Privacy policy

Who we are

Prospekt (at prospekt.co.in, app.prospekt.co.in, crm.prospekt.co.in and in the Prospekt Android app) is a product of MYNEXTADDRESS, a sole proprietorship (Udyam registration UDYAM-KR-03-0739672), Nishitas Platinum, 7th Phase, JP Nagar, Bengaluru, Karnataka 560078, India. In this policy, “we” and “us” mean MYNEXTADDRESS.

Prospekt helps businesses, mostly in real estate and hospitality, receive enquiries from their advertising and websites and follow them up: who called whom, when the next call is, and what came of it.

Questions about this policy, or about your data: support@prospekt.co.in.

Two kinds of data, two roles

Your account. When you or your company use Prospekt, we decide how your account details are used. For this data we are the data fiduciary under India's Digital Personal Data Protection Act, 2023.

Leads. The enquiries a company receives in Prospekt (people who filled in its ad forms, called it, or walked in) belong to that company. The company decides why it collects them and what it does with them; we store and process them on its behalf and on its instructions. For this data the company is the data fiduciary and we are its data processor.

What we collect

From people who use Prospekt

• Account details: name, email address, phone number, company, role, and a password if you set one (stored only as a secure one-way hash).
• What you do in Prospekt: the calls you log, remarks, stage changes, follow-ups and visits you schedule, and settings you change.
• Technical details: IP address, device and browser type, app version, sign-in times and error logs, used to keep the service secure and working.
• Notifications: if you allow alerts, a notification token for your device (from Google's Firebase service) so we can tell you about new leads.

About leads, on a company's behalf

• Name, phone numbers, email address, and the answers given in the enquiry form (for example budget, preferred location or unit type).
• Where the enquiry came from: the source (such as Facebook, Instagram, Google Ads, a website or a walk-in), and for ads, the campaign, ad set and ad names.
• What happened next: calls, remarks, stage, the salesperson assigned, and scheduled follow-ups.

Leads reach Prospekt through the connections a company sets up: Meta (Facebook and Instagram) lead forms, Google Ads lead forms, website forms, Google Sheets, file imports, and our API.

Data from Facebook and Instagram (Meta)

A company can connect its Facebook Pages to Prospekt so that leads from its Facebook and Instagram lead ads arrive in Prospekt the moment they are submitted. This needs the company's permission in Facebook, and uses Meta's official APIs.

• What we receive: the list of Pages the person connecting chooses to share, and, for those Pages, the lead form submissions: the answers in the form, when it was submitted, the form name, and the campaign, ad set and ad it came from.
• What we use it for: only to deliver those leads into that company's own Prospekt account, so its team can follow them up. Nothing else.
• What we never do: we don't sell Meta data, use it for advertising, build profiles with it, combine it with other companies' data, or share it with anyone other than the company it belongs to (and the service providers listed below who help us run Prospekt).
• Security: the access keys Facebook gives us are stored encrypted, and are deleted when a Page is disconnected.
• Control: a company can disconnect a Page at any time in Prospekt (Settings, then Lead connections) or in Facebook's own settings. We then stop receiving its leads immediately. How to have the data itself deleted is on the Data deletion page.

Our use of data from Meta also follows Meta's Platform Terms and Developer Policies.

How we use it

• To run Prospekt: deliver leads, assign them to the right person, send reminders and alerts, and show reports.
• To sign you in and keep accounts secure, including sending one-time sign-in codes by email.
• To support you when you ask for help, and to fix problems.
• To improve Prospekt, using usage patterns rather than the contents of anyone's leads.
• To meet legal obligations, such as tax records and lawful requests from authorities.

We don't sell personal data, and we don't use leads or account data to advertise to anyone.

Who we share it with

• Within a company: a company's leads are visible to its own team in Prospekt, according to the roles it sets (for example, salespeople may see only their own leads). Prospekt staff can view a company's account only to set it up or support it.
• Service providers who run parts of Prospekt for us, under confidentiality and data protection terms: web and database hosting (Hostinger), email delivery, device notifications (Google Firebase), and, when paid plans are billed online, a payment processor. Card and bank details are handled by the payment processor; we never see or store them.
• Services a company connects, such as Meta or Google, receive or send data only as that connection needs. A company can also send its own leads to its own systems using Prospekt's API or webhooks.
• The law: when required by law, court order, or a lawful request by a government authority.
• A change of ownership: if the business behind Prospekt is reorganised, merged or transferred (for example, into a new company), data moves with it under this policy, and we'll tell you.

Where it is stored, and how long

Prospekt runs on servers operated by our hosting provider. Data may be stored or processed outside India only where Indian law allows it.

• Leads are kept for as long as the company keeps them in Prospekt. When someone deletes a lead, it disappears from the account at once and is permanently erased 30 days later (the gap lets a mistaken delete be undone), together with its history and follow-ups.
• Raw copies of incoming leads, kept to troubleshoot connections, are erased after 90 days.
• Accounts are kept while they are in use. When a company closes its account, its data is erased within 30 days of the request, after giving it the chance to export its leads.
• Notifications are erased after 60 days; sign-in codes expire after 10 minutes.
• Records the law requires us to keep, such as invoices and security logs, are kept for as long as the law requires.

How we protect it

• All traffic to Prospekt is encrypted (HTTPS).
• Passwords, API keys and sign-in tokens are stored only as one-way hashes; connection keys (such as Facebook's) are encrypted.
• Access is limited by role, and every company's data is kept separate from every other's.
• Sign-in uses one-time codes sent to your email, or a password you choose.

No system is perfectly secure. If a breach affecting personal data happens, we will inform the affected companies and people, and the authorities, as the law requires.

Your rights

Under the Digital Personal Data Protection Act, 2023, you can ask us to:

• tell you what personal data we hold about you and how it is used;
• correct or complete it if it's wrong or incomplete;
• erase it, where it is no longer needed and the law doesn't require us to keep it;
• withdraw consent you have given, for the future;
• nominate someone to exercise these rights for you if you are unable to;
• resolve a grievance about how your data is handled.

Write to support@prospekt.co.in. We may need to confirm who you are before acting. We reply within 30 days. If your details are a lead held by a company, we'll work with that company to act on your request.

If you're not satisfied with our answer, you can complain to the Data Protection Board of India.

Children

Prospekt is a business tool for adults. It isn't meant for anyone under 18, and we don't knowingly collect children's data. If you think a child's details are in Prospekt, write to support@prospekt.co.in and we'll delete them.

Cookies and storage

The Prospekt app stores your sign-in session and a few preferences (like which columns you show) on your own device, so you stay signed in. We don't use advertising or tracking cookies.

Grievance Officer

Under the Information Technology Act, 2000 and the rules made under it, you can contact our Grievance Officer about any complaint on how your data is handled:

We acknowledge complaints within 24 hours and resolve them within 15 days.

Changes to this policy

If we change this policy in a way that matters, we'll say so in Prospekt and by email before the change takes effect. The date at the top shows when it last changed.