Last updated: 5 September 2026
This policy explains what ProspectGrid does with personal data: what we hold about you as a visitor or a customer, what passes through the service when you run a search, and what you can ask us to do about either.
ProspectGrid is owned and operated by Yevhen Lysenko (“ProspectGrid”, “we”, “us”, or “our”), who provides the ProspectGrid website and related services described in this Privacy Policy. For privacy-related questions or requests, contact us at privacy@getprospectgrid.com. Additional legal and merchant information may be provided where required by applicable law, including during checkout, billing, invoicing, or upon a valid legal request.
ProspectGrid is a search tool, so two very different sets of personal data pass through it. They are not governed by the same rules, and the rest of this policy keeps them apart.
Which role we hold depends on the data, not on the customer. To the extent we process personal data solely on your behalf, you act as the controller and we act as your processor. For personal data that we process for our own purposes — account administration, security, fraud prevention, analytics and compliance — we act as a controller. Our Terms of Use say the same thing in the language of obligations.
We do not sell personal data, we do not share it for advertising, and we run no advertising on this site.
A search asks the Google Places API for businesses matching what you typed. Where enrichment is enabled, the service then visits each business’s own public website and reads the contact details published there — email addresses, social profiles and, where the site names one, the name, role, email address and phone number of a person to contact. The results are scored and returned to you in your browser, or as a file you download.
Everything in a result comes from the Google Places API or from pages that business published itself. We do not buy contact data, and we do not compile profiles of individuals beyond what a search returns.
The four things a search involves are not kept on the same footing:
To the extent we process the personal data a result contains solely on your behalf, you act as the controller and we act as your processor: we handle it to give you the results you asked for, on your instructions, and for no purpose of our own. That makes some things your responsibility rather than ours — having a lawful basis for holding and using business contact details, telling people how you got them where the law requires it, honouring their objections, and following the marketing rules that apply where you and they are.
If you are a person whose details appeared in someone’s search results and you want them removed, write to us at privacy@getprospectgrid.com. Because we do not keep the results a search returns, there is normally nothing on our side to delete. Where we can identify the customer who ran the search, we may pass the request on to them, since any retained copy would be held by that customer, who acts as the controller of that data. Details a business publishes on its own website, or that sit in its Google listing, have to be changed at that source.
Where applicable, our processing of personal data on your behalf is subject to applicable data protection requirements and any data processing agreement entered into between you and ProspectGrid.
Subscriptions are sold and processed by Paddle, which acts as the merchant of record. Card details are entered on Paddle’s side: the full card number and security code are never sent to or stored by us. What we hold is the plan, its status and renewal dates, the Paddle identifiers for the customer, subscription and transaction, and a copy of the billing events Paddle sends us, which we keep so that a billing dispute can be answered from what the provider actually sent. Those events can include limited payment metadata, such as the card brand, its last four digits and its expiry date. Paddle’s checkout runs in your browser from Paddle’s own script, and Paddle handles payment-related information as a controller in its own right under its privacy policy.
We use cookies and similar technologies that are necessary for authentication, security and operation of the Service. If you choose to stay signed in, we may use a persistent authentication cookie. We also use authentication and session-security measures designed to reduce unauthorised access.
We do not use advertising or analytics cookies, and we do not run third-party trackers on our own pages. Paddle’s checkout is loaded from Paddle and may set or read storage of its own under Paddle’s policies. You can block cookies in your browser, though signing in may not work without the cookies the Service needs.
Some service providers may process information in countries other than the country where you are located. Where required by applicable law, we use appropriate safeguards for such transfers.
We use reasonable technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse or alteration, including measures designed to protect credentials in transit and at rest and to limit access to account and service data. No method of transmission or storage is completely secure, and we cannot guarantee absolute security. Where a breach affects your personal information, we provide notice as required by applicable law.
Depending on where you live and the law that applies to you, you may have the right to ask for access to the personal data we hold about you, to have it corrected or deleted, to restrict or object to how we use it, to receive it in a portable form, to withdraw any consent you gave where we rely on consent, and to appeal or complain to a supervisory authority.
We do not sell personal information, and we do not share it for cross-context behavioural advertising. Where applicable law provides such protection, exercising your privacy rights will not result in unlawful discriminatory treatment.
Write to privacy@getprospectgrid.com. We will respond to valid privacy requests within the timeframe required by applicable law, and we may need to confirm who you are first.
The Service is intended for business users and is not directed to children. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, contact us so that we can review the situation and take any appropriate action.
We may update this Privacy Policy as the Service changes. The date at the top shows when it was last updated. Where required by applicable law, we will provide additional notice of material changes.
ProspectGrid
privacy@getprospectgrid.com