Who this is between
This agreement is between the company that uses Prospekt (“you”, the data fiduciary) and MYNEXTADDRESS, a sole proprietorship (Udyam registration UDYAM-KR-03-0739672) (“we”, the data processor). It forms part of our Terms of Service and applies to the personal data in the leads your company keeps in Prospekt (“lead data”): names, phone numbers, email addresses, form answers, messages, call logs and recordings, and the notes your team adds.
Your team's own account details are covered by our Privacy policy, where we are the data fiduciary.
We act on your instructions
- We process lead data only to provide Prospekt to your company, as your settings and your team's actions direct: receiving leads, assigning them, reminders, messages and calls you set up, reports, exports, and support you ask for.
- We don't sell lead data, use it for our own marketing or advertising, combine it with other companies' data, or use it to train AI models.
- If we believe an instruction breaks the law, we'll tell you and may decline to carry it out.
Your responsibilities
- You decide why lead data is collected and how it is used, and you are responsible for having a lawful basis for it: giving people a notice, getting consent where the law needs it, and honouring withdrawals of consent.
- You keep lead data accurate, and don't put children's data or data you have no right to hold into Prospekt.
- You respond to the people in your leads when they exercise their rights. We'll help, as below.
Our people
Only Prospekt staff who need lead data to set up, support or run the service can reach it, and they are bound to keep it confidential.
Security
- All traffic is encrypted (HTTPS); passwords, keys and tokens are stored as one-way hashes, and connection keys are encrypted.
- Each company's data is kept separate, and access inside a company follows the roles your admins set.
- Sign-ins, exports and permission changes are logged; data is backed up daily.
Sub-processors
You agree that we may use these service providers to process lead data for us, each under confidentiality and data protection terms:
- Hostinger: web and database hosting.
- Google Firebase: notifications to your team's devices.
- Meta (Facebook, Instagram, WhatsApp Business Platform): receiving lead ads and sending and receiving WhatsApp messages, when you connect them.
- AiSensy: WhatsApp lead alerts to your team, when switched on.
- Exotel: business calling, when you connect it.
- Anthropic and other AI providers your company chooses: PROSPEKT AI features, only when AI is switched on.
- Sarvam: transcribing voice notes, when used.
- Our email delivery provider: sign-in codes, alerts and reports.
We'll tell you in Prospekt or by email at least 15 days before adding a new sub-processor of lead data, so you can object.
If something goes wrong
If we become aware of a personal data breach affecting your lead data, we'll tell you without undue delay, and in any case within 48 hours, with what we know and what we're doing about it, so you can meet your own duty to inform the Data Protection Board of India and the people affected. We'll help you with that and take reasonable steps to limit the harm.
Helping with people's requests
If someone asks us about their data in your leads, we'll pass the request to you and, where it's clear, help carry it out. Your admins can find, correct, export and delete a lead's data themselves in Prospekt; for anything else, write to support@prospekt.co.in.
Where data is processed
Lead data is stored by our hosting provider and may be processed outside India by the sub-processors above, only where Indian law allows it.
Keeping and deleting
- Deleted leads are erased permanently 30 days after deletion, as set out in our Privacy policy.
- When your company's account is closed, you can export your leads first; we then delete lead data within 30 days, except what the law requires us to keep.
Checking our work
On reasonable written request, once a year, we'll answer your questions about how we protect lead data and share the information you need to show that you meet your obligations, without exposing other companies' data or our security details.
Everything else
Responsibility and its limits under this agreement are as set out in the Terms of Service. If this agreement and the Terms differ about lead data, this agreement comes first. It lasts as long as your company uses Prospekt and while we hold any of its lead data.