Snapshot 57131
Normalized text
Scripts and page chrome removed; this is what change detection compares.
Email Finder
Privacy
Privacy Policy
Learn how GetProspect uses your data
Terms of use
Privacy policy
DPA
Personal data
Affiliate
Google API disclosure
GetProspect's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Details of the Google user data we access and how we use it are set out in Section 4.5.
1. Introduction and scope
1.1 Who we are
GetProspect LLC, a limited liability company registered in the United States at 30 N Gould St, STE R, Sheridan, WY 82801, USA ("GetProspect", "we", "us" or "our"), operates a business-to-business (B2B) contact database and related tools available through our website at getprospect.com, our browser extension, our web application and our API (together, the "Service"). The Service enables businesses to identify companies and the professionals who work for them, together with their business contact details.
1.2 Scope of this Privacy Policy
This Privacy Policy explains how we process personal data relating to the following categories of individuals:
Contacts: professionals whose business information is included in the GetProspect database ("Contact Data"). See Section 2 and Section 3.
Customers: individuals who register for and use the Service, including users acting on behalf of an organization. See Section 4.
Visitors: individuals who visit our website. See Section 4.
1.3 Summary for Contacts
We process business information only: name, job title, employer, city-level location, professional profile link and a business email address. We do not process special categories of data or information relating to your private life.
Profile information is collected from publicly available professional sources and licensed B2B data providers. Business email addresses are generated by GetProspect from your name and your employer's email address format, and are then verified.
You may request removal of your data at any time, free of charge, on our Personal Data page or by email to support@getprospect.com. Following removal, we retain a minimal suppression record to prevent your data from being added again.
2. Contact Data: information about professionals in our database
GetProspect LLC is the sole controller of Contact Data within the meaning of the EU General Data Protection Regulation (EU) 2016/679 and the UK General Data Protection Regulation (together, the "GDPR").
2.1 Categories of Contact Data
First and last name;
Job title and current or previous employers;
City, region and country;
Public professional profile link, such as a LinkedIn profile URL;
Business email address at the employer's domain;
In certain cases, a telephone number (see Section 2.4).
We also process information about the organizations Contacts work for, such as company name, website, industry, size and location.
We do not process special categories of personal data (such as data concerning health, religious beliefs or political opinions), financial data or information relating to a Contact's private life. We process business email addresses only and do not hold personal email addresses, such as Gmail, Outlook or iCloud accounts.
2.2 Sources of Contact Data
We collect profile information (name, job title, employer, location and profile link) from the following categories of sources:
publicly accessible professional sources on the internet, including company websites, public professional profiles, company registries and business directories, and news and press publications;
licensed third-party B2B data providers.
We do not obtain data from data breaches or leaked datasets. Customer content uploaded to the Service (see Section 4.1) is not added to our database.
2.3 Generation and verification of business email addresses
Business email addresses are not obtained from third parties. GetProspect generates every business email address in its database as follows:
We combine the Contact's name with the email domain of their employer (for example, company.com).
We create candidate addresses based on the email address formats used by that organization, such as first.last@company.com or first@company.com.
We verify whether each candidate address is able to receive email. Only addresses that pass verification are made available to Customers, and they are re-verified at regular intervals to maintain accuracy.
No email is sent to the Contact during verification.
2.4 Telephone numbers
Telephone numbers are not collected from public web pages. Where a Customer requests a telephone number for a specific professional profile, we obtain it from licensed third-party data providers by reference to that profile and store the result. Telephone numbers stored for a Contact are deleted upon removal in accordance with Section 3. If a telephone number has been associated with you in error, please contact us and we will delete it.
2.5 Purposes and legal basis of processing
Purpose. We process Contact Data for a single purpose: to operate a B2B professional database that enables organizations to identify relevant companies and the professionals working for them, in their professional capacity, for business development, recruitment and partnership purposes. We do not use Contact Data for advertising profiling, credit or eligibility assessments, or consumer marketing.
Legal basis. We process Contact Data on the basis of our legitimate interests and those of our Customers (Article 6(1)(f) GDPR), a purpose recognized in Recital 47 GDPR. In balancing these interests against the rights and interests of Contacts, we have taken into account that:
the processing is limited to data relating to Contacts in their professional capacity, the majority of which has been published by the Contact or their employer in a professional context;
we do not process special categories of data or data relating to Contacts' private lives;
Contacts may object at any time, and we give effect to every objection without asserting compelling legitimate grounds to continue processing.
