Privacy Policy — Procurement Directory & Procurement Pocket

1. What the Directory is

The Directory helps industrial buyers find and evaluate steel and piping suppliers in China, India and Italy. Procurement Pocket offers free tools: shortlists, supplier comparison, RFQ readiness, vendor red-flag and PO delivery-risk checks, and an expediting-visit checklist. You can browse and search without an account. Saving shortlists, checks and visit summaries requires an account.

2. Your account

When you create an account we process:

• your email address and an account identifier;
• your password — held only by our sign-in provider in hashed form; we never see or store it;
• sign-in and security information such as account creation and last sign-in times and whether your email is verified;
• optional details you choose to give (profession, industry, country) and your marketing-email choice, with when and where you made it.

We send an email to verify your address and, if you ask, a password-reset email. Sign-in messages never reveal whether an email address has an account.

3. Information you save

• Shortlists and the suppliers on them, with your own notes and status.
• Saved check results: the type of check, a short summary of the inputs and the result. The vendor red-flag check analyses quote text in your browser; the text, files, supplier names and prices are never sent to us or stored.
• Visit summaries you write (supplier name, PO number, visit date, findings and next actions).

Supplier comparisons are not stored. Please do not put confidential or third-party personal information in notes or visit summaries unless you are entitled to. You can download your saved data from your account page.

4. Claims, company submissions and corrections

• To claim a listing you give your name, role, business email, telephone, the company website and an optional note. We use them to check that you can represent the company.
• To suggest a new company you give company details and confirm you are authorised.
• To report a correction you describe the problem and may give your name and email so we can follow up.

These do not require an account and are not linked to one.

5. Information about listed companies

Listings describe companies. Their content is taken from each company's own official website and public company material, or from the company's own claim, submission or correction — never from other directories or marketplaces. We publish company contact details only (general company email, office telephone, website) and do not publish named individuals' personal or mobile contact details. Listings help buyers find suppliers; they are not endorsements and can become outdated. A company — or anyone reachable through a listing — can ask us to correct or remove information using the "Report a correction" link on the listing or by writing to privacy@aisavestime.com.

6. Optional analytics

Analytics are off unless you choose "Allow", and you can withdraw at any time in your account. When allowed, we record anonymous counts of a fixed set of actions (for example "a search was made" or "a supplier profile was viewed") with only non-personal details such as a category or a listing. They never include your account identifier, email, shortlist identifiers, notes or anything you type. No advertising or third-party trackers are used.

7. Cookies and browser storage

The Directory does not set cookies. It stores in your browser:

• your sign-in session (browser IndexedDB), needed to keep you signed in;
• your analytics choice (local storage);
• while you are signed in, a local copy of your account email, role and marketing choice, removed when you sign out or delete your account.

8. Security and operational logs

Our hosting provider records technical request information (such as IP address, time, page requested, browser type and errors) for security, abuse prevention and troubleshooting. These logs are separate from optional analytics and are kept for about 30 days.

9. Service providers and international transfers

The Directory runs on Google infrastructure: Firebase Authentication (sign-in and account emails), Cloud Firestore (database, stored in the Netherlands, europe-west4), Firebase App Hosting / Google Cloud Run (hosting) and Google Cloud Logging. Google processes this information on our behalf under its data-processing terms. Firebase Authentication is a global service, so sign-in data may be processed outside the European Union and the United Arab Emirates. No other company receives Directory user data.

10. Deleting your account

You can delete your account at any time from your account page. You will be asked to confirm your password. Deletion starts immediately and removes your profile, shortlists, saved checks and visit summaries, removes your name and email from correction requests sent from your account email, and finally deletes your sign-in account. If a step fails, the request is kept and completed by an administrator. We keep a short record that the request was handled — its times and outcome — which does not contain your email address or account identifier. Deleted information may remain in encrypted backups until they expire (normally within a few weeks). Claims and company submissions are not linked to accounts; to have personal details in them removed, write to privacy@aisavestime.com.

11. How long we keep information

• Account content: while your account exists.
• Account-deletion record (no email or account identifier): up to 3 years.
• Security and operational logs: about 30 days.
• Anonymous analytics: up to 24 months.
• Claims, submissions and correction requests: while relevant to the listing and its history; personal details removed on request.
• Backups: up to about 8 weeks.

12. Your rights

You can see, download and delete your own data in your account, and change your analytics and marketing choices at any time. Depending on where you live you may also have rights to access, correct, restrict or object to processing and to complain to a data-protection authority; see the main AI Saves Time Privacy Policy. To make a request, write to privacy@aisavestime.com.

13. Changes

We may update this policy. The date at the top shows the latest version.