[DRAFT — have counsel review]
Privacy, in plain language
What happens to the purchasing records you share with Purser. A plain-language summary, not a contract.
Your data stays yours.
- NDA first. Confidentiality agreement (NDA) before you share anything.
- Never sold. We never sell, share, or publish your data.
- No one else sees it. Not your suppliers, auditors, or tax authorities, unless the law requires it.
- Your report only. Used only to produce your report.
- Deleted. Your files are permanently deleted within 30 days of your report.
- Encrypted. In transit and at rest.
What we collect
- Your email address, your name and your company's name, so we can confirm your email and send you your report.
- The files you choose to upload, exactly as you upload them.
- A record of your acceptance of the confidentiality agreement: who, for which company, when, which version of the text, and a fingerprint (hash) of that text. We keep this record for 3 years.
- For security and abuse limits, a keyed fingerprint (HMAC) of your IP address and email address. We do not store your IP address itself.
What happens to your files
- Your files go straight into private storage. There is no public link to them.
- When you finish uploading, this website emails your files to the Purser team: smaller files as attachments, and every file as a private download link that only works for a limited time. We use them to prepare your report. No automated or AI analysis runs on this website.
- We check the type of each file when it arrives (spreadsheets, PDFs, images, saved emails and zip files only) and refuse anything else.
Who processes it for us
- Cloudflare hosts this website and stores the database and your files, encrypted at rest. It also delivers our emails (your one-time code, your receipt and the notices to our team, which carry your files).
- Our team's email providers (Google) hold the notices this website sends the Purser team about your upload: your name, email address, company name, your files' names, and the files themselves.
Cookies and tracking
No advertising or analytics trackers. We use Cloudflare Turnstile to block automated sign-ups. We use two cookies, both needed for the site to work: one keeps you signed in for up to 2 hours after you confirm your email, and one protects the forms against cross-site requests. If you choose files on the home page before confirming your email, they stay in your own browser until you upload or discard them.
Deleting your data
- Files you upload are deleted within 30 days of your report, and no later than 90 days after upload if no report is produced. The records of your submission on this website are deleted at the same time.
- If you confirm your email but never upload a file, we delete that record after 7 days.
- Cloudflare keeps point-in-time backups of our database (names, email addresses, company names and file names, never the files) for up to 30 days; deleted records leave those backups within 30 days.
- Our emails with you, and the notices about your upload in our own inboxes (including the attached files), are kept until you ask us to delete them. The download links in those notices stop working once your files are deleted here.
- Want it deleted sooner? Email hello@withpurser.com and we will delete it.
- We keep a record that you accepted our confidentiality agreement (your name, email, company, and when) for 3 years. Everything else is deleted as described above.
- We also keep a record that a deletion happened (when, why, and how many files), not what was deleted.
Questions
Write to hello@withpurser.com.