2.6 Recipients of Contact Data
Contact Data is made available to Customers who search the database through our website, browser extension, web application or API. A business email address is disclosed to a Customer only when the Customer chooses to reveal it.
Public business directory pages on our website display the names and job titles of certain Contacts at their employer's company page, and allow visitors to reveal a Contact's business email address after completing a security check.
A Customer who saves or exports Contact Data acts as an independent controller of that data and is responsible for complying with applicable data protection and electronic communications laws in their use of it. On request, we will inform a Contact of the names of the Customer organizations that saved their record.
GetProspect does not send emails, make calls or send text messages to Contacts on behalf of Customers. Customers determine the content and timing of any communication they send, and requests not to be contacted by a particular Customer should be addressed to that Customer. Removal under Section 3 ends the availability of your data to all Customers.
2.7 Automated processing
We use automated processes to maintain the accuracy of the database, including the matching of free-text locations to a structured city and country, the generation of business email addresses and the verification of their deliverability. These processes serve only to organize and index records. We do not engage in automated decision-making that produces legal effects concerning Contacts or similarly significantly affects them within the meaning of Article 22 GDPR, and we do not evaluate or score Contacts as individuals.
2.8 Information to Contacts
Given the number of Contacts in our database, providing information to each Contact individually would involve a disproportionate effort within the meaning of Article 14(5)(b) GDPR. We therefore make this information publicly available in this Privacy Policy and provide a simple means of removal to every Contact.
3. Removal of Contact Data
3.1 Online removal
Open our Personal Data page.
Enter your business email address and submit the form.
Follow the confirmation link sent to that email address. Your data is removed immediately upon confirmation.
The confirmation step ensures that a record can be removed only by the person to whom it relates.
3.2 Removal by email
If you no longer have access to your business email address, or wish to identify your record by your LinkedIn profile, please send a request to support@getprospect.com stating:
your full name; and
your business email address or your LinkedIn profile URL.
As we do not hold personal email addresses (such as Gmail, Outlook or iCloud accounts), a record cannot be located by a personal email address. A name alone is likewise insufficient, as many individuals share the same name. We do not require, and ask you not to send, identity documents, dates of birth or home addresses. Requests may be submitted in any language.
3.3 Effect of removal
Deletion. Your record is deleted from our database and search index, including all associated email addresses, telephone numbers and derived data.
Public pages. Where your name appeared on our public business directory pages, it is removed from those pages promptly. Copies of those pages held by search engines are updated according to the search engines' own schedules.
Notification of Customers. Customers who saved your record are notified of your request in accordance with Article 19 GDPR, and the saved record is removed from their GetProspect accounts. Copies previously exported by Customers are outside our control; Customers are independently obliged under applicable law to give effect to your request.
Suppression record. We retain a minimal suppression record consisting of your name, LinkedIn profile identifier, email addresses and the domain of your business email address, used solely to prevent your data from being added to our database again from public sources or data providers. Where removal follows your request, we retain this record to comply with our obligation to give lasting effect to that request (Articles 6(1)(c), 17 and 21 GDPR). Where we remove a record on our own initiative, we retain it on the basis of our legitimate interest in not processing your data again (Article 6(1)(f) GDPR). You may request deletion of the suppression record, in which case your data may be added to our database again in the future.
Confirmation. We confirm in writing, to you or your authorized agent, when removal is complete, or that no matching record was found. Where no record is found, we will, on request, add a suppression record so that your data is not added to our database in the future.
Removal from GetProspect does not affect data held by other companies. Requests to other data providers must be made to them directly.
3.4 Requests by organizations
An organization may request the removal of its company record and of the records of its current and former employees. Such requests must be sent to support@getprospect.com from an email address at the organization's own domain. We will delete the records concerned and prevent them from being added to our database again. Requests on behalf of family members or other individuals must be made as an authorized agent in accordance with Section 6.4.
4. Information about Customers and Visitors
4.1 Categories of personal data
Account data: email address, first and last name, location and similar business information provided at registration or through web forms. For account security purposes, we may request a telephone number.
Billing data: billing address and company name for paid subscriptions. Payments are processed by third-party payment service providers in accordance with their own privacy policies; we do not store full payment card numbers.
