Privacy Policy
This notice describes the current private preview. Operator identity and a dedicated privacy contact are pending confirmation. Hosting-provider practices and retention must be verified before this notice is finalized for public launch.
1. What this notice covers
This notice covers ProspectDog's landing page, onboarding, sample dashboard, Terms page, and this Privacy page. It distinguishes what the application code does from data processing by the services that host and deliver it. It does not describe a live prospecting or email service, because those features are not connected.
2. Information and where it goes
Onboarding collects your offer, specialty, ideal client, target market, project-value preference, brief time/time zone, target prospects per brief (5–10), and plan preference. Its unfinished local draft stays in this browser until cleared, synced, or treated as expired when read after seven days of inactivity. Browser storage is not guaranteed to delete itself in the background at the deadline.
Optional account sync uses the site-specific user ID supplied by ChatGPT authentication. Identity email and optional name support the signed-in experience. The profile table stores the site-specific user ID, profile fields, and update timestamp.
| Data | Processing | Retention/control |
|---|---|---|
| Search query, mock results, and run identifier | Submitted to the ProspectDog backend. Signed-in searches are saved with the authenticated user ID and timestamp. Anonymous searches return fixtures without account persistence. | Saved runs stay until you delete workspace data. History displays the most recent 20; older records are not automatically deleted. |
| Shortlisted leads, edited drafts, and fit ratings | Explicit signed-in changes are saved in account-scoped database rows. Anonymous changes stay in page memory. | Retained until replaced or workspace deletion. Clear local view alone does not delete account records. |
| Email digest and account email address | Each signed-in search prepares and stores an HTML/text email snapshot addressed to the authentication-provider email. No delivery provider receives it. | Retained until workspace deletion. Copied or downloaded versions are controlled by your device. |
| Clipboard and .eml download | Only when requested, email or draft text is copied or downloaded to your device. | Device/browser management; account deletion cannot remove these separate copies. |
| Technical requests and font delivery | Hosting and authentication infrastructure may process IP addresses, request metadata, access records, and security logs. Google Fonts receives connection data for font requests. | Provider-controlled retention and any backup retention remain to be verified before public launch. |
The active application records can be deleted using the controls described below. Provider logs and backups may follow separate retention. We do not claim those are deleted immediately when an active database row is removed.
3. Optional measurement and Meta Pixel
Privacy choices lets you allow or decline usage measurement and advertising tracking, and withdraw later. The choice is stored in this browser. Global Privacy Control or Do Not Track disables this optional tracking. Account functionality does not depend on consent.
With permission, opening the signed-in dashboard records your first measured open and returns on elapsed days 2, 7 and 14 in account-scoped database records. Events measure product visits, not email opens. A trial event is reserved for a future verified trial integration; onboarding and demo searches do not start a trial. These records remain until you withdraw using Privacy choices; deletion requires a successful connection and sign-in for the relevant account. Withdrawing on one browser does not change choices on another.
The Meta Pixel integration is installed but disabled until the operator configures a Pixel ID. When configured and allowed, it loads Meta's script and sends page views and the named events trial_started, day2_open, day7_open and day14_open. Trial starts also map to Meta's standard StartTrial event. Page URLs, browser/device and connection information, advertising identifiers and cookies may be processed by Meta. Our event parameters do not include prospect queries, lead data, message drafts or account emails; automatic advanced matching is not enabled. The pixel is skipped on pages containing URL query strings or fragments. Meta may associate activity with its own user accounts and process it under its policies. See Meta's Privacy Policy.
The browser also stores event markers to reduce repeat reporting. Withdrawing revokes future pixel tracking on this page and reloads it; it does not recall data already received by Meta. Provider retention and account controls apply. Private-site hosting and authentication may set their own cookies.
4. AI, prospect data, and integrations
All displayed prospects and source descriptions are fictional fixtures supplied by the page or the backend mock search adapter. The app does not call Exa, an email-verification service, a generative AI API, a CRM, or an email provider. Optional Meta Pixel behavior is described above. Profile settings do not authorize a future integration. Adding live prospect discovery, scheduled processing, sending, Lemon Squeezy payments, analytics, or further cloud storage will require a reviewed notice describing the actual new data flow before activation.
