Privacy Policy

Last updated: July 21, 2026

Business Prospector ("Business Prospector," "we," "us") is an off-market business search tool. This policy explains what information we collect when you use businessprospector.co and the Business Prospector application, how we use it, who we share it with, and the choices you have. Business Prospector is operated from the United States.

If you have any questions about this policy or your data, email us at contact@businessprospector.co.

1. Information we collect

Information you give us

• Account details. When you sign up we collect your email address and, if you register with a password, a securely hashed version of that password (we never store passwords in plain text). If you sign in with Google or Apple, we receive your email and a provider account identifier from them.
• Searches and activity. The locations, categories, and search terms you enter, the results and dossiers you view, and outreach drafts you generate.
• Payment information. Paid plans and top-up packs are processed by Stripe. Stripe handles your card details directly; we do not see or store full card numbers. We keep a Stripe customer/subscription identifier and your plan status.
• Outreach profile. If you use outreach features, information you provide for compliance footers (such as a business postal address) and message content you create.

Information we collect automatically

• Usage and metering. We record per-account usage (searches, deep dives, results delivered, provider requests) to enforce plan limits and prevent abuse.
• Analytics. We use first-party analytics rather than a third-party analytics product. For each page view we store the path, the referring site's hostname, any campaign parameters (UTM values), and a daily-rotating, one-way hashed identifier derived from your IP address and browser (a "visitor hash"). We do not store your raw IP address as part of analytics.
• Cookies and similar technologies. See "Cookies" below.

2. Cookies and advertising technologies

• Session cookie. A cookie (named psid) keeps you signed in. It is essential to the service.
• Preference storage. Your theme choice is stored in your browser's local storage.
• Attribution cookie. If you arrive from an ad, we store a first-touch attribution cookie (named bp_at) for up to 90 days so we can understand which campaigns bring in new users. It records campaign identifiers such as UTM values and ad click IDs (for example gclid, fbclid, ttclid).
• Advertising and measurement tags. We may load advertising and conversion measurement tags from Meta, Google, and/or TikTok to measure ad performance and reach relevant audiences. These tags load only when we have enabled a given platform; when enabled, those providers may set their own cookies and receive information such as pages visited and whether you signed up or purchased. Their use of that data is governed by their own privacy policies.

3. How we use your information

• To provide, operate, and secure the service and your account.
• To process payments, manage subscriptions, and enforce plan limits.
• To send transactional email (for example sign-in, billing, and, for free-tier users, occasional re-engagement digests you can opt out of at any time).
• To generate business dossiers and outreach drafts you request.
• To understand traffic, measure advertising, and improve the product.
• To detect, prevent, and respond to fraud, abuse, and security incidents.
• To comply with legal obligations.

4. Business and owner information in results

Business Prospector aggregates and analyzes publicly available business information (such as business listings, websites, and public registries) to help users identify established businesses. Sell-propensity scores and related signals are estimates derived from public signals. They are not statements of fact about any business owner's actual intent to sell, and they are not consumer reports. Users are responsible for how they use the information, including compliance with anti-spam and telemarketing laws (such as CAN-SPAM and TCPA) when conducting outreach.

5. Service providers and sharing

We do not sell your personal information. We share information with service providers who process it on our behalf, and only as needed to run Business Prospector:

• Stripe — payment processing and subscription billing.
• Resend — sending email on our behalf.
• Railway — application hosting and data storage.
• Anthropic — AI processing used to generate business analysis and outreach drafts.
• Meta, Google, and TikTok — advertising and conversion measurement, where enabled.
• Google (Sign-In) and Apple (Sign in with Apple) — optional authentication.
• Business data sources (for example OpenStreetMap, Google Places, and Yelp) — to discover and enrich business listings.
• Twilio — only if you use AI phone-call features.

We may also disclose information if required by law, to enforce our terms, or to protect the rights, property, or safety of Business Prospector, our users, or others. If Business Prospector is involved in a merger, acquisition, or asset sale, your information may be transferred as part of that transaction.

6. Data retention

We keep account and usage information for as long as your account is active and as needed to provide the service, comply with our legal obligations, resolve disputes, and enforce our agreements. You can ask us to delete your account and associated personal data by emailing contact@businessprospector.co. Some records (such as billing records) may be retained where required by law.

7. Your choices and rights

• Access and deletion. Email contact@businessprospector.co to request access to, correction of, or deletion of your personal information. Depending on where you live, you may have additional rights under laws such as the GDPR or the CCPA/CPRA, including the right to opt out of certain data uses; we honor applicable requests.
• Email opt-out. Marketing and re-engagement emails include a one-click unsubscribe link. Transactional emails necessary to operate your account may still be sent.
• Cookies and ad tracking. You can control cookies through your browser settings and opt out of interest-based advertising through the tools offered by Meta, Google, and TikTok. Blocking essential cookies may prevent sign-in.

8. Security

We take reasonable measures to protect your information, including hashing passwords and using encrypted connections. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

9. Children

Business Prospector is a business tool intended for users who are at least 18 years old. We do not knowingly collect personal information from children.

10. Changes to this policy

We may update this policy from time to time. When we do, we will revise the "Last updated" date above. Material changes will be reflected on this page.

11. Contact

Questions or requests about this policy or your data: contact@businessprospector.co.