Privacy Policy

Prospectio.io ("Prospectio", "we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our platform and services.

1. Data Controller

Prospectio acts as the data controller for the personal data we collect from our users (account holders). For lead data uploaded by our customers, Prospectio acts as a data processor on behalf of the customer, who is the data controller. For details on our processing obligations, see our Data Processing Agreement.

For privacy-related inquiries, contact us at contact@prospectio.io.

2. Data We Collect

2.1 Account Data

When you register for an account, we collect your name, email address, company name, and optionally your phone number and job title.

2.2 Billing Data

Payment processing is handled by a PCI-compliant payment processor. We store an internal customer identifier and subscription status but do not store credit card numbers or complete payment details on our servers.

2.3 Usage Data

We collect information about how you interact with the Service, including pages visited, features used, actions taken, and timestamps. This data helps us improve the platform and troubleshoot issues.

2.4 Campaign Data

When you use the Service, we process lead lists, email content, sequence configurations, and conversation history that you upload or create within the platform.

2.5 Device and Browser Data

With your consent, we may collect device type, browser type, operating system, IP address, and general location data for analytics and security purposes.

3. How We Use Your Data

We use the data we collect to:

• Provide, operate, and maintain the Service
• Process payments and manage subscriptions
• Send transactional emails (account verification, password resets, billing notifications)
• Improve the platform through aggregated, anonymized analytics
• Detect and prevent fraud, abuse, and security incidents
• Comply with legal obligations
• Communicate important updates about the Service (with your consent for non-essential communications)

4. Legal Basis for Processing (GDPR)

If you are located in the European Economic Area, we process your personal data on the following legal bases:

• Contract performance: Processing your account data and campaign data is necessary to provide the Service you subscribed to
• Legitimate interest: Security monitoring, fraud prevention, and platform improvement serve our legitimate business interests without overriding your fundamental rights
• Consent: Analytics cookies and optional marketing communications are only activated with your explicit consent
• Legal obligation: We retain financial records and respond to breach notification requirements as required by law

5. Data Sharing

We share your data only with trusted third-party service providers that are necessary to operate the Service:

• Our payment processor for payment processing
• Our email delivery provider for transactional email delivery
• Our error monitoring service for error monitoring (anonymized data)
• Our hosting provider for application hosting
• Our infrastructure provider for database hosting and authentication

We do not sell, rent, or trade your personal data to any third party. Each sub-processor is bound by data processing agreements that require them to protect your data in accordance with this Privacy Policy and applicable law.

6. Data Sub-processors

A current list of our sub-processors, along with their purposes and locations, is available upon request. We will notify you of any changes to our sub-processor list at least 30 days before engaging a new sub-processor.

7. International Data Transfers

Your data may be transferred to and processed in countries outside your country of residence. When we transfer data outside the European Economic Area, we rely on Standard Contractual Clauses (SCCs) or adequacy decisions by the European Commission to ensure adequate protection of your data.

8. Data Subject Rights

Under GDPR, CCPA, and other applicable privacy laws, you have the following rights regarding your personal data:

• Right of access: Request a copy of the personal data we hold about you
• Right to rectification: Request correction of inaccurate or incomplete data
• Right to erasure: Request deletion of your personal data (subject to legal retention requirements)
• Right to data portability: Receive your data in a structured, machine-readable format
• Right to object: Object to processing based on legitimate interest
• Right to restriction: Request that we limit the processing of your data

To exercise any of these rights, contact us at contact@prospectio.io. We will respond within 30 days.

9. Cookies

We use cookies and similar technologies to operate the Service and improve your experience. For detailed information about the cookies we use and how to manage your preferences, please see our Cookie Policy.

10. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods vary by data type:

• Account data: Retained for the duration of your account plus 30 days after deletion request
• Billing records: Retained for 7 years as required by financial regulations
• Campaign data: Retained for the duration of the subscription plus 90 days
• Audit logs: Retained for 2 years
• Analytics data: Anonymized and aggregated after 90 days

11. Children

The Service is not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected personal data from a child, we will take steps to delete that data promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you via email and through an in-app notification. The "Last updated" date at the top of this page indicates when the policy was last revised.

13. Contact

If you have questions or concerns about this Privacy Policy or our data practices, please contact our privacy team at contact@prospectio.io.