Connected services: where you connect a third-party service, such as a Google account, we receive the information you authorize, subject to that service's settings.
Security and fraud prevention data: IP address, approximate location derived from it, a device identifier generated by a device fingerprinting service at registration and login, and the result of telephone number verification by SMS, where required.
Usage and device data: information collected automatically through cookies and local storage, including IP address, device identifiers, browser type, and pages visited before and after our website.
Customer content: lists, files and CRM data that Customers upload for enrichment or management. We process Customer content on behalf of the Customer as a processor, in accordance with our Data Processing Agreement. The Customer is responsible for having a lawful basis for such data.
4.2 Required and optional data
To create an account, you must provide your name, email address and a password, and we collect a device identifier for fraud prevention. Without this data, we cannot provide you with an account. Where our fraud prevention checks indicate a risk, we require verification of a telephone number by SMS before the account can be used in full. Billing data is required for paid subscriptions. All other information is optional.
4.3 Purposes and legal basis of processing
Provision of the Service, including account management, search, billing and customer support: performance of a contract (Article 6(1)(b) GDPR).
Security and fraud prevention, including the prevention of abuse and violations of our Terms of Service: legitimate interests (Article 6(1)(f) GDPR).
Improvement of the Service, including diagnosis of technical issues and analysis of feature usage, using aggregated or anonymized data where possible: legitimate interests (Article 6(1)(f) GDPR).
Communications. Service and administrative messages form part of the Service. Product updates and marketing communications may be declined at any time: consent or legitimate interests, depending on applicable law.
Compliance with legal obligations, including tax and accounting requirements and lawful requests from public authorities: legal obligation (Article 6(1)(c) GDPR).
Where processing is based on consent, you may withdraw your consent at any time by contacting support@getprospect.com.
4.4 Customer responsibilities
Customers who save, export or contact individuals identified through the Service determine the purposes of that use and are responsible for complying with applicable data protection and anti-spam laws, including giving effect to objections and erasure requests. Where a Contact requests information about the recipients of their data, GetProspect will disclose the name of the Customer organization that saved the Contact's record. We do not disclose the names or email addresses of individual users.
4.5 Google user data
Customers may connect a Google account to the Service. We access Google user data only for the features you choose to use:
Sign in with Google: your name, email address and profile picture, used to create your account and sign you in. Your profile picture is stored as your account picture.
Gmail (email sequences): with your permission to send and read email, we send the sequence emails you create from your Gmail account and read incoming messages to identify replies to them. Messages retrieved in this way, including replies to your sequence emails with their content and attachments, are stored so that they can be displayed in your GetProspect inbox. The text of replies may be processed by an AI service provider to classify them (for example, as interested or out of office), under terms that prohibit the provider from using it to train its models.
Google Sheets integration: with your permission to access spreadsheets and files you select, we write the contacts you export into a spreadsheet you choose. We store the name and identifier of that spreadsheet.
Google Sheets add-on: the add-on reads the cells you select for enrichment, such as names, company domains and LinkedIn profile URLs, sends them to the Service, and writes the results back to your spreadsheet.
Access tokens are stored in encrypted form and are deleted when you disconnect the integration. Stored messages and other Google user data are deleted when your account is deleted. You can also revoke our access at any time in your Google Account settings.
Our use of Google user data is limited to providing and improving the features described above. We do not sell Google user data, use it for advertising, or use it to develop, improve or train generalized artificial intelligence or machine learning models. We do not allow humans to read Google user data unless you give us permission, it is necessary for security purposes or to comply with applicable law, or the data is aggregated and anonymized for internal operations.
4.6 Browser extension
Our Chrome extension operates on LinkedIn pages, including Sales Navigator. It reads the profile information displayed on the page you are viewing, such as names, job titles, companies, locations and profile URLs, and sends profile URLs and company names to the Service to find matching records in our database. When you open the extension's side panel on any other website, it reads the address of the current tab to show information about the company that owns that website. The extension stores your login token and settings in your browser. It does not collect your browsing history and does not contain third-party analytics.
4.7 Cookies and similar technologies
Our website and web application use cookies, local storage and similar technologies, which are shared between getprospect.com and its subdomains:
Strictly necessary: security and bot protection by Cloudflare (cookie retained for up to one year) and Cloudflare Turnstile security checks on forms; storage that keeps you signed in; fraud prevention by Stripe at checkout and by a device fingerprinting service at registration and login; and error monitoring by Sentry, which does not use cookies.
