Privacy at Prospr

Prospr is a private tool for finding and working local-business sales leads. It is invite-only: an account cannot be created by signing up. Someone already in a workspace has to add your email address before you can get in at all.

It is operated by Review It LLC. Questions about anything here go to rene@review-it.io.

Signing in with Google tells us your name, email address, and profile picture. That is all we ask Google for, and we use it to know who you are, show your name to your teammates, and decide what you are allowed to see. We never post anything, read your mail, or touch anything else in your Google account.

We also keep what you do inside the app: the notes you write, the deals you move, the follow-ups you book, the routes you plan, and the messages and images you send your team in chat.

If you sign in on the phone app, we store the name your phone reports for itself, an iPhone 15 say, so you can tell your own devices apart. The sign-in token for that device is stored only as a fingerprint of itself, which is enough to check it against and not enough to rebuild it.

Prospr gathers information about businesses so a sales rep does not have to. For each one that can mean its name, category, address, phone number, opening hours, rating and review count, its social links, and what its website appears to be built with.

It comes from three places, and all three are public.

Business listings. We search Google's listing data for the category and area you ask for, and keep what it returns.

The business's own website. Prospr visits it the way a browser would, reads the pages a customer would read, being the homepage, the menu, contact and about pages, and keeps the readable text, pictures of those pages, and any email addresses and phone numbers printed on them. It identifies itself as ProsprBot and respects a site's robots.txt. It never fills in a form, signs in, or buys anything.

Florida public corporate filings. For leads in Florida, Prospr can look up the state's business registry to work out who a business actually is. Those filings are published by the state and name real people, being officers, managers and registered agents, along with the addresses on the filing, which for a small company is sometimes a home address. Prospr stores what the state published.

All of this is information a person could find by searching for a business and opening its website. Prospr collects it in one place and keeps it current.

If your workspace connects a Claude or ChatGPT account, Prospr can use it to qualify a lead. Doing that sends that lead's information to that provider: the listing details, the readable text Prospr collected from the business's website, and any matched public filing. Because that text is whatever the business chose to publish, it can include the names, email addresses and phone numbers of people who work there.

It goes under your workspace's own account with that provider, so their terms and their retention apply to it rather than ours. Nothing reaches any AI provider unless your workspace has connected one.

Talk to Prospr, the voice feature, is the same bargain and worth calling out separately. While a call is running your microphone audio goes live to OpenAI, together with your first name and a summary of the leads and follow-ups being discussed. Your account is identified to them by a fingerprint rather than by your user record. The call only happens when you start one.

Prospr talks to a small number of outside services, and only to do its job. Google for signing in and for business listings. Mapbox for maps and for putting a day of visits in driving order, which means the addresses of that day's stops. The Florida Department of State for public filings. And an AI provider if your workspace connects one. Loading a map in your browser also tells Mapbox your IP address, the same as any map on any website does.

We use an error-monitoring service to find out when something in Prospr breaks. It is configured to record the fault and not the person who hit it.

Where those services need an account key, your workspace supplies its own. Those keys, and the connection to your AI account, are encrypted before they are stored and are never shared with another workspace.

There is no advertising, no analytics, and no tracking of any kind in Prospr. We have not installed anything that follows you around, here or anywhere else.

Prospr does not ask for, collect, or store your location. The phone app requests no location permission at all, and the website never asks your browser for one.

Routes are built from the addresses of the businesses you picked and the starting point your workspace typed in, not from where your phone is. Tapping Drive to hands the destination over to Apple Maps or Google Maps and stops there. Whatever those apps do with your position after that is between you and them.

Each workspace is separate. What one workspace collects is not visible to any other workspace, and there is no shared pool of leads between customers.

Inside your workspace your teammates can see the leads, notes, deals and chat, which is the point of a shared pipeline.

We do not sell your data, and we do not sell the business data in your workspace. We do not share either with anyone for advertising. We will hand data to law enforcement only where the law actually requires it.

Prospr sets cookies to sign you in and keep you signed in, plus a few short-lived ones while a sign-in or a connection to an AI provider is being set up. That is the entire list. There are no advertising cookies and no third-party trackers, so there is nothing here to opt out of.

The phone app uses no cookies at all.

Everything travels over an encrypted connection. Your workspace's provider keys and its connection to an AI account are encrypted before being written down. The phone app's sign-in token is stored as a fingerprint, so a copy of the database does not hand anyone a working token. Access to a workspace is limited to the people invited to it.

No system is perfect, and we would rather say so plainly than promise otherwise. If something goes wrong that affects your data, we will tell you.

Nothing in Prospr deletes itself. Your workspace's data stays until you ask us to remove it, which is the honest description: there is no quiet expiry running in the background that would surprise you later.

Email rene@review-it.io and we will delete your account, your workspace, or both within 30 days, and confirm when it is done.

Deleting a lead inside the app removes it along with its contacts, notes, follow-ups, history and page screenshots. One thing survives on purpose: a record that this place was deleted, holding its listing id and name, so the next search of the same area does not quietly put it back in front of you.

Prospr holds information about businesses that never signed up for it, which is the nature of a sales tool. If that is you, email rene@review-it.io and we will remove your business from the workspace holding it, or suppress a particular phone number or email address so it stops being surfaced for outreach.

You do not need an account with us to ask, and we do not need a reason. Tell us the business name and where it is, so we find the right one.

If this policy changes in a way that affects you, we will say so here and update the date at the top.