Privacy Policy

Last updated: December 25, 2024

This Privacy Policy explains how Prospecter, Inc. ("Prospecter", "we", "us") collects, uses, and protects personal data. This policy applies to visitors, leads, customers, and data processed on behalf of customers.

1. Data Controller

Prospecter, Inc.
1309 Coffeen Ave Ste, Sheridan, WY 82801, United States

Data Protection Contact: privacy@prospecter.io

2. Data We Collect

• Website visitors: IP address, device type, browser, pages visited, referral source, usage patterns
• Waitlist and leads: Email address, marketing preferences, consent records, signup metadata
• Customers: Account details, billing information, support communications, usage data
• Prospect data (processed on behalf of customers): Business contact information sourced from public and licensed databases

3. Purposes and Legal Bases

4. Automated Decision-Making and AI

Prospecter uses artificial intelligence and machine learning to:

• Score and prioritize leads based on fit and intent signals
• Generate personalized outreach messaging
• Optimize send timing and channel selection
• Analyze engagement patterns

These automated processes assist in decision-making but do not produce legal effects or similarly significant impacts on individuals. Human oversight is available through configurable approval workflows.

AI Training: Customer data is not used to train shared or public AI models. Processing occurs within isolated, customer-specific environments. Only tenant-specific fine-tuning and logging occur, as described in our Terms of Service.

5. Data Sharing

We share personal data only with:

• Service providers: Hosting (cloud infrastructure), email delivery, payment processing, analytics, and customer support platforms, bound by data processing agreements
• Legal authorities: When required by law, court order, or to protect rights and safety
• Business transfers: In connection with merger, acquisition, or sale of assets

We do not sell personal data to third parties.

6. International Transfers

Data may be transferred to and processed in the United States and other countries. For transfers from the EEA, UK, or Switzerland, we rely on:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• UK International Data Transfer Agreement or Addendum where applicable
• Swiss-approved transfer mechanisms under nFADP

Copies of relevant transfer mechanisms are available upon request.

7. Data Retention

• Website analytics: Up to 12 months
• Waitlist and leads: Up to 24 months or until deletion request
• Customer accounts: Duration of relationship + 12 months
• Billing and tax records: 7 years (legal requirement)
• System logs: 30-90 days

8. Your Rights

Depending on your location, you may have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data ("right to be forgotten")
• Restriction: Limit how we process your data
• Portability: Receive your data in a structured, machine-readable format
• Objection: Object to processing based on legitimate interests
• Withdraw consent: Where processing is based on consent

To exercise these rights, contact privacy@prospecter.io. We will respond within 30 days (or as required by applicable law).

Right to lodge a complaint: You may also lodge a complaint with your local data protection authority (e.g., in the EU, UK, or Switzerland).

9. California Privacy Rights (CCPA/CPRA)

California residents have additional rights under the California Consumer Privacy Act and California Privacy Rights Act:

• Right to Know: Categories and specific pieces of personal information collected
• Right to Delete: Request deletion of personal information
• Right to Correct: Correct inaccurate personal information
• Right to Opt-Out: Opt out of sale or sharing of personal information
• Non-Discrimination: Equal service regardless of privacy choices

We do not sell personal information. To submit a request, email privacy@prospecter.io with "California Privacy Request" in the subject line.

10. Swiss Data Protection (nFADP)

For individuals in Switzerland, we comply with the Swiss Federal Act on Data Protection (nFADP). Swiss residents have rights similar to those under GDPR and may contact the Federal Data Protection and Information Commissioner (FDPIC) with complaints.

11. Cookies and Tracking

We use cookies and similar technologies for:

• Essential cookies: Required for site functionality
• Analytics cookies: To understand usage patterns (with consent where required)
• Marketing cookies: To measure campaign effectiveness (with consent)

You can manage cookie preferences through our cookie consent banner or your browser settings. For visitors in the EU/EEA, non-essential cookies are blocked until consent is provided.

12. Security

We implement appropriate technical and organizational measures to protect personal data, including:

• Encryption in transit (TLS) and at rest
• Access controls and authentication
• Regular security assessments
• Incident response procedures

13. Children

Our Service is not directed to individuals under 18. We do not knowingly collect personal data from children.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or prominent notice on our website. The "Last updated" date at the top indicates the most recent revision.

15. Contact

For privacy inquiries or to exercise your rights:

Email: privacy@prospecter.io
Mail: Prospecter, Inc., 1309 Coffeen Ave Ste, Sheridan, WY 82801, United States