5. Sharing and service providers
Onboarding is transmitted on explicit account sync, including the return from sign-in initiated for saving. Signed-in queries, result snapshots, lead changes, saved drafts, ratings, and generated email previews are also stored when you use those controls. The application does not sell or share your profile with advertising partners or data brokers. Hosting and font providers still receive the connection data needed for their services. This notice does not claim that visiting a hosted page produces no server logs.
The preview is delivered through ChatGPT Sites and its hosting infrastructure. For provider-level practices, consult OpenAI's Privacy Policy and Cloudflare's Privacy Policy. For font delivery, see Google Fonts privacy information. These links do not establish that every category in a provider's general policy is collected by this app.
6. Your controls and requests
Use Clear local draft in onboarding to remove its browser draft. Delete saved profile removes the active account onboarding profile. Use Delete saved searches, leads & email previews in History to delete the active prospect workspace, including message drafts, ratings and email-preview records. Workspace deletion does not delete the separate onboarding profile. Clear local view or reloading only resets local interface state.
Use the copy and download controls to obtain the displayed email brief; manage those files and your clipboard separately. To raise a privacy request during this private preview, contact the person who provided access through your existing channel. Access, correction, deletion and other rights may apply depending on your location. A dedicated operator privacy contact must be supplied before public launch.
7. Security and international processing
Do not enter secrets, sensitive personal information, or confidential client records. Temporary browser drafts and account access do not protect against a compromised device, browser extensions, clipboard syncing, or access by other device users. No service can guarantee absolute security.
Hosting and font providers may process connection data outside your country. This draft does not promise a particular data-residency location or verified transfer arrangement.
8. Children
This is a business-product preview intended for adults. It is not directed to children. If you believe a child has provided personal information through a connected provider or communication channel, contact that provider or the person who supplied access so the issue can be reviewed.
9. Updates
This policy will be reviewed alongside changes to the implemented site. The date and revision history will be updated when its practices change. Material changes will be disclosed before the new practice begins, and any consent required by law will be obtained. This notice does not authorize undisclosed future data collection.
Microsoft Advertising measurement
When a Microsoft Advertising UET tag ID is configured and you accept optional cookies, ProspectDog loads Microsoft’s UET script to report page visits and the same trial and return-day events used for Meta measurement. Browser event fields contain an event identifier, not your email, prospect queries, leads, or drafts. Microsoft also receives browser, page URL, cookie, and connection information. No Microsoft tag ID is currently configured. Known campaign and application parameters and fragments are removed from the page URL before advertising tags load. Pages with other query parameters skip both tags. Rejecting optional cookies stops future application event reporting, sets UET advertising storage consent to denied if loaded, and uses the existing withdrawal controls. Previously received data remains subject to provider policies. See Microsoft’s Privacy Statement.
Onboarding, delivery settings, and account menu
After you sign in and save your onboarding choices, the site opens the subscription paywall. It does not run a search or send an email at that point. Morning time, IANA time zone, afternoon time, and plan preference may be stored with your profile. Your browser detects the initial time zone locally. The account menu displays the name supplied by the authentication provider, falling back to the supplied email when a name is unavailable. It does not infer a purchased tier from your plan preference.
Google/Gmail and Lemon Squeezy are not connected in this version. Their buttons do not grant provider access or process payment. Talk to founder opens a mailto link to me@prospect.dog in your chosen email application; sending that message is your separate action.
Billing records and advertising attribution
Billing integration stores a random checkout reference associated with the authenticated user, subscription and customer IDs, plan, status, trial/end/renewal dates, test-mode flag, and provider-update times. Lemon Squeezy receives the account email, optional display name, and checkout reference to create a hosted checkout. This site never receives raw payment-card details. Billing is currently disabled and the provider is not connected.