Functional: the Intercom chat widget (cookies retained for up to nine months), Sign in with Google, and content embedded from other platforms, such as posts from X on certain blog pages, which may set those platforms' own cookies.
Analytics: Google Analytics, loaded through Google Tag Manager, which may be served from our own domain (cookies retained for up to 400 days); Cloudflare Web Analytics, which does not use cookies; and our own attribution cookies, which record the referring page and campaign parameters of your visit for up to 90 days so that registrations can be attributed to marketing channels.
Advertising: we do not currently use advertising cookies or third-party advertising pixels.
You can block or delete cookies in your browser settings, and you can opt out of Google Analytics using the Google Analytics opt-out browser add-on. Blocking strictly necessary cookies may prevent parts of the Service from working. Our website does not currently respond to "Do Not Track" browser signals.
5. Disclosure of personal data
Customers. Contact Data is made available to Customers as described in Section 2.6. We do not disclose a Customer's account data to other Customers.
Service providers. We engage third-party providers for hosting, maintenance, support, payment processing, fraud prevention, communications, analytics and AI-based text classification. They receive only the information necessary to perform their services, are bound by confidentiality obligations and may not use the information for their own marketing purposes.
Legal requirements. We may disclose information where required by law, in response to a valid court order or request from a public authority, or where necessary to protect our rights, investigate fraud or abuse, or protect the safety of others.
Corporate transactions. In the event of a merger, acquisition or sale of assets, personal data may be transferred as part of the transaction. We will notify affected individuals by email or by a prominent notice on our website of any change in ownership or in the use of their personal data.
Aggregated data. We may disclose aggregated statistical information that does not identify any individual for reporting, business or research purposes.
6. Your rights and how to exercise them
You may exercise the rights described below free of charge by contacting support@getprospect.com. Contacts may request removal on our Personal Data page. We extend these rights to all individuals, regardless of their country of residence or the law under which a request is made.
6.1 Your rights
Right of access (Article 15 GDPR): to obtain confirmation of whether we process your personal data and a copy of that data, together with information on its sources, purposes, recipients and retention.
Right to erasure (Article 17 GDPR): to have your personal data deleted (see Section 3).
Right to object (Article 21 GDPR): to object to processing based on legitimate interests. In respect of Contact Data, an objection, including an objection to processing for direct marketing purposes under Article 21(2) GDPR, is given effect unconditionally and treated as a request for removal and suppression.
Right to rectification (Article 16 GDPR): to have inaccurate personal data corrected. Where a record combines your data with that of another person, we will correct or delete it.
Right to restriction (Article 18 GDPR): to request that processing be restricted in the circumstances set out in the GDPR.
Right to data portability (Article 20 GDPR): to receive personal data you have provided to us as a Customer in a structured, commonly used and machine-readable format.
Right to withdraw consent (Article 7(3) GDPR): where processing is based on consent, at any time.
Customers may also update their details in their account settings and delete their account using the Delete my account function.
6.2 Access requests
To submit an access request, please provide your full name and your business email address or LinkedIn profile URL. Our response will set out the full contents of any record we hold, the categories of sources, the purposes and legal basis of processing, the retention period, and the names of the Customer organizations that saved your record. This information is provided in the body of our response or, on request, in a commonly used electronic format such as PDF or CSV.
Once our response has been provided, we delete the record from our database and add a suppression record to prevent it from being created again, as described in Section 3.3. A copy of the record as held at the time of the request is retained only within the file relating to the request, as evidence of the data held and of our response, and is not used for any other purpose.
6.3 Verification of requests
We act on a request only where we are reasonably satisfied that it originates from the individual concerned. A request sent from the email address contained in the relevant record is ordinarily sufficient. In other cases, we may send a confirmation link to the business email address held in the record before acting on the request. Copies of personal data are sent only to an address verified as belonging to the requester. Information you provide in a request is used only to locate your record, respond to your request and maintain the suppression record, and is not added to our database.
6.4 Authorized agents
You may designate an authorized agent, including a privacy service, legal representative or family member, to submit a request on your behalf. The agent must provide:
evidence of authorization, such as a signed authorization from you; and
your full name together with your business email address or LinkedIn profile URL.
