LEGAL

Privacy Policy

English translation provided for convenience. The French version is legally binding and prevails.

1. Introduction

This privacy policy informs users of the websites operated by Prosperian under prosperian.co (including https://sales.prosperian.co and the corporate site https://www.prosperian.co) and of the Prosperian platform available at https://app.prosperian.co how their personal data is collected, used and protected.

It covers both the data of website visitors and the data processed within the platform on behalf of its customers, including data sent to the integrations a customer enables themselves.

Prosperian undertakes to process personal data in compliance with Regulation (EU) 2016/679 of 27 April 2016 (GDPR) and the amended French Data Protection Act.

2. Data controller

The controller of the personal data is: Prosperian
A French société par actions simplifiée (SAS)
Registered office: 42 rue Ampère, 75017 Paris, France
RCS Paris 942 670 001
Contact email: contact@prosperian.co
Phone: 07 43 60 76 02

3. Personal data collected

Prosperian may collect the following categories of data:

  • identification data: last name, first name, email address, phone number, company, job title;
  • browsing data: IP address, browser type, pages viewed, browsing duration, referral source;
  • commercial data: contact requests, email exchanges, information relating to a project or a professional need;
  • technical data: cookies, trackers, online identifiers;
  • partner (affiliate) programme member data: payment details, tax information where applicable, history of referrals and commissions.

Prosperian neither collects nor requests data deemed "sensitive" within the meaning of Article 9 of the GDPR. Messages written freely by third parties, in particular prospects' replies, may nonetheless contain such data without Prosperian having requested it: this content is neither sought, nor analysed, nor used to categorise individuals.

4. Purposes of processing

Personal data is collected for the following purposes:

  • responding to contact and information requests;
  • managing commercial and pre-contractual relationships;
  • improving the website and the user experience;
  • measuring audience and analysing browsing;
  • identifying and prospecting the companies interested in Prosperian's services;
  • ensuring the security of the website;
  • carrying out commercial prospecting operations, where the regulations allow it;
  • running the partner programme: attributing sign-ups to partners, calculating and paying their commissions, preventing abuse.

5. Legal bases for processing

The processing carried out by Prosperian relies on the following legal bases:

  • the user's consent (forms, non-essential cookies);
  • the performance of pre-contractual or contractual measures;
  • Prosperian's legitimate interest (security, website improvement, commercial management, identifying the companies that visit the site);
  • compliance with legal obligations.

6. Recipients of the data

Personal data is intended for Prosperian's internal departments. It may also be transmitted to technical service providers acting as processors, in particular:

  • Vercel (website hosting);
  • Supabase (database, hosted in the European Union);
  • Axeptio (consent collection and storage);
  • Calendly (demo appointment booking);
  • Snitcher B.V. (identifying the companies that visit the site, data hosted in the European Union, in Frankfurt);
  • Meta, Google and LinkedIn (advertising conversion measurement, after consent);
  • Affonso (partner programme: attributing sign-ups and subscriptions to the partner who referred them, partner accounts, calculating and paying commissions);
  • Slack Technologies, LLC (Salesforce group) and its affiliates (prospecting notifications, when the customer enables the Slack integration from the platform);
  • Twilio Inc. (telephony and delivery of WhatsApp Business messages, when the customer enables these features);
  • WhatsApp, a Meta group service (delivery of WhatsApp messages);
  • Unipile (connection of the platform users' personal LinkedIn and WhatsApp accounts);
  • Inngest, Inc. (running the platform's background tasks, including sending and receiving messages);
  • OpenAI, L.L.C. (the platform's artificial intelligence processing, including assisted message writing and the classification of replies received, for example to stop a campaign or detect a request not to be contacted again).

When you enter your website address and then your details in the activation form, the information submitted (website address, first name, last name, work email address, date of the request and origin of the visit) is recorded in Prosperian's internal customer relationship management tool, hosted on Supabase within the European Union. It is used to process your trial request and, where applicable, to contact you if your sign-up was not completed.

When a customer enables the Slack integration from the platform, Prosperian posts campaign notifications into the channels that customer has chosen: new leads, confirmed meetings, sourcing lists and finished enrichments, reply drafts submitted for their approval, and the results of the commands they run from Slack. These messages may contain prospects' personal data (name and company) and the content of the messages written to them. The integration never reads the workspace's message history: channel read permissions are used only to present the list of channels at the moment of choosing one, and the app reads only the replies written in the thread of its own messages, so that the customer can correct a draft without leaving Slack. The customer can remove the integration at any time from their settings or from their Slack workspace: in either case the access token and the channel configuration are deleted immediately.

When a customer uses WhatsApp from the platform, Prosperian processes on its behalf the WhatsApp messages exchanged with its prospects: phone number, WhatsApp profile name, content, date and status (sent, delivered, read) of the messages sent and received, and the history of the recipient's agreement (date, origin and scope of the agreement, opt-out requests). The customer can use WhatsApp in two ways: with the personal WhatsApp account of one of its users, connected through Unipile, or with its company's WhatsApp Business number, connected through Twilio, a Meta-approved solution provider. This data is used only to send the messages the customer has itself written, scheduled or approved, to display replies in its inbox, to stop its campaigns when a prospect replies, and to honour opt-out requests. WhatsApp Business message templates are sent only to people who have agreed to be contacted by the customer on WhatsApp; a "STOP" reply ends any further sending to that number. The customer can disconnect WhatsApp at any time from its settings.

