purser.

[DRAFT — have counsel review]

Confidentiality

Before you can upload anything, you accept a confidentiality agreement on behalf of your company and confirm your email address with a one-time code. We record who accepted it, for which company, when, which version of the text, and a fingerprint (SHA-256 hash) of that text, and keep that record for 3 years.

In short

  • We use your records only to produce your report.
  • We never sell, share, or publish them. They are stored with our hosting provider (Cloudflare) and sent to the Purser team's email (Google), and seen only by the Purser team.
  • We never give them to your suppliers, auditors, or tax authorities, unless the law requires it, and then we tell you first where the law allows.
  • Your files are permanently deleted within 30 days of your report, or sooner if you ask.

The agreement

Mutual confidentiality agreement (click-through) · version purser-mutual-nda-1

1. Purpose. The organisation you represent ("Customer") will share purchasing records, supplier documents and related business information ("Confidential Information") with the Purser service ("Purser") so that Purser can analyse it and recommend purchasing decisions. Purser will share its analyses, methods and pricing information with Customer. Each party uses the other's Confidential Information only for this purpose. 2. Protection. Each party protects the other's Confidential Information with at least reasonable care, limits access to people who need it for the purpose, and does not disclose it to third parties except to service providers bound by equivalent obligations. Customer data is kept separate per organisation and is never used to inform another customer's analysis unless Customer separately opts in to pooled benchmarks. 3. Exclusions. Information that is public through no fault of the recipient, already known to it, independently developed, or lawfully received from a third party without restriction is not Confidential Information. Disclosure required by law is permitted after prompt notice where lawful. 4. Return and deletion. On request, or when the relationship ends, Purser deletes Customer's data (database rows, stored files and derived indexes) within the period stated in the service agreement. 5. Term. These obligations last two years from the last disclosure; trade secrets stay protected while they remain trade secrets. No licence is granted except as needed for the purpose. By typing your name and accepting, you confirm you may accept this agreement for the organisation.