Privacy Policy

This policy covers two relationships, and they are different. For the agencies that subscribe to Prospectrail — your account, your team, your billing details — we are the controller and this policy tells you what we collect and why. For the lead and client data your agency enters into your workspace, we act as a processor on your instructions: your agency decides what is collected and why, and you should have your own privacy notice covering that toward your clients and their leads.

Account data: your name, work email, and the agency you belong to, when you sign up or are invited to a workspace.

Billing data: your subscription plan and status. Card and payment details are collected and stored by Stripe directly — we never receive or store your full card number.

Workspace data: the leads, campaign content, messages, and pipeline activity your agency enters or imports, including personal data about your clients' leads (such as names, email addresses, and company details) that your agency is responsible for having the right to process.

Usage data: basic technical logs (timestamps, IP address, and browser information) generated by using the product, kept for security and troubleshooting.

To provide the product: authenticate you, run the workspace you subscribe to, generate AI scoring and drafts on the data you supply, and prepare outreach exports. To bill your subscription through Stripe. To keep the service secure and working, including detecting abuse. To communicate with you about your account — never for advertising to your leads or your clients' leads.

We do not sell personal data, and we do not share workspace data across agencies — every workspace is isolated. We share data only with the service providers that make the product work, each acting under contract and only for that purpose:

• Stripe — payment processing and billing.
• Anthropic — the AI provider used for lead scoring, message drafting, and campaign generation. Content you submit for these features (such as a lead's details or a campaign brief) is sent to Anthropic to generate that output.
• Our hosting and database providers — infrastructure that stores and serves the application and its data.

We disclose data beyond this only if required by law, or with your consent.

Data is hosted with providers operating in the United States. We retain account and workspace data for as long as your subscription is active, and for a limited period afterwards to allow export or reactivation, after which it may be deleted. Billing records are kept as required for accounting and tax purposes.

We use industry-standard measures — encryption in transit, hashed credentials, and access controls scoped to each agency's own workspace — to protect data. No system is completely secure, and we cannot guarantee absolute security.

You can access, correct, or export most account and workspace data directly in the product. To request deletion of your account or data, contact us using the details below. If your agency's workspace contains personal data about someone who wants to exercise a privacy right directly, that request should go to the agency that manages that data — we act on your agency's instructions for workspace data, not on a lead-by-lead basis on our own.

We may update this policy from time to time. If a change is material, we will make reasonable efforts to notify agencies on an active plan before it takes effect.

Questions about this policy, or requests about your data, can be sent to privacy@prospectrail.com.