Privacy Policy

This Privacy Policy describes how Tactical Edge dba Prospectory ("Prospectory", "we", "our", or "us") collects, stores, uses, discloses, and protects personal data in connection with the Prospectory platform, website, and related services.

Our services are designed for businesses and are not intended for personal or household use. We generally treat personal data covered by this Privacy Policy as relating to individuals acting as business representatives, including customer personnel, users, prospects, partners, and website visitors.

You are not legally required to provide personal data to us. If you do not want personal data processed by Prospectory or our service providers, you should not provide it to us, interact with our website, or use our services.

This Privacy Policy covers three primary categories of personal data:

When we use the terms "personal data" or "personal information", we mean information that identifies, relates to, describes, is reasonably capable of being associated with, or could reasonably be linked to an individual. This does not include aggregated or de-identified information maintained in a form that is not reasonably capable of being linked to an individual.

Prospectory does not intentionally collect or process sensitive personal information concerning sexual orientation, ethnicity, religious affiliation, refugee status, health, or personal finances unless a customer or individual provides such information contrary to our intended use of the services.

We use personal data for business and commercial purposes, including:

• To provide, operate, maintain, enhance, and support our services
• To manage customer accounts, authentication, security, billing, contracting, and customer administration
• To provide customer support, diagnose or fix technical issues, train customer-facing teams, and improve service reliability
• To personalize the services, remember user preferences, localize experiences, and make workflows easier to use
• To analyze how individuals use and interact with our website and services, including through analytics, product telemetry, and AI or machine learning capabilities used to improve our offerings
• To facilitate marketing, advertising, event, and sales operations, including contextual, behavioral, and interest-based advertising where permitted by law
• To contact customers, users, and prospects with service-related messages and, where permitted, promotional communications
• To prevent, detect, investigate, and mitigate fraud, abuse, security incidents, illegal activity, and violations of our terms
• To create aggregated, anonymized, de-identified, or pseudonymized data that does not identify an individual
• To comply with contracts, laws, regulations, legal process, and enforceable governmental requests
• To enforce our terms, resolve disputes, protect our rights, and protect the rights, safety, and property of Prospectory, customers, users, prospects, and others
• For any other lawful purpose disclosed to you or to which you consent

When we process de-identified information, we will not attempt to re-identify it except as permitted by applicable law.

Where laws such as the EU GDPR or UK GDPR require a legal basis for processing, we rely on the following bases as appropriate:

• Performance of Contract: To provide and maintain the services, process payments, manage accounts, authenticate users, provide support, and fulfill agreements with customers.
• Legitimate Interests: To improve our services, secure our systems, prevent fraud, analyze product performance, support users, conduct B2B marketing and sales activities, and protect our business, customers, and services.
• Consent: For optional cookies, certain marketing communications, certain analytics or advertising tools, and other activities where consent is required by applicable law.
• Legal Obligation: To retain required records, respond to lawful requests, comply with tax, accounting, employment, privacy, and regulatory obligations, and protect legal rights.

You may withdraw consent at any time by using the cookie preference tools on our website, following unsubscribe instructions in communications, or contacting privacy@prospectory.ai.

We and our authorized service providers may maintain, store, and process personal data in the United States, Europe, and other regions as reasonably necessary to provide the services or comply with law.

Where personal data is transferred from the European Economic Area, Switzerland, the United Kingdom, or another jurisdiction with transfer restrictions, we use appropriate safeguards where required. These may include:

• Adequacy decisions issued by competent authorities
• Standard Contractual Clauses approved by the European Commission or other recognized transfer mechanisms
• UK transfer addenda or equivalent UK safeguards
• Data Privacy Framework participation where maintained and applicable
• Contractual, technical, and organizational safeguards, including encryption, access controls, and vendor review

If we rely on a transfer mechanism that permits access to supporting terms, you may request additional information by contacting privacy@prospectory.ai.

