Privacy Policy

Pocular LLC is a United States company that provides a B2B platform for structuring and running software Proof of Concept (POC) evaluations between buyer organizations and vendors.

For privacy questions, contact us at support@pocular.com.

This policy covers our marketing website and the authenticated Pocular application, including workspaces, POC projects, buyer and vendor collaboration, invites, billing for Project Credits, transactional email, in-product feedback, and related support.

If you use Pocular on behalf of an organization, your organization’s administrator may control account access and content within that workspace. In those cases, we process personal information to provide the service to your organization.

Depending on how you interact with Pocular, we may collect:

• Account and profile information — such as email address, name or display name, and authentication identifiers.
• Workspace and membership data — organization/workspace association, roles, and invite status.
• Project and evaluation content — POC project details, use cases and requirements, scores, comments, evidence, vendor responses, and related collaboration content you or your teammates enter.
• Billing and purchase metadata — billing email, checkout and entitlement metadata (for example workspace or project identifiers). Payment card details are processed by Stripe; we do not store full card numbers.
• Communications — invite and handoff emails, support correspondence, and product feedback you submit.
• Technical and usage data — IP address, user agent, device/browser metadata, timestamps, and similar logs generated when you use the site or app (including via our hosting provider).
• AI feature usage metadata — event types, counts, and non-content metadata such as hashed file names and token estimates for fair-use and operational accounting.

We use personal information to:

• Provide, operate, secure, and improve the Pocular service.
• Authenticate users and manage workspace membership and access controls.
• Process Project Credit purchases and maintain entitlements.
• Send transactional email (invites, handoffs, account-related notices).
• Power optional AI features such as Smart Import extraction and AI-assisted reports.
• Respond to support requests and product feedback.
• Monitor reliability, prevent abuse, and enforce our terms and security policies.
• Create de-identified, anonymized, and/or aggregated Insights from evaluation data (including use cases, priorities, industry or segment context, business-impact fields, and vendor capability patterns) for product development, benchmarking, recommendation features, and other commercial purposes described in our Terms of Service.
• Comply with applicable law and respond to lawful requests.

Pocular may derive market and product Insights from evaluation activity in the Service—for example, which use cases are commonly requested, which vendor or solution patterns address those use cases, and what business impacts customers associate with them. We design these Insights so they do not reasonably identify you, your organization, or any individual.

We may use Aggregated Insights to build and improve recommendation or matching features (for example, based on use case, priority, industry, and business-impact patterns), and we may license, sell, or otherwise monetize Aggregated Insights that do not disclose personal information or identifiable confidential customer content. Ownership and additional terms are described in our Terms of Service.

We do not sell personal information. Adequately de-identified Aggregated Insights are not treated as personal information under this policy, except where applicable law requires otherwise.

As a U.S. company serving business customers, we process personal information as needed to provide the contracted service, operate our business, and meet legal obligations. Where consent is required for a specific optional feature or communication, we will ask for it.

If you are a resident of California or another U.S. state with a comprehensive privacy law, you may have rights to know, access, correct, or delete certain personal information, and to opt out of “sale” or “sharing” for cross-context behavioral advertising. Pocular does not sell personal information and does not share personal information for cross-context behavioral advertising as those terms are commonly defined under U.S. state privacy laws.

To exercise applicable rights, email support@pocular.com. We may need to verify your request and, where your organization controls the account, may redirect you to your workspace administrator.

We share personal information with service providers (“subprocessors”) that help us run Pocular. They process data only as needed to provide hosting, authentication, storage, payments, email, background jobs, optional AI features, and related infrastructure. We do not sell personal information.

Categories of subprocessors typically include: cloud application hosting; database, authentication, and file storage; payment processing; transactional email; workflow/job orchestration; large language model providers for optional AI features; and optional rate-limiting infrastructure.

We maintain a current named list of subprocessors—including purpose, data categories, and location notes—on a separate page so we can update it with notice when vendors change, without rewriting this entire Privacy Policy.

We may also disclose information if required by law, to protect rights and safety, or in connection with a corporate transaction (such as a merger or acquisition), subject to appropriate safeguards.

• Enterprise customers: if your DPA requires advance notice of subprocessor changes, follow that agreement’s notice process. Otherwise, material updates are posted on the Subprocessors page with a revised “Last updated” date.

View current subprocessors

When you use Smart Import, uploaded files are stored temporarily for processing. For Word/PDF extraction or field inference, document text may be sent to the configured LLM provider. Excel imports typically use a deterministic parser unless an optional LLM enhancement is enabled for your deployment.

When you generate AI reports, aggregated project statistics and prompts—and, depending on report type, requirement bodies—may be sent to the LLM provider.

Our usage ledger stores event types, counts, and metadata such as hashed file names and token estimates—not raw file contents.

We retain personal information for as long as needed to provide the service, meet legal and accounting requirements, and resolve disputes.

• Account and workspace data — generally retained while your account and workspace remain active, and for a reasonable period afterward as needed for backups, fraud prevention, or legal compliance.
• Import jobs — uploaded files and extraction artifacts are purged according to configured purge windows; committed imports remove associated storage objects on commit.
• Completed free-tier projects — may be purged after a retention window via scheduled cleanup jobs.

We use administrative, technical, and organizational measures designed to protect personal information, including encrypted transport (HTTPS), access controls, and database row-level security so that customer organizations—and buyer versus vendor parties on a project—cannot access each other’s private or competitive data beyond what the product intentionally shares.

No method of transmission or storage is completely secure. If you believe your account has been compromised, contact us immediately at support@pocular.com.

Pocular uses essential cookies and similar technologies required for authentication, session management, and security. We do not use non-essential advertising cookies as part of the core product experience described in this policy.

You can control cookies through your browser settings; disabling essential cookies may prevent you from signing in or using the application.

Depending on your location and applicable law, you may request access to, correction of, or deletion of personal information we hold about you, or ask questions about our processing.

Email support@pocular.com. If your organization administers your workspace, some requests (such as content deletion within a project) may need to be handled by your administrator or through the product’s collaboration and access controls.

Pocular is a B2B service directed at business professionals. It is not directed to children under 16, and we do not knowingly collect personal information from children. If you believe a child has provided us personal information, contact support@pocular.com and we will take appropriate steps to delete it.

Pocular LLC is based in the United States. If you access the service from outside the U.S., your information may be processed in the United States and in other countries where our subprocessors operate. Those locations may have data-protection laws different from those in your country.

We may update this Privacy Policy to reflect product, legal, or operational changes. When we do, we will revise the “Last updated” date on this page. Continued use of the service after an update constitutes acceptance of the revised policy to the extent permitted by law.

Pocular LLC

United States

Email: support@pocular.com