Information we collect
When you request a strategy call, we collect the name, phone number, company, and business description you provide, along with the time of submission and your agreement to be contacted. We also record campaign parameters attached to the page URL, such as UTM values, ad identifiers, and a Meta click identifier when present, so we can understand which campaign produced the request.
We use a short-lived, salted hash derived from an IP address to prevent form abuse. We do not store the raw IP address in the strategy-call record. If advertising measurement is enabled, the ad provider may receive limited request and device information as described below.
How we use information
We use strategy-call information to respond to the request, assess whether Prospect Loop may fit the business, protect the form from abuse, measure campaign performance, and keep a record of the conversation. Submitting the form does not create a software account, charge a card, or enroll the phone number in recurring marketing calls or texts.
For paid customers, Prospect Loop may also process the business brief, approved buyer criteria, prospect records, message drafts, delivery history, replies, stop requests, and meeting records needed to operate the customer’s workspace.
Optional website analytics
If you allow website analytics, we measure visits to our public homepage, product, solution guides, signup, and strategy-call pages. We also measure strategy-call button clicks, form starts, form errors, and successfully saved requests. A click or form start is not counted as a submitted lead.
These records contain an anonymous session identifier, time, page path, campaign labels and ad identifiers when present, the referring website’s hostname, and a coarse mobile, tablet, or desktop category based on screen width. We do not include form contents, names, phone numbers, email addresses, full referring URLs, Meta click identifiers, or browser fingerprints in the website-analytics records. Analytics does not track activity inside paid workspaces or the owner’s analytics page.
The session identifier is kept in session storage in your browser tab and expires after 30 minutes without a measured interaction. Reports cover up to 90 days. Older website-analytics records are removed during periodic maintenance triggered by incoming traffic. Our private reporting view uses these records to show the path from a visit to a saved call request. Optional analytics may miss visitors who decline it or block measurement, so these counts are not a complete count of traffic.
Services that process information
We use hosting and database services to run the site and store requests. Resend processes the owner-notification email sent after a request is saved. When enabled for a customer, OpenAI may process approved business and conversation context for message drafting; outreach and scheduling providers process the data needed for their connected functions.
If Meta advertising measurement is configured and you allow it, the browser loads Meta Pixel on the strategy-call landing page to record a page view and a successful Lead event. If our server conversion integration is configured, we may also send Meta the matching Lead event with campaign attribution and normalized, cryptographically hashed identifiers such as phone number and first name. A random event identifier prevents the browser and server copies from being counted twice. Meta uses the data under its own terms to match and measure ad results.
Website analytics and Meta ad measurement are separate choices saved in your browser. A previous choice to allow Meta measurement does not enable website analytics. Use “Privacy choices” on a public page to allow, decline, or withdraw either option. Declining Meta measurement before it is loaded prevents its browser script from loading; withdrawing a previous grant sends Meta a consent-revocation signal and stops our subsequent measurement events. Browser Pixel measurement can operate without the optional server conversion integration.
Connecting Gmail
When you connect Gmail or Google Workspace, Google asks you to allow Prospect Loop to send email on your behalf and read your messages. The read permission covers your mailbox; our campaign workflow checks messages from campaign contacts and their conversation threads to detect replies, respect stop requests, and coordinate meetings. It accesses your mailbox address, message addresses, subjects, text, timestamps, and message and thread identifiers.
We store campaign messages, reply history, delivery references, and meeting outcomes in the connected workspace. When AI drafting is used, relevant conversation text is sent to OpenAI together with your approved business context and prospect details to prepare messages and interpret replies. Campaign outcomes also help prioritize buyer profiles within that workspace. Gmail authorization tokens are encrypted on our server with workspace-specific protection and are not sent to the AI service.
We do not sell Gmail data, use it to serve advertisements, or send it to Meta advertising measurement. Our use and transfer of information received from Google APIs follows the Google API Services User Data Policy, including its Limited Use requirements.
Use “Disconnect and pause” in your workspace to remove the saved Gmail tokens and pause outreach. You can also revoke Prospect Loop’s Google permissions through your Google Account connections. Disconnecting does not automatically delete messages or campaign records already saved in Prospect Loop. To request their deletion, email zacharyrohloff1@gmail.com; the retention terms below also apply.
Retention and security
We keep a strategy-call request while it is reasonably needed to respond, maintain business records, prevent abuse, or meet legal obligations. Paid workspace data is kept while the account is active and as needed for operational or legal records. Deletion is currently handled by request rather than through a self-service control.
We use access controls, account separation, encrypted provider credentials, rate limits, and delivery records designed to reduce unauthorized access and repeated outreach. No online service can promise absolute security.
Your choices
You may ask to access, correct, or delete information connected to you, or withdraw a strategy-call request, by emailing zacharyrohloff1@gmail.com. We may need enough information to verify and complete the request. We do not sell personal information for money. Advertising measurement may be treated as “sharing” under some privacy laws; you may also contact us to request that it stop for your information.
People contacted through a customer campaign can ask to stop. Recorded opt-outs are used to suppress further messages from the applicable campaign or sender.
Contact and changes
Prospect Loop is responsible for this website notice. Privacy questions and requests can be sent to zacharyrohloff1@gmail.com. We may update this notice as the product, providers, or legal requirements change. The date at the top shows the latest revision.