Privacy Policy — ProspectFlow

This Privacy Policy explains how ProspectFlow ("we," "us," or "our"), operated by Ruben Plata, collects, uses, and protects your information when you use our website, software, Chrome extension, and related services (collectively, the "Service").

By using the Service, you agree to the collection and use of information as described in this policy.

1. Information We Collect

a) Account Information

When you purchase or register for the Service, we collect:

• Your first name, optionally your last name, and your email address (we use your first name to greet you and in the emails we send you)
• Payment information, which is processed and stored directly by our payment processor (Stripe) — we do not store your card details. We keep a record of your payments (amount, date, and Stripe reference numbers) for accounting purposes
• If you arrived through a referral link or entered a referral code, a record of who referred you
• To limit repeat free trials and abuse of signups: a record that your email address has used a free trial (in a standardised form, so variants such as dots or "+" tags count as the same address), which we keep even if you later delete your account; and, at signup, one-way (hashed) records of the network (IP) address and email you used, which we use only to limit abuse and routinely delete once they are 30 days old

b) Facebook Lead Data (via Chrome Extension)

ProspectFlow's Chrome extension allows you to capture information you already have access to on Facebook, such as:

• Names, comments, and messages from your own Facebook posts and conversations
• Profile information visible to you as the account owner

ProspectFlow is a read-only tool. We do not access data beyond what is already visible to you in your own Facebook account, and the Service does not post, message, or take any automated action on Facebook on your behalf.

c) Your Anthropic API Key

If you choose to use ProspectFlow's AI features, you provide your own Anthropic API key. We store it encrypted, and it is not shown back to you in full or made available to your browser after you save it.

d) Usage Data

We may automatically collect limited technical information when you use the Service, such as browser type, general usage patterns, and error logs, to help us maintain and improve the Service.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service
• Process payments and manage your subscription or lifetime access
• Send you important account or service-related communications (such as invite emails, receipts, or support responses)
• Improve and troubleshoot the Service
• Comply with legal obligations

We do not sell your personal information to third parties.

3. How We Share Your Information

We may share your information with:

• Service providers who help us operate the Service, including Stripe (payment processing), Resend (email delivery), Supabase (account authentication and data storage), and Vercel (hosting)
• Anthropic, only when you use an AI feature, as described in Section 4 below
• Legal authorities, if required to comply with a law, regulation, or valid legal request

Apart from the information sent to Anthropic when you choose to use an AI feature (Section 4), we do not share the Facebook lead data captured through the Chrome extension with any third party. That data remains yours and is stored solely for your use within your ProspectFlow account.

4. AI Features and Anthropic

Some parts of ProspectFlow are AI features: the DM Coach and its suggestions, the AI Message Generator, Offer profiles and best-fit suggestions, Content Studio, the Win / Loss insight, the Lead Assistant (comments you scan from a post), and Today's check on your dashboard (which reads your leads' logged conversations to draft follow-ups and spot objections), the Pipeline chat (which looks things up in your pipeline to answer your questions), the Content Kit and sales documents (which write from your offer, goal, voice and story bank, and the objections you tagged), and the Messenger Scanner (which reads a conversation when you click Scan). They are optional and run only when you use them, and each one only proposes: nothing is sent for you. They work through your own Anthropic API key, so the usage is billed to your Anthropic account.

When you use an AI feature, our servers send a request to Anthropic (the provider of Claude) that can include:

• Details about the lead you are working on: name, location, hometown, work, education, website, tags, bio, the comment they wrote, and where they came from
• Your notes on the lead, the conversation you have logged, and any Messenger messages you imported
• Your Offers (pricing, description, testimonials, and sales page text), your Content Studio Voice & Story Bank entries and saved example posts, and your tone preference
• For the Win / Loss insight, your totals, loss reasons, and the names of recent won and lost leads
• For the Lead Assistant, the post and the comments you scanned (including the commenters' names and the words they wrote)
• For the Pipeline chat, whatever part of your pipeline it looks up to answer you: lead names, stages and tags, your logged conversations, imported Messenger messages, your goals and objections, plus your earlier chat messages (older ones as a short summary)
• For the Content Kit and sales documents, your offer (including its sales page text, testimonials and how it works), your goal, your voice and Story Bank entries, and the objections you tagged on leads, without names
• Anything you type into an AI chat

Anthropic processes this information under its own terms and privacy policy, which we do not control. ProspectFlow does not send this information to Anthropic unless you use an AI feature. If you do not add an API key or do not use the AI features, none of it is sent, and the rest of the Service continues to work.

Messenger scans

When you click Scan this conversation in the extension, it reads only the messages that appear on your screen while the scan is open (you scroll to include earlier ones; it never scrolls or opens anything for you), and sends them to ProspectFlow. We store those messages, who the conversation is with, and the result of the scan (a summary, an intent tag with quotes, objections, a suggested next step and reply) so you can review it. This is your content only: it is stored per account, never shared with other accounts, and is sent to Anthropic (through your own API key) only to produce the result. Nothing is added to a lead until you approve it. You choose how long scanned conversations are kept (90 days unless you change it, or until you delete them), they are removed automatically when that time passes, and you can delete a single scan or all of them at any time under Agents → Messenger scans. Scans are also deleted if you delete the lead or your account. Messages you choose to save to a lead become part of that lead's data. If you scan an end-to-end encrypted Messenger conversation, you are choosing to send its decrypted messages to us and to Anthropic, where Messenger's encryption no longer protects them; the extension asks you to confirm first.

5. Data Storage and Security

Your data is stored using industry-standard providers (Supabase) with reasonable technical and organizational measures in place to protect it. However, no method of electronic storage or transmission is 100% secure, and we cannot guarantee absolute security.

6. Data Retention

We keep your account information and captured lead data for as long as your account exists. This includes after a free trial ends or a plan is cancelled or expires: your account then becomes read-only, so you can still view and export your data, and we do not delete it automatically. If you ask us to delete your account, we will delete or anonymize your data within a reasonable time, except where we are required to retain it for legal or accounting purposes (for example, records of payments), or where we keep a limited record to prevent abuse, such as the record that an email address has used a free trial, described in Section 1.

7. Your Rights and Choices

Depending on your location, you may have rights to:

• Access the personal information we hold about you
• Request correction or deletion of your personal information
• Request a copy of your data

To exercise any of these rights, contact us at contact@rubenplata.com.

8. Cookies and Tracking

Our website may use basic cookies or similar technologies to support core functionality (such as keeping you logged in) and to understand general site usage. We do not use cookies for third-party advertising purposes.

9. Third-Party Links

Our Service may contain links to third-party websites (such as Facebook, Anthropic, or our payment processors). We are not responsible for the privacy practices of those third parties, and we encourage you to review their respective privacy policies.

10. Children's Privacy

The Service is not directed to individuals under the age of 18. We do not knowingly collect personal information from children.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Continued use of the Service after changes are posted constitutes your acceptance of the updated policy.

12. Contact Us

If you have any questions about this Privacy Policy or how your information is handled, contact us at:

contact@rubenplata.com

This document is a template and does not constitute legal advice. Please review with a qualified attorney before relying on it for legal protection.