Privacy Policy
How DirectPX collects, uses, and protects your information.
Account & Authentication
We collect your work email address for OTP-based access to the web report portal. No passwords are stored. OTP codes are hashed and expire after a configurable session window.
Procore Data
DPX-Pro accesses your Procore account using OAuth 2.0 tokens authorized by you or your organization. We read Direct Cost records, project metadata, vendor information, and file attachments to generate reports. We do not write to or modify any Procore data.
Device & Usage
The iOS app does not collect analytics or advertising identifiers. No crash reporting services are used. Basic request logs (timestamp, endpoint, HTTP status) are retained on your organization's server for up to 30 days for debugging purposes.
What We Do Not Collect
- Social security numbers, tax IDs, or government-issued identifiers
- Credit card or banking information
- Location data or device sensors
- Contacts, photos, or any data outside the Procore scope you authorize
Service Operation
Data accessed from Procore is used exclusively to generate reports, PDFs, and CSV exports requested by you or your team. Report files are stored temporarily on your organization's server and delivered via secure email link. Links expire after a configurable period (default: 60 minutes).
No Third-Party Sharing
We do not sell, rent, or share your data with any third party for marketing or advertising purposes. Data is not used to train machine learning models.
Microsoft Graph
If your organization uses Microsoft 365, outbound report emails are sent via the Microsoft Graph API using client credentials authorized by your organization's Azure AD tenant. Message content is not stored by DirectPX after sending.
Token Storage
Procore OAuth tokens are stored in a restricted environment file (~/.directpx_env) with permissions limited to the application user. Tokens are never exposed in URLs, logs, or client-facing responses.
Transport Security
All communication between the app, the API server, Procore, and Microsoft is over TLS 1.2 or higher. API keys are transmitted exclusively via HTTP headers — never as URL query parameters.
Session Security
Web report sessions use httponly, secure, SameSite=Lax cookies. OTP codes are rate-limited and lock out after 8 failed attempts. Sessions expire automatically.
To request deletion of your data, ask questions about this policy, or report a concern, contact us at privacy@directpx.tech.
This policy applies to the DPX-Pro iOS app, the DirectPX Outlook Add-in, and the DPX Web Report portal.
Terms of Use
The rules and limits that apply when using DPX-Pro Suite.
By accessing or using any component of DPX-Pro Suite — including the iOS app, Outlook Add-in, or Web Report portal — you agree to these Terms of Use. If you are using the service on behalf of an organization, you represent that you have authority to bind that organization.
DPX-Pro Suite is licensed for use by construction companies and their authorized staff to access, view, and export financial data from Procore for internal reporting and accounting purposes.
You may:
- Access and export your organization's Direct Cost data from Procore
- Generate PDF and CSV reports for internal use and record keeping
- Use the Outlook Add-in to attach stamped documents to Direct Cost entries
- Share reports internally within your organization
You may not:
- Reverse engineer, decompile, or attempt to extract source code
- Use the service to access Procore data you are not authorized to view
- Resell, sublicense, or redistribute the service or its outputs commercially
- Attempt to circumvent authentication, rate limits, or security controls
- Use the service in any way that violates applicable law
Not Affiliated
DirectPX Technologies, LLC is not affiliated with or endorsed by Procore Technologies, Microsoft Corporation, American Express, Emburse, Inc., or Apple Inc. Product names are trademarks of their respective owners.
Third-Party Availability
DPX-Pro integrates with Procore, Microsoft Graph, Emburse Spend, and other third-party services. Availability, behavior, and API access depend on those platforms and your organization's configuration. DirectPX is not responsible for third-party service outages or changes.
No Warranties
The service is provided "as is" without warranties of any kind, express or implied, including fitness for a particular purpose or uninterrupted availability.
Limitation of Liability
To the maximum extent permitted by law, DirectPX Technologies, LLC will not be liable for indirect, incidental, special, consequential, or punitive damages arising from use of the service.
Your Responsibility
You are responsible for verifying that reports and exports are accurate and appropriate for your accounting, tax, and compliance requirements. DPX-Pro is a reporting tool, not a financial system of record.
© 2026 DirectPX Technologies, LLC. All rights reserved. The DPX-Pro software, branding, and documentation are proprietary. No license to copy, modify, or redistribute is granted except as expressly stated in a written agreement.
We may update these terms from time to time. Continued use after changes constitutes acceptance. These terms are governed by the laws of the State of Texas, without regard to conflict of law principles.
Questions? Contact legal@directpx.tech
Support
Help resources for DPX-Pro Suite across all three platforms.
Getting Started
Download DPX-Pro from the App Store and enter your company email address. An access code will be sent to your inbox — no password required. Your email domain must match your organization's authorized domain. Your organization's API server URL is set during initial configuration.
Common Issues
- Can't connect to Procore — Check that your company email domain is authorized. If the connection fails, contact your administrator to verify the server configuration.
- Attachment not stamping — Ensure the photo is taken in-app or selected from Photos. HEIC files are supported. Files larger than 20MB may be rejected by Procore.
- Submission fails — Verify your Procore project permissions include Direct Costs create/edit access.
- App not loading — Check that your organization's API server is reachable and the API key in app settings matches the server configuration.
Updating
Updates are distributed via TestFlight or the App Store. Enable automatic updates in iOS Settings to stay current.
Installation
The add-in is deployed via your organization's Microsoft 365 admin center or as a sideload manifest. Contact your IT administrator if you do not see DPX-Pro in your Outlook ribbon.
Common Issues
- Add-in not loading — Clear your browser cache inside Outlook Web, or restart the Outlook desktop client. Ensure the manifest URL is reachable from your network.
- Authentication fails — The add-in uses the same Procore OAuth tokens as the iOS app. If tokens have expired, an admin must re-authorize from the server.
- Can't find a project or DC — Confirm your Procore role has access to the project's Direct Costs module. Company-level permissions may restrict visibility.
- PDF stamp not appearing — Only PDF and common image formats (JPEG, PNG, HEIC, TIFF) are supported for stamping.
Supported Clients
Outlook on the web (OWA), Outlook for Windows (Microsoft 365), and Outlook for Mac. Outlook for iOS/Android is not supported.
Access
Enter your company email address (the same one registered in Procore). An access code will be sent to your inbox — no password required. Codes expire after 10 minutes. Sessions remain active for a configurable period (default: 8 hours).
Common Issues
- No code received — Check your spam folder. The sender will be your organization's configured Microsoft 365 account. Add it to your safe senders list.
- Preview returns no results — Verify the date range and that at least one project is selected. Some projects may be restricted by Procore permissions.
- PDF not emailed — Reports over 20 rows are queued and emailed as a download link. Check your inbox within 5–10 minutes. Links expire after 60 minutes.
- CSV downloads immediately — CSV exports are always generated live regardless of row count.
- Report link expired — Re-run the preview and request a new PDF export. Download links are single-use and time-limited.
Supported Browsers
Chrome, Safari, Edge, and Firefox (current versions). The portal is not optimized for mobile browsers.
System Status
Live checks run when this page loads. Last checked: —
For outage reports or incidents contact support@directpx.tech