If you accept optional measurement and do not signal DNT or GPC, we may keep permitted UTM campaign fields and Meta browser/click identifiers in a browser record with a seven-day inactivity expiry, and associate those identifiers and your consent choice with your signed-in account. When configured, a verified trial or successful payment may be sent to Zapier and onward to Meta with your billing email, event ID/time, subscription/invoice ID, plan, amount, currency, site URL, and available ad identifiers. Prospect queries, leads and message drafts are not sent. This server billing flow includes an email identifier; the separate browser events do not include your email in their custom fields. Matching is not guaranteed.
You can withdraw optional consent in Privacy choices. Withdrawal clears the local attribution record and requests suppression of future server forwarding; a failed request displays a retry notice. Previously received provider data is governed by the providers’ policies. Billing access itself does not require advertising consent. Deleting prospect workspace data does not cancel a subscription or erase the billing records needed to administer it. Request billing/privacy assistance through the founder contact; commercial operator details and retention policies must be finalized before a public launch.
See Lemon Squeezy privacy and Zapier privacy.
Revision history
September 15, 2026 — Version 0.17: configured consent-gated Meta Pixel for page views and verified trial and return-day events. Connected Lemon Squeezy test-store credentials, plan identifiers and signed webhook; checkout remains disabled pending price alignment and a publicly reachable webhook. Zapier is not connected.
September 15, 2026 — Version 0.16: added subscription paywall, provider-verified billing access, secure hosted checkout and customer portal integration, and consent-based billing attribution forwarding to Zapier. Provider connections remain unconfigured and billing is disabled.
September 15, 2026 — Version 0.15: added a first sample search after account-profile save, saved afternoon delivery preferences, a plan-selection screen, a revised plan comparison, and an account menu with profile, settings, billing status, sign-out, and founder email. Research and email delivery remain simulated; Google/Gmail, billing, trial activation, automated outreach, and follow-ups remain unconnected. No AI calls are made.
September 14, 2026 — Version 0.14: renamed the product ProspectDog and updated its visual identity. The service functionality, account data, cookie choices, and data practices are unchanged.
September 14, 2026 — Version 0.13: the fictional inbox walkthrough highlights each of five leads, holds each for four seconds, and scrolls between them over 1.2 seconds. No new data collection or email access.
September 13, 2026 — Version 0.12: the fictional inbox demo starts automatically when its central preview area enters view, runs once for approximately 12.35 seconds, and can be replayed. No new data collection or email access.
September 13, 2026 — Version 0.11: explicitly starting the inbox demo now plays its cursor and scrolling sequence even when reduced motion is enabled. Manual interaction still stops it. No data practices changed.
September 13, 2026 — Version 0.10: revised the fictional inbox demonstration to approximately 9.5 seconds, including automatic scrolling within the brief. Visitor interaction stops the animation. No new data collection or email access.
September 13, 2026 — Version 0.9: the inbox demo opens a five-business fictional brief after an approximately five-second sequence. Added example drafts and an onboarding link; no new data collection or email access.
September 13, 2026 — Version 0.8: added a local interactive inbox demo with eleven fictional emails, an animated cursor, and replay controls. It does not connect to an email account, send email, or save demo interactions.
September 13, 2026 — Version 0.7: added configurable, consent-gated Microsoft Advertising UET alongside Meta tracking.
September 12, 2026 — Version 0.6: the landing-page animation types prewritten fictional drafts and simulates sending. It does not call an AI service or send email.
September 11, 2026 — Version 0.5: documented mock query processing, account-saved prospect workspace, account-email digest snapshots, copying/downloads, and deletion controls.
September 11, 2026 — Version 0.5: renamed the product ProspectDog; documented local onboarding drafts, ChatGPT identity, account-scoped Cloudflare D1 profile storage, deletion, and proposed pricing without payment processing.
September 11, 2026 — Version 0.5: documented browser-memory dashboard state, clipboard copying, the lack of live integrations, hosting and font requests, and the information still required before public launch.
Revision 0.5: added optional measurement, configurable Meta Pixel, privacy controls, local time-zone detection and prospect-count preferences.