When you arrive on the site through a link carrying a referral parameter (via, aff, atp or affonso), your browser sends Affonso, through Prosperian's server, your IP address, your browser type, the referring page, the partner identifier and the sub-identifiers (sub1 to sub5) present in the link, the campaign parameters (UTM) and the ad click identifiers present in the address, in order to record the click and attribute it to the partner concerned. None of this data is sent during a visit without a referral parameter.

When you create an account after following a partner's link, Prosperian sends Affonso your email address, your account's internal identifier and the identifier of the click on the partner's link. This data is used solely to attribute your sign-up and your subscription to that partner and to calculate their commission. This processing is based on Prosperian's legitimate interest in running its partner programme. No account data is sent to Affonso for an account created without a partner link.

When you join the partner programme, you sign up on the Affonso portal. Affonso, which operates this portal on behalf of Prosperian and hosts its platform in the European Union (Frankfurt), processes on it your identification and contact data, the information needed to pay your commissions (payment details and, where applicable, tax information) and the history of your referrals and commissions. This data is used to manage your participation in the programme, attribute sign-ups to your link, calculate and pay your commissions and prevent abuse, in particular self-referral. This processing is based on the performance of the contract between you and Prosperian under the programme and, for tax and accounting records, on compliance with Prosperian's legal obligations. If the portal is no longer available, Prosperian processes these payment details directly to pay the commissions due by bank transfer.

When you visit the site, Snitcher processes your IP address, the full address of the pages you view (campaign parameters included), the referring page, the time spent on the site, technical characteristics of your browser and device, and the domain name of email addresses typed into forms (never the full address or the form contents), along with a random identifier kept in the snitcher_device_id cookie (1 year) and a session identifier kept in your browser (30 minutes after the last activity). The IP address is used only to determine the company it belongs to: Prosperian sees which companies visited the site and what they looked at, without access to your IP address. Prosperian bases this processing on its legitimate interest in identifying and prospecting the companies interested in its services; you can exercise your right to object by writing to contact@prosperian.co, or block scripts from snitcher.com in your browser. Cookie details are in the cookie policy (section 3.5).

Prosperian does not sell or rent users' personal data.

7. Data transfers outside the European Union

Some service providers used by Prosperian, in particular Vercel, Calendly, Slack, Twilio, Meta (including WhatsApp), Inngest, OpenAI, Google and LinkedIn, may process data outside the European Union. These transfers are governed by appropriate safeguards compliant with the GDPR, in particular through the implementation of standard contractual clauses approved by the European Commission or through adequacy decisions.

8. Data retention period

Personal data is kept only for the time necessary for the purposes for which it is collected:

  • contact data: up to 3 years after the last exchange;
  • commercial data: for the duration of the contractual relationship, then archived in accordance with legal obligations;
  • partner programme member data: during your participation in the programme, then until the last commissions due have been paid or settled; the accounting records relating to the commissions paid are then archived for the legal retention period;
  • browsing data and cookies: 13 months maximum;
  • WhatsApp messages exchanged on behalf of a customer: for the duration of its contract, then deleted when it ends; the history of WhatsApp agreements and opt-out requests is kept for up to 3 years after the last exchange, so that the agreement can be proven and opt-out requests continue to be honoured;
  • cookie consent choices: 6 months;
  • incomplete trial requests (activation form): 30 days without progress, then archived, and deleted no later than 3 years after the request.

9. Data security

Prosperian implements appropriate technical and organisational measures to guarantee the security, integrity and confidentiality of personal data and to prevent any unauthorised access, loss, alteration or disclosure.

10. Rights of data subjects

In accordance with the GDPR, you have the following rights:

  • right of access;
  • right to rectification;
  • right to erasure;
  • right to object;
  • right to restriction of processing;
  • right to data portability;
  • right to withdraw your consent at any time.

These rights may be exercised by contacting Prosperian using the details indicated below.

11. Exercising your rights

To exercise your rights or ask any question relating to your personal data, you may contact: Prosperian
Email: contact@prosperian.co
Address: 42 rue Ampère, 75017 Paris, France

Proof of identity may be requested in the event of reasonable doubt about the identity of the requester. You also have the right to lodge a complaint with the French data protection authority (Commission Nationale de l'Informatique et des Libertés, CNIL).

Where your data is processed within the platform on behalf of a Prosperian customer, in particular if you are a prospect contacted by that customer, that customer is the data controller and Prosperian acts as a processor. Please address your request to that customer directly. If you do not know who they are, write to Prosperian at the address above: we will forward your request to the customer concerned and tell you who to contact.

12. Cookies

The use of cookies is detailed in the Cookie Policy available at the following address:
https://sales.prosperian.co/cookies

13. Amendments to the privacy policy

Prosperian reserves the right to amend this privacy policy at any time.
The version in force is the one published on the website on the date of consultation.