Privacy Policy

1. Introduction

This privacy policy informs users of the website https://www.prosperian.co and of the Prosperian platform available at https://app.prosperian.co how their personal data is collected, used and protected.

It covers both the data of website visitors and the data processed within the platform on behalf of its customers, including data sent to the integrations a customer enables themselves.

Prosperian undertakes to process personal data in compliance with Regulation (EU) 2016/679 of 27 April 2016 (GDPR) and the amended French Data Protection Act.

2. Data controller

The controller of the personal data is: Prosperian
A French société par actions simplifiée (SAS)
Registered office: 42 rue Ampère, 75017 Paris, France
RCS Paris 942 670 001
Contact email: contact@prosperian.co
Phone: 07 43 60 76 02

3. Personal data collected

Prosperian may collect the following categories of data:

• identification data: last name, first name, email address, phone number, company, job title;
• browsing data: IP address, browser type, pages viewed, browsing duration, referral source;
• commercial data: contact requests, email exchanges, information relating to a project or a professional need;
• technical data: cookies, trackers, online identifiers.

Prosperian neither collects nor requests data deemed "sensitive" within the meaning of Article 9 of the GDPR. Messages written freely by third parties, in particular prospects' replies, may nonetheless contain such data without Prosperian having requested it: this content is neither sought, nor analysed, nor used to categorise individuals.

4. Purposes of processing

Personal data is collected for the following purposes:

• responding to contact and information requests;
• managing commercial and pre-contractual relationships;
• improving the website and the user experience;
• measuring audience and analysing browsing;
• ensuring the security of the website;
• carrying out commercial prospecting operations, where the regulations allow it.

5. Legal bases for processing

The processing carried out by Prosperian relies on the following legal bases:

• the user's consent (forms, non-essential cookies);
• the performance of pre-contractual or contractual measures;
• Prosperian's legitimate interest (security, website improvement, commercial management);
• compliance with legal obligations.

6. Recipients of the data

Personal data is intended for Prosperian's internal departments. It may also be transmitted to technical service providers acting as processors, in particular:

• Vercel (website hosting);
• Supabase (database, hosted in the European Union);
• Axeptio (consent collection and storage);
• Calendly (demo appointment booking);
• Meta, Google and LinkedIn (advertising conversion measurement, after consent);
• Slack Technologies, LLC (Salesforce group) and its affiliates (prospecting notifications, when the customer enables the Slack integration from the platform).

When you enter your website address and then your details in the activation form, the information submitted (website address, first name, last name, work email address, date of the request and origin of the visit) is recorded in Prosperian's internal customer relationship management tool, hosted on Supabase within the European Union. It is used to process your trial request and, where applicable, to contact you if your sign-up was not completed.

When a customer enables the Slack integration from the platform, Prosperian posts campaign notifications into the channels that customer has chosen: new leads, confirmed meetings, sourcing lists and finished enrichments, reply drafts submitted for their approval, and the results of the commands they run from Slack. These messages may contain prospects' personal data (name and company) and the content of the messages written to them. The integration never reads the workspace's message history: channel read permissions are used only to present the list of channels at the moment of choosing one, and the app reads only the replies written in the thread of its own messages, so that the customer can correct a draft without leaving Slack. The customer can remove the integration at any time from their settings or from their Slack workspace: in either case the access token and the channel configuration are deleted immediately.

Prosperian does not sell or rent users' personal data.

7. Data transfers outside the European Union

Some service providers used by Prosperian, in particular Vercel, Calendly, Slack, Meta, Google and LinkedIn, may process data outside the European Union. These transfers are governed by appropriate safeguards compliant with the GDPR, in particular through the implementation of standard contractual clauses approved by the European Commission or through adequacy decisions.

8. Data retention period

Personal data is kept only for the time necessary for the purposes for which it is collected:

• contact data: up to 3 years after the last exchange;
• commercial data: for the duration of the contractual relationship, then archived in accordance with legal obligations;
• browsing data and cookies: 13 months maximum;
• cookie consent choices: 6 months;
• incomplete trial requests (activation form): 30 days without progress, then archived, and deleted no later than 3 years after the request.

9. Data security

Prosperian implements appropriate technical and organisational measures to guarantee the security, integrity and confidentiality of personal data and to prevent any unauthorised access, loss, alteration or disclosure.

10. Rights of data subjects

In accordance with the GDPR, you have the following rights:

• right of access;
• right to rectification;
• right to erasure;
• right to object;
• right to restriction of processing;
• right to data portability;
• right to withdraw your consent at any time.

These rights may be exercised by contacting Prosperian using the details indicated below.

11. Exercising your rights

To exercise your rights or ask any question relating to your personal data, you may contact: Prosperian
Email: contact@prosperian.co
Address: 42 rue Ampère, 75017 Paris, France

Proof of identity may be requested in the event of reasonable doubt about the identity of the requester. You also have the right to lodge a complaint with the French data protection authority (Commission Nationale de l'Informatique et des Libertés, CNIL).

Where your data is processed within the platform on behalf of a Prosperian customer, in particular if you are a prospect contacted by that customer, that customer is the data controller and Prosperian acts as a processor. Please address your request to that customer directly. If you do not know who they are, write to Prosperian at the address above: we will forward your request to the customer concerned and tell you who to contact.

12. Cookies

The use of cookies is detailed in the Cookie Policy available at the following address:
https://www.prosperian.co/cookies

13. Amendments to the privacy policy

Prosperian reserves the right to amend this privacy policy at any time.
The version in force is the one published on the website on the date of consultation.