer’s behalf and under the customer’s written agreement with us, and the customer’s own privacy notice applies to it.
3. What personal data does PurveO collect?
PurveO collects the details you enter in the demo-request form, the technical data every website receives, and data about how you use the website.
| Data | What it includes | Where it comes from |
|---|---|---|
| Contact details | Your name, work email address, mobile number and country dialling code. | You, through the demo-request form. |
| Your enquiry | The product you select and any message you choose to write. | You, through the demo-request form. |
| Page language | Whether you sent the form from the English or the Arabic website. | Recorded automatically with your request. |
| Network data | Your IP address, browser type, the page requested and the time of the request. | Sent automatically by your browser with every request. |
| Usage data | The pages you view, how you reached the website, your device and browser, your approximate location based on your IP address, and whether you sent the demo-request form and for which product. Never what you typed into the form. | Collected by Google Analytics when a page loads. |
Please do not include sensitive personal data, such as health, financial account, government identity or biometric information, in the message field. We do not need it to arrange a demo.
We do not collect payment details, and we do not buy or receive personal data about you from other companies.
4. How does PurveO use your personal data?
PurveO uses your personal data to respond to your demo request, to keep the website secure, and to understand how the website is used so we can improve it.
- To contact you about your request, arrange and run your demo, and answer your questions about it.
- To keep the website secure, for example by counting the requests sent from one IP address so automated form abuse can be stopped.
- To measure how the website is used, such as which pages are read and how visitors find us, so we can improve it.
- To comply with a legal obligation, or to establish, exercise or defend a legal claim.
On what basis does PurveO process it?
You give us your details voluntarily, for the specific purpose of requesting a demo, and we rely on that and on your consent to respond. We process network data to keep the website secure and working, and usage data to understand and improve it; these are legitimate uses and, where the GDPR applies, our legitimate interests. You can withdraw your consent at any time. Withdrawing it does not affect anything we did before you withdrew it.
Does PurveO make automated decisions about you?
No. No one who visits www.purveo.ai or requests a demo is made the subject of a decision taken solely by automated means that affects them. PICO, the AI agent in the PurveO platform, works on customers’ procurement data inside the platform and plays no part in handling demo requests.
We do not add you to marketing emails or newsletters, and we do not use the details you give us in the form for advertising.
7. Is personal data transferred outside your country?
Yes, it can be. Your demo request is delivered through a provider based in the United States, analytics data is processed by Google in the United States and other countries, and our team may read your request from India or from the other countries where it works.
When we transfer personal data across borders, we transfer it only where the applicable law allows, and we rely on the contractual and security safeguards that law requires, including standard contractual clauses where the GDPR applies.
8. How long does PurveO keep personal data?
PurveO keeps personal data only for as long as it needs it for the purpose it was collected for, and then deletes it.
| Data | How long | Why |
|---|---|---|
| Demo requests | Up to 24 months after our last contact with you, unless you become a customer. | To follow up on your request and keep a record of it. |
| IP addresses used against form abuse | Held in server memory only. Never written to disk or to a database, and cleared when the server restarts. | To count requests over a 10-minute window. |
| Server logs | For as long as our hosting provider keeps its standard access logs. | Security, reliability and troubleshooting. |
| Analytics data | For the retention period set in our Google Analytics account, after which Google deletes it. | To compare how the website is used over time. |
| Records of privacy requests | As long as needed to show how we handled a request, and no longer than the law requires. | To demonstrate that we complied. |
If you become a customer, your data is kept under the terms of your agreement with PurveO. We keep personal data for longer only where the law requires us to.
9. How does PurveO protect personal data?
PurveO protects personal data with technical and organisational measures that are appropriate to the risk.
- Every page and every form submission is encrypted in transit over HTTPS.
- The demo-request form is validated on our server, which rejects automated and malformed submissions.
- Your request is not stored in a website database. It is delivered by email to the team that handles it.
- Access to demo requests is limited to the people at PurveO who need it to respond to you.
No method of transmitting or storing data is completely secure. If a personal data breach affects you, we will tell you and the relevant authorities as the law requires.
10. What rights do you have over your personal data?
You can ask PurveO to tell you what personal data it holds about you, and to correct, complete, update or erase it.
- Access: find out what personal data we hold about you, and how we use and share it.
- Correction: have inaccurate or incomplete personal data corrected or completed.
- Erasure: have your personal data deleted when we no longer need it or you withdraw your consent.
- Withdrawal of consent: at any time, and as easily as you gave it.
- Objection and restriction: ask us to stop or limit a particular use, where the law gives you that right.
- Portability: receive your personal data in a structured, commonly used format, where the law gives you that right.
- Complaint: raise a grievance with us, and take it to a data protection authority.
If you are in India
The Digital Personal Data Protection Act, 2023 gives you the right to information about your personal data, to have it corrected, completed, updated or erased, to have your grievances addressed, and to nominate another person to exercise your rights if you die or become incapable. If you are not satisfied with how we resolve a grievance, you can complain to the Data Protection Board of India.
If you are in the UAE or Saudi Arabia
The UAE Personal Data Protection Law and the Saudi Personal Data Protection Law give you rights that include access to, correction of and erasure of your personal data. You can complain to the UAE Data Office or, in Saudi Arabia, to the Saudi Data and Artificial Intelligence Authority (SDAIA).
If you are in the European Economic Area or the United Kingdom
The GDPR and the UK GDPR give you all of the rights listed above, including portability, objection and restriction. You can complain to the data protection authority where you live or work, which in the United Kingdom is the Information Commissioner’s Office.
11. How do you exercise your rights or contact PurveO about privacy?
Contact PurveO using the details below, tell us which right you want to exercise, and we will respond within 30 days.
We may need to confirm your identity before acting on a request, and we will not charge you for making one. If you are acting for someone else, we will ask for proof that you are authorised to do so.
- Company
- PurveO Technologies Private Limited
- Contact form
- Send us a message through our contact form
12. Does PurveO collect personal data from children?
No. www.purveo.ai is a business website for procurement and finance teams and is not directed at anyone under 18.
We do not knowingly collect personal data from children. If you believe a child has sent us their details, contact us and we will delete them.
13. How will PurveO tell you about changes to this policy?
When PurveO changes this policy, we update the date at the top of this page.
If a change materially affects how we use personal data you have already given us, we will tell you directly, using the contact details you gave us, before the change takes effect.
14. Which version of this policy applies?
This policy is published in English and in Arabic. If the two versions differ, the English version prevails.