Privacy Policy

Last updated: October 17, 2026

This Privacy Policy explains how greatestdesigns LLC, doing business as Prospecter ("Prospecter", "we", "us"), collects, uses, and protects personal data. This policy applies to visitors, leads, customers, and data processed on behalf of customers.

1. Data Controller

greatestdesigns LLC (operating Prospecter)
1309 Coffeen Avenue STE 1200, Sheridan, WY 82801, United States

Data Protection Contact: legal@prospecter.io

2. Data We Collect

• Website visitors: IP address, device type, browser, pages visited, referral source, usage patterns
• Customers: Account details, billing information, support communications, usage data
• Lead pack orders: Your name, work email and company, the pack you order, and your invoices and payments. Card details are entered on Stripe's checkout page and stored by Stripe, never by us; for packs paid in two parts, Stripe keeps your card on file to charge the balance.
• Onboarding documents: The materials you share to describe how you sell, such as your ideal customer, past clients and sales materials, and the customer profile we prepare from them
• Proposal requests: Your name, work email, company website and typical contract value, and optionally your phone number and calendar link
• Prospect data (processed on behalf of customers): Business contact information sourced from public and licensed databases

3. Purposes and Legal Bases

4. Automated Decision-Making and AI

Prospecter uses artificial intelligence and machine learning to:

• Combine recent buying signals to find companies whose need for what a customer sells is open now
• Assess how closely each company matches the customer's approved customer profile
• Write a research brief and a first email for the person to contact

These automated processes assist our team but do not produce legal effects or similarly significant impacts on individuals. A person on our team reviews every lead, research brief and email before it is delivered, and Prospecter does not contact anyone on a customer's behalf.

AI Training: Customer data, including the documents you share with us, is not used to train or fine-tune any AI model. The AI models we use, and how data is handled, are listed in our AI Transparency disclosure.

5. Data Sharing

We share personal data only with:

• Service providers (sub-processors): Amazon Web Services (website and application hosting, United States), Neon (database hosting for customer and billing records, United States), Stripe (payment processing), Resend (sending invoices, receipts and payment notices by email), Google Workspace (business email), Google Analytics (website analytics), LinkedIn (advertising measurement), Calendly (meeting scheduling), CookieYes (cookie consent management), and Anthropic (AI processing, as described in our AI Transparency disclosure), each bound by data processing agreements
• Legal authorities: When required by law, court order, or to protect rights and safety
• Business transfers: In connection with merger, acquisition, or sale of assets

We do not sell personal data to third parties.

6. International Transfers

Data may be transferred to and processed in the United States and other countries. For transfers from the EEA, UK, or Switzerland, we rely on:

• Standard Contractual Clauses (SCCs) approved by the European Commission
• UK International Data Transfer Agreement or Addendum where applicable
• Swiss-approved transfer mechanisms under nFADP

Copies of relevant transfer mechanisms are available upon request.

7. Data Retention

• Website analytics (Google Analytics): Up to 12 months
• Cookieless visit counts: The daily visitor code becomes anonymous when the day ends and its key is deleted; the anonymous counts are kept up to 25 months
• Customer accounts: Duration of relationship + 12 months
• Billing and tax records: 7 years (legal requirement)
• Proposal requests: Up to 24 months after our last contact
• System logs: 30-90 days

8. Your Rights

Depending on your location, you may have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data ("right to be forgotten")
• Restriction: Limit how we process your data
• Portability: Receive your data in a structured, machine-readable format
• Objection: Object to processing based on legitimate interests
• Withdraw consent: Where processing is based on consent

To exercise these rights, contact legal@prospecter.io. We will respond within 30 days (or as required by applicable law).

Right to lodge a complaint: You may also lodge a complaint with your local data protection authority (e.g., in the EU, UK, or Switzerland).

9. California Privacy Rights (CCPA/CPRA)

California residents have additional rights under the California Consumer Privacy Act and California Privacy Rights Act:

• Right to Know: Categories and specific pieces of personal information collected
• Right to Delete: Request deletion of personal information
• Right to Correct: Correct inaccurate personal information
• Right to Opt-Out: Opt out of sale or sharing of personal information
• Non-Discrimination: Equal service regardless of privacy choices

We do not sell personal information. To submit a request, email legal@prospecter.io with "California Privacy Request" in the subject line.

10. Swiss Data Protection (nFADP)

For individuals in Switzerland, we comply with the Swiss Federal Act on Data Protection (nFADP). Swiss residents have rights similar to those under GDPR and may contact the Federal Data Protection and Information Commissioner (FDPIC) with complaints.

11. Cookies and Tracking

We use cookies and similar technologies for:

• Essential cookies: Required for site functionality, such as remembering your cookie choice
• Analytics cookies: Google Analytics, to understand usage patterns (with consent where required)
• Marketing cookies: To measure campaign effectiveness (with consent)

You can manage cookie preferences through our cookie consent banner or your browser settings. For visitors in the EU/EEA, non-essential cookies are blocked until consent is provided. Until you choose, Google Analytics receives only signals that set no cookies (Google Consent Mode), which Google uses to estimate overall traffic.

Cookieless visit counting: To know how many people visit and where visits come from, our own servers count every page view without cookies or anything else stored on your device. For each view we record the page, the site or campaign link that brought you, your country, device type, browser and operating system, how long you actively spend on the page and how far you scroll, and which of our links and buttons you click (by their wording on our site; nothing you type is recorded). To count a visitor once a day, we combine your IP address and browser description with a random key that changes every day and is deleted the next, and keep only the result; your IP address itself is never stored. The result cannot be linked to you, or to your visits on other days, once that key is deleted. This counting relies on our legitimate interest in understanding how our website is used, and the data is never shared or used for advertising.

12. Security

Protecting the data entrusted to us is a standing obligation, not a compliance formality. We maintain layered technical and organizational safeguards designed to shield personal data from accidental or deliberate manipulation, loss, destruction, and access by unauthorised parties.

These safeguards include:

• Encryption in transit (TLS) and at rest
• Access controls and authentication
• Regular security assessments
• Incident response procedures

We treat security as a moving target rather than a fixed state. Our controls are reviewed on an ongoing basis and adapted as technology, threat models, and our own architecture evolve. We audit and refine our data protection practices continuously, so that the protections surrounding your data are strengthened over time rather than left to age.

13. Children

Our Service is not directed to individuals under 18. We do not knowingly collect personal data from children.

14. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or prominent notice on our website. The "Last updated" date at the top indicates the most recent revision.

15. Contact

For privacy inquiries or to exercise your rights:

Email: legal@prospecter.io
Mail: greatestdesigns LLC, 1309 Coffeen Avenue STE 1200, Sheridan, WY 82801, United States