Privacy policy

This policy explains what personal data ProspectLoop handles, why, and what rights you have. The controller for data about our customers is ProspectLoop, [Company address]. Contact: hello@prospectloop.io.

Data about you, our customer

• Account data: your name, email address and profile picture from Google sign-in. We use it to log you in and contact you about your account.
• LinkedIn session: after you log in to LinkedIn through our login window, we store the session cookies, encrypted (AES-256-GCM). We never see or store your LinkedIn password. Disconnecting the account deletes the session.
• Account settings: your timezone and working hours, taken from your browser, plus your limits and campaign settings.
• Billing data: handled by our payment provider. We don't store card numbers.
• Technical data: server logs and error reports, used to keep the service running and fix problems.

Legal basis: performing our contract with you (Art. 6(1)(b) GDPR) and our legitimate interest in running a secure service (Art. 6(1)(f) GDPR).

Data about the people you contact

When you import leads or run campaigns, ProspectLoop stores information about the people involved: names, LinkedIn profile URLs, headlines, companies, connection status, the messages exchanged and where they are in your campaigns. For this data, you are the controller and we process it on your behalf and on your instructions only (Art. 28 GDPR). You are responsible for having a lawful basis to contact these people. If someone asks you to stop, add them to your exclusion list.

Who we share data with

We use these service providers, each bound by a data processing agreement:

• Hetzner (servers and databases, Germany)
• Google (sign-in)
• Sentry (error tracking)
• Our proxy provider (routes your account's LinkedIn traffic through a dedicated IP)
• Stripe (payments)

Some providers are based in the US. Where data leaves the EU, transfers rely on the EU-US Data Privacy Framework or standard contractual clauses. We don't sell personal data and don't use it for advertising.

How long we keep it

• Account and campaign data: while your account is open.
• After you close your account: deleted within 30 days.
• Error snapshots of failed automation steps: deleted after 30 days.
• Invoices: kept as long as tax law requires.

Cookies

We use only the cookies needed to keep you logged in and remember your selected LinkedIn account and theme. We don't use advertising or tracking cookies.

Your rights

You can ask for access to, correction, deletion, restriction or a copy of your personal data, and object to processing based on legitimate interest. Email hello@prospectloop.io. If you are one of the people a customer contacted through ProspectLoop, we will pass your request to that customer and help them handle it. You can also complain to a data protection supervisory authority.

Changes

We will update this page when our data handling changes and email customers about significant changes.