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, unless a longer retention period is required or permitted by law, contract, dispute resolution, security, or legitimate business needs.

We determine retention periods based on legal and regulatory obligations, contractual commitments, customer instructions, legitimate business needs, consent and communication preferences, and the sensitivity and volume of the data.

Typical retention periods include:

• Customer Data: Retained for the duration of the customer relationship and up to 3 years after termination, unless the applicable agreement, law, or customer instruction requires a different period
• Usage Data: Retained for up to 12 months for analytics, security, and service improvement purposes, unless longer retention is required for security, legal, or operational reasons
• Prospect Data: Retained for up to 18 months from the last meaningful interaction, unless consent, legitimate business needs, legal requirements, or opt-out preferences require a different period
• Financial and transaction records: Retained as required for tax, accounting, and compliance purposes, which may be up to 7 years or longer where required by law

We review retention practices periodically. Personal data that is no longer necessary is deleted, anonymized, or de-identified in accordance with our policies and applicable law.

We may disclose personal data in the following ways:

Google user data obtained through Google APIs, if any, is not sold or shared for advertising purposes.

We and our service providers use cookies, pixels, local storage, and similar technologies to enable and improve our services, remember preferences, measure website performance, perform analytics, personalize experiences, and support marketing operations.

Some cookies are necessary for the website and services to function and cannot be disabled through our cookie tools. Optional cookies may include analytics and marketing technologies. Depending on your location, we may request consent before using optional cookies.

You can manage cookie preferences through the Cookie Preferences page at /cookie-preferences/. You can also control cookies through browser settings. If you clear cookies, use a new device, or use a different browser, you may need to reset your preferences.

Some browsers transmit "Do Not Track" signals. Because there is no consistent industry standard for responding to those signals, we currently do not respond to them.

We may send service and promotional communications by email, phone, SMS, product notification, or other available channels.

We implement technical and organizational measures designed to protect personal data from unauthorized access, use, disclosure, alteration, loss, or destruction. These measures include:

• Encryption in transit and at rest where appropriate
• Role-based access controls and authentication
• Security monitoring and vulnerability management
• Vendor review and contractual controls
• Employee privacy and security training
• Data minimization and retention controls

No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

If we become aware of a data breach affecting personal data, we will investigate and take appropriate steps to contain, remediate, and document the incident.

Where required by applicable law or contract, we will notify affected customers, individuals, regulators, or other relevant parties. Notifications may include the nature of the breach, categories of data affected, likely consequences where known, measures taken or proposed to address the breach, and recommended steps to reduce potential harm.

If you suspect a data breach involving Prospectory, contact privacy@prospectory.ai.

Depending on your jurisdiction, you may have rights regarding your personal data. These may include:

• Accessing personal data we hold about you
• Requesting correction of inaccurate or incomplete data
• Requesting deletion of personal data, subject to legal and contractual exceptions
• Requesting restriction of processing
• Objecting to processing, including processing based on legitimate interests or direct marketing
• Requesting data portability
• Withdrawing consent where processing is based on consent
• Opting out of certain sales, sharing, targeted advertising, or profiling activities where applicable
• Appealing a decision where required by applicable state privacy laws

To exercise privacy rights, contact privacy@prospectory.ai or dpo@prospectory.ai. We may ask you to verify your identity before processing a request, including by confirming information that matches our records. Authorized agents may be required to provide proof of authorization.

We aim to respond within 30 days, or sooner where required by law. If more time is needed, we will notify you as required.

For purposes of the California Consumer Privacy Act, as amended by the California Privacy Rights Act, and similar U.S. state privacy laws, we may collect the following categories of personal information:

• Identifiers
• Customer records information
• Internet or other electronic network activity information
• Professional or employment-related information
• Commercial information
• Approximate geolocation data
• Inferences
• Audio, electronic, visual, or similar information where communications are recorded or analyzed

We collect, use, and disclose these categories for the business and commercial purposes described in this Privacy Policy. In the past 12 months, we may have disclosed these categories to service providers, partners, service integrations, event sponsors, legal and compliance recipients, related entities, and parties involved in corporate transactions.

