Privacy Policy

1. Who We Are

ProsForge (“we”, “us”, “our”) operates the sales intelligence platform at prosforge.com. This Privacy Policy explains what personal data we collect, why we collect it, how we use it, and your rights over it.

2. Data We Collect

We collect the following categories of data when you use the Service:

• Account data — your name, work email address, organisation, designation, and mobile number, provided during registration.
• Workspace settings — your value proposition, target persona, and preferred outreach tone, used to personalise AI output.
• Usage data — the prospect queries you submit, research outputs, credit usage, feedback signals, and feature interactions.
• Billing data — subscription tier, transaction history, and payment gateway tokens (we never store full card numbers — those are held by Razorpay).
• Technical data — IP address (used for country detection at signup and rate limiting), browser type, device type, and access logs.
• Communications — emails you send to our support team and any feedback submitted in-product.

3. How We Use Your Data

• To deliver the Service — running the research agent, generating drafts, and tracking your credit balance.
• To personalise output — injecting your workspace context into every LLM prompt so results are specific to your product and ICP.
• To process payments — communicating with Razorpay to manage subscriptions and top-ups.
• To send transactional emails — account verification, password reset, billing confirmations, and low-credit alerts. You can opt out of non-essential emails in Settings.
• To monitor and improve the Service — aggregate, anonymised analytics on feature usage, error rates, and agent performance.
• To comply with legal obligations — fraud prevention, tax record-keeping, and responding to lawful requests.

4. Prospect Data

When you research a prospect, ProsForge queries publicly available sources (LinkedIn, company websites, news articles, etc.) on your behalf. The resulting brief is stored in your account so you can review it later.

We do not use prospect data submitted by one user to train models, enrich data sold to third parties, or share it with other users. Your prospect research is private to your account.

5. Data Sharing

We do not sell your personal data. We share data only with the following categories of third-party processors under written data processing agreements:

• Infrastructure — cloud hosting, database, Redis, and object storage providers required to operate the platform.
• Payments — Razorpay, operating under their own privacy policy.
• Email delivery — SendGrid or equivalent, used only to send transactional messages you have requested or consented to.
• Error monitoring — Sentry, used to capture application errors. PII is masked before transmission.
• LLM providers — OpenAI or Google (depending on configuration). Prompts may include your workspace context and prospect input. We do not opt in to model training on your data under provider business terms.

6. Data Retention

We retain your account data for as long as your account is active. Research outputs are retained in your account indefinitely unless you delete them or close your account.

When you delete your account, we soft-delete your record immediately (you cannot log in). All personal data is permanently purged within 30 days, except where we are required to retain records for legal or tax purposes.

7. Your Rights

Depending on your jurisdiction, you may have the following rights over your personal data:

• Access — request a copy of your personal data (available via Settings → Export Data).
• Rectification — correct inaccurate data (update in Settings at any time).
• Erasure — delete your account and all associated data (Settings → Delete Account, or email us).
• Portability — receive your data in a machine-readable format (JSON export available in Settings).
• Objection / Restriction — object to or restrict certain processing. Contact us and we will assess your request within 30 days.
• Withdraw consent — where processing is based on consent (e.g., marketing emails), you can withdraw it at any time without affecting lawfulness of prior processing.

To exercise any of these rights, email privacy@prosforge.com. We will respond within 30 days.

8. Cookies and Tracking

The Service uses only essential technical cookies required to maintain your session. We do not use advertising cookies, cross-site tracking pixels, or third-party analytics scripts that profile your behaviour across other websites.

9. Security

We use industry-standard security practices: passwords are hashed with bcrypt, data in transit is encrypted with TLS, and access to production systems is restricted to authorised personnel. Despite these measures, no system is 100% secure. We will notify you promptly in the event of a breach affecting your personal data, as required by applicable law.

10. Children

The Service is not directed to individuals under 18 years of age. We do not knowingly collect personal data from children. If we become aware that a child’s data has been collected without parental consent, we will delete it promptly.

11. International Transfers

Your data may be processed by our infrastructure and LLM providers in countries other than your own, including the United States. Where applicable (e.g., for EEA users), such transfers are governed by appropriate safeguards such as Standard Contractual Clauses.

12. Changes to This Policy

We may update this Privacy Policy. Material changes will be communicated by email or in-app notice at least 14 days before taking effect. The effective date at the top of this page will always reflect the latest version.

13. Contact

For privacy-related questions, data requests, or complaints, contact our privacy team at privacy@prosforge.com. You also have the right to lodge a complaint with your local data protection authority.