DirectPX
DPX-Pro Suite
Effective date: January 1, 2026  ·  Last updated: March 1, 2026
🔒
What We Collect
Only what is needed to operate the service.

Account & Authentication

We collect your work email address for OTP-based access to the web report portal. No passwords are stored. OTP codes are hashed and expire after a configurable session window.

Procore Data

DPX-Pro accesses your Procore account using OAuth 2.0 tokens authorized by you or your organization. We read Direct Cost records, project metadata, vendor information, and file attachments to generate reports. We do not write to or modify any Procore data.

Device & Usage

The iOS app does not collect analytics or advertising identifiers. No crash reporting services are used. Basic request logs (timestamp, endpoint, HTTP status) are retained on your organization's server for up to 30 days for debugging purposes.

What We Do Not Collect

  • Social security numbers, tax IDs, or government-issued identifiers
  • Credit card or banking information
  • Location data or device sensors
  • Contacts, photos, or any data outside the Procore scope you authorize
📤
How We Use Your Data

Service Operation

Data accessed from Procore is used exclusively to generate reports, PDFs, and CSV exports requested by you or your team. Report files are stored temporarily on your organization's server and delivered via secure email link. Links expire after a configurable period (default: 60 minutes).

No Third-Party Sharing

We do not sell, rent, or share your data with any third party for marketing or advertising purposes. Data is not used to train machine learning models.

Microsoft Graph

If your organization uses Microsoft 365, outbound report emails are sent via the Microsoft Graph API using client credentials authorized by your organization's Azure AD tenant. Message content is not stored by DirectPX after sending.

🛡️
Security

Token Storage

Procore OAuth tokens are stored in a restricted environment file (~/.directpx_env) with permissions limited to the application user. Tokens are never exposed in URLs, logs, or client-facing responses.

Transport Security

All communication between the app, the API server, Procore, and Microsoft is over TLS 1.2 or higher. API keys are transmitted exclusively via HTTP headers — never as URL query parameters.

Session Security

Web report sessions use httponly, secure, SameSite=Lax cookies. OTP codes are rate-limited and lock out after 8 failed attempts. Sessions expire automatically.

📬
Contact & Rights

To request deletion of your data, ask questions about this policy, or report a concern, contact us at privacy@directpx.tech.

This policy applies to the DPX-Pro iOS app, the DirectPX Outlook Add-in, and the DPX Web Report portal.

Effective date: January 1, 2026  ·  Last updated: March 1, 2026
📋
Acceptance

By accessing or using any component of DPX-Pro Suite — including the iOS app, Outlook Add-in, or Web Report portal — you agree to these Terms of Use. If you are using the service on behalf of an organization, you represent that you have authority to bind that organization.

Permitted Use

DPX-Pro Suite is licensed for use by construction companies and their authorized staff to access, view, and export financial data from Procore for internal reporting and accounting purposes.

You may:

  • Access and export your organization's Direct Cost data from Procore
  • Generate PDF and CSV reports for internal use and record keeping
  • Use the Outlook Add-in to attach stamped documents to Direct Cost entries
  • Share reports internally within your organization

You may not:

  • Reverse engineer, decompile, or attempt to extract source code
  • Use the service to access Procore data you are not authorized to view
  • Resell, sublicense, or redistribute the service or its outputs commercially
  • Attempt to circumvent authentication, rate limits, or security controls
  • Use the service in any way that violates applicable law
⚠️
Disclaimers

Not Affiliated

DirectPX Technologies, LLC is not affiliated with or endorsed by Procore Technologies, Microsoft Corporation, American Express, Emburse, Inc., or Apple Inc. Product names are trademarks of their respective owners.

Third-Party Availability

DPX-Pro integrates with Procore, Microsoft Graph, Emburse Spend, and other third-party services. Availability, behavior, and API access depend on those platforms and your organization's configuration. DirectPX is not responsible for third-party service outages or changes.

No Warranties

The service is provided "as is" without warranties of any kind, express or implied, including fitness for a particular purpose or uninterrupted availability.

