Privacy
Privacy Policy
Last updated: June 9, 2026
1. Scope
This policy describes how PharmaGlobal AI expects to handle information across approval-based B2B sourcing workflows, private deal rooms, document review, messaging, and related platform operations.
2. Information we collect
We may collect B2B account data, organization profiles, user roles, contact details, sourcing requirements, tender files, supplier capability information, offer data, transaction workflow data, document uploads, messages, support requests, audit logs, device and usage data, and security events.
3. Deal and document data
The platform is designed to handle confidential sourcing requests, supplier documents, buyer-visible verification status, payment milestone records, shipment workflow updates, internal notes, and access-controlled deal room activity. Raw document access may be restricted by role, organization, milestone, or explicit authorization.
4. How we use information
We use information to operate approval-based access, structure sourcing requests, coordinate supplier and partner workflows, manage private deal rooms, support document review, maintain audit history, provide messaging, improve platform reliability, prevent misuse, and communicate about account or workflow activity.
5. AI processing
AI-assisted features may help structure RFQs, parse tender files, summarize documents, compare offers, identify missing workflow items, and draft follow-ups. AI outputs are workflow aids and do not replace legal, regulatory, sanctions, customs, payment, import/export, or professional compliance review.
6. Service providers
We may use infrastructure, database, authentication, analytics, email, file storage, payment, logistics, AI, and security providers to operate the platform. Providers should be evaluated for confidentiality, data handling, retention, and security obligations before production use.
7. Retention
We retain information for as long as needed to operate the platform, maintain deal history, support auditability, resolve disputes, comply with applicable obligations, and protect the service. Retention windows should be finalized with counsel and configured by data category.
8. Security
We use administrative, technical, and organizational safeguards designed to protect account, sourcing, document, and transaction workflow data. No internet service can guarantee absolute security, and users should avoid uploading data they are not authorized to share.
9. User responsibilities
Users are responsible for ensuring they have authority to submit requirements, upload documents, disclose organization information, communicate with counterparties, and participate in sourcing or transaction workflows.
10. Contact
Questions about privacy or data handling can be sent to [email protected].