We correspond with the agent and contact you only where necessary to verify the request, by a confirmation link sent to the business email address in the record. Dates of birth and home addresses are not required.
6.5 Response times
We acknowledge every request within ten business days. In all cases, we respond within the period prescribed by applicable law: one month under the GDPR and 45 days under applicable US state privacy laws. Where a request is complex, we may extend this period as permitted by law, in which case we will inform you of the extension and the reasons for it.
If we decline a request in whole or in part, we will state which data is affected and the reason. Residents of US states that provide a right of appeal may appeal our decision by replying to it with the subject line "Appeal". We respond to appeals within 45 days and, if an appeal is denied, will inform you how to contact your state Attorney General.
6.6 Residents of California and other US states
Residents of California and other US states with applicable privacy laws have the right to know what personal information we hold about them, to request its deletion or correction, and to opt out of its sale or sharing. A removal request submitted on our Personal Data page or by email is treated as a request to delete and to opt out of sale and sharing. We will not discriminate against any individual for exercising these rights.
In the preceding 12 months, we collected the following categories of personal information about Contacts: identifiers (name, business email address, telephone number and professional profile link); professional or employment-related information; and general location (city, region and country). The sources and business purposes of this collection are described in Section 2.2 and Section 2.5. We do not collect sensitive personal information, and we do not use Contact Data for targeted advertising or for profiling that produces legal or similarly significant effects.
6.7 Complaints
If you have concerns about our processing of your personal data, please contact us first so that we can address them. You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the country of your habitual residence or place of work. A list of EU supervisory authorities is available on the European Data Protection Board website. In the United Kingdom, the supervisory authority is the Information Commissioner's Office.
7. Security
We implement appropriate administrative, technical and physical safeguards in line with industry standards to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorized disclosure or access. These include encryption of data in transit over public networks and access controls on our systems. No method of transmission or storage is entirely secure, and we cannot guarantee absolute security. If you believe your personal data has been compromised, please contact support@getprospect.com.
8. Data retention
Contact Data is retained for as long as it accurately reflects the Contact's current professional role, or until removal is requested. Following removal, only the suppression record described in Section 3.3 is retained, until you request its deletion.
Records of privacy requests, including our correspondence and responses, are retained for as long as necessary to demonstrate compliance with our legal obligations.
Customer account data is retained for as long as the account is active. Following a request to delete an account, the data is permanently deleted after nine days, during which the account may be restored. Where the Service has not been used for three years, we delete or irreversibly anonymize account data, after notifying the Customer.
Backups. Deleted data may remain in encrypted backups for up to 124 days, until those backups expire in accordance with our standard backup schedule. Backups are used solely for disaster recovery. If a backup is restored, all removals made since the backup was created are re-applied before the restored data is used.
Records required by law, such as billing records, are retained for the period required by applicable law. Data may also be retained where necessary to resolve disputes or enforce our agreements.
9. Data location and international transfers
Our production databases are hosted in the European Union, in Germany and Finland, and backups are stored in the European Union, in Ireland.
Certain of our service providers and data providers are located outside the European Economic Area, including in the United States, where data protection laws may differ from those in your country. Where personal data is transferred to such recipients, we take appropriate measures to ensure that it remains protected in accordance with this Privacy Policy and applicable law.
10. Children
The Service is not directed to individuals under the age of 18, and our database is limited to professionals. We do not knowingly collect personal data from children. If you believe we hold personal data relating to a child, please contact us and we will delete it.
11. Personal data breaches
In the event of a personal data breach caused by GetProspect, we will notify the competent supervisory authority and, where required, affected individuals without undue delay in accordance with Articles 33 and 34 GDPR, take reasonable steps to identify and remedy its cause, and provide reasonable assistance in any further remediation.
12. Changes to this Privacy Policy
We may amend this Privacy Policy from time to time, for example to reflect changes in law or in the Service. Amendments take effect upon publication on this page. Where amendments materially affect Customers, we will notify them by email or within the Service.
13. Contact us
For questions regarding this Privacy Policy or our processing of personal data, or to exercise your rights, please contact support@getprospect.com. All privacy requests, including those addressed to a data protection officer or privacy team, should be sent to this address.
GetProspect LLC, 30 N Gould St, STE R, Sheridan, WY 82801, USA.
Last updated: October 6, 2026.