Limitation of Liability

To the maximum extent permitted by law, DirectPX Technologies, LLC will not be liable for indirect, incidental, special, consequential, or punitive damages arising from use of the service.

Your Responsibility

You are responsible for verifying that reports and exports are accurate and appropriate for your accounting, tax, and compliance requirements. DPX-Pro is a reporting tool, not a financial system of record.

©
Intellectual Property

© 2026 DirectPX Technologies, LLC. All rights reserved. The DPX-Pro software, branding, and documentation are proprietary. No license to copy, modify, or redistribute is granted except as expressly stated in a written agreement.

📝
Changes & Governing Law

We may update these terms from time to time. Continued use after changes constitutes acceptance. These terms are governed by the laws of the State of Texas, without regard to conflict of law principles.

Questions? Contact legal@directpx.tech

📬
Contact Support
We typically respond within one business day.
General Support
App issues, access problems, report errors
Privacy & Data
Data requests, policy questions
Legal
Terms, agreements, licensing
Business Hours
Mon–Fri, 8am–6pm ET
Excluding US federal holidays
📱
iOS App — DPX-Pro
Direct Cost capture, stamping, and Procore submission on iPhone.

Getting Started

Download DPX-Pro from the App Store and enter your company email address. An access code will be sent to your inbox — no password required. Your email domain must match your organization's authorized domain. Your organization's API server URL is set during initial configuration.

Common Issues

  • Can't connect to Procore — Check that your company email domain is authorized. If the connection fails, contact your administrator to verify the server configuration.
  • Attachment not stamping — Ensure the photo is taken in-app or selected from Photos. HEIC files are supported. Files larger than 20MB may be rejected by Procore.
  • Submission fails — Verify your Procore project permissions include Direct Costs create/edit access.
  • App not loading — Check that your organization's API server is reachable and the API key in app settings matches the server configuration.

Updating

Updates are distributed via TestFlight or the App Store. Enable automatic updates in iOS Settings to stay current.

📧
Outlook Add-in
Attach, stamp, and submit receipts directly from Outlook.

Installation

The add-in is deployed via your organization's Microsoft 365 admin center or as a sideload manifest. Contact your IT administrator if you do not see DPX-Pro in your Outlook ribbon.

Common Issues

  • Add-in not loading — Clear your browser cache inside Outlook Web, or restart the Outlook desktop client. Ensure the manifest URL is reachable from your network.
  • Authentication fails — The add-in uses the same Procore OAuth tokens as the iOS app. If tokens have expired, an admin must re-authorize from the server.
  • Can't find a project or DC — Confirm your Procore role has access to the project's Direct Costs module. Company-level permissions may restrict visibility.
  • PDF stamp not appearing — Only PDF and common image formats (JPEG, PNG, HEIC, TIFF) are supported for stamping.

Supported Clients

Outlook on the web (OWA), Outlook for Windows (Microsoft 365), and Outlook for Mac. Outlook for iOS/Android is not supported.

🌐
Web Report Portal
Filter, preview, and export Direct Cost reports as PDF or CSV.

Access

Enter your company email address (the same one registered in Procore). An access code will be sent to your inbox — no password required. Codes expire after 10 minutes. Sessions remain active for a configurable period (default: 8 hours).

Common Issues

  • No code received — Check your spam folder. The sender will be your organization's configured Microsoft 365 account. Add it to your safe senders list.
  • Preview returns no results — Verify the date range and that at least one project is selected. Some projects may be restricted by Procore permissions.
  • PDF not emailed — Reports over 20 rows are queued and emailed as a download link. Check your inbox within 5–10 minutes. Links expire after 60 minutes.
  • CSV downloads immediately — CSV exports are always generated live regardless of row count.
  • Report link expired — Re-run the preview and request a new PDF export. Download links are single-use and time-limited.

Supported Browsers

Chrome, Safari, Edge, and Firefox (current versions). The portal is not optimized for mobile browsers.

🔗
Quick Links

System Status

Live checks run when this page loads. Last checked:

DPX API
api.directpx.tech
Checking…
Procore API
api.procore.com
Checking…

For outage reports or incidents contact support@directpx.tech