Some U.S. privacy laws define certain sharing of internet activity, device data, analytics, advertising, or similar data through cookies as a "sale" or "sharing" of personal information. In the past 12 months, we may have sold or shared internet or electronic network activity information, approximate geolocation data, commercial information, and inferences with analytics or advertising service providers as those terms are defined by applicable law.

Prospectory does not knowingly sell or share personal information of individuals under 16. We do not discriminate against individuals for exercising privacy rights.

You may opt out of sale or sharing by using the Cookie Preferences page at /cookie-preferences/ and selecting "Do Not Sell or Share My Personal Information" or by contacting privacy@prospectory.ai.

If you are located in the European Economic Area, the United Kingdom, or Switzerland, you may have rights under applicable data protection laws, including rights to access, correct, delete, restrict, object, port, and withdraw consent.

Where Prospectory acts as a controller, you may exercise these rights by contacting privacy@prospectory.ai or dpo@prospectory.ai. Where Prospectory acts as a processor on behalf of a customer, we may direct your request to the relevant customer or assist the customer in responding, as required by law and contract.

You may also have the right to lodge a complaint with your local supervisory authority.

Privacy laws often distinguish between a controller, which determines the purposes and means of processing personal data, and a processor, which processes personal data on behalf of a controller.

Prospectory is generally the controller of Prospect Data. With respect to Prospect Data, we determine the purposes and means of processing as described in this Privacy Policy.

Prospectory is generally a processor of Customer Data. Customer Data is processed on behalf of the relevant customer, who is generally the controller or business responsible for determining whether and how to use the services and for providing any required notices or obtaining any required consents.

Prospectory may act as both controller and processor for User Data. Some User Data is processed by Prospectory for its own business purposes, and some User Data may be included in Customer Data processed on behalf of a customer.

Customers are responsible for ensuring that their use of the services complies with applicable laws, including providing appropriate notices, obtaining required consents, and responding to data subject requests for data they control.

We use third-party providers to support hosting, payment processing, support, community, communications, analytics, CRM, security, and AI-enabled functionality. Representative providers may include:

• Amazon Web Services (AWS): Cloud hosting and infrastructure
• Stripe: Payment processing
• Zendesk: Customer support
• Circle.so: Community services
• OpenAI: AI model services
• Analytics, advertising, CRM, communications, enrichment, and security providers: Business operations, product analytics, marketing, customer engagement, and protection of the services

Providers may change over time. We select providers based on operational need, contractual commitments, security posture, and data protection requirements.

Our services are not directed to children under 16, and we do not knowingly collect personal data from children under 16.

If we learn that a child under 16 has provided personal data to us, we will take reasonable steps to delete it. If you believe we may have collected such data, contact privacy@prospectory.ai.

If you share content with us or about us on social media, that content may include personal information and may become publicly available. Such activity is subject to the privacy practices of the relevant social media platform, not this Privacy Policy.

Our website and services may contain links to third-party websites or services. We are not responsible for the privacy practices of third parties. We encourage you to review the privacy policies of any third-party websites or services you use.

This addendum summarizes how Prospectory processes personal data for purposes of GDPR, UK GDPR, CCPA, and similar privacy frameworks.

For privacy-related inquiries, rights requests, complaints, or questions about this Privacy Policy, contact:

We will respond to requests within the time required by applicable law.

We may update this Privacy Policy from time to time by posting an updated version on our website. The updated version will become effective on the date it is posted unless a later date is stated.

If we make material changes that materially affect your rights or how we process personal data, we will provide notice as required by law or through reasonable available channels. Your continued use of the services after an updated policy becomes effective signifies acceptance of the updated policy.