Privacy Policy

Last updated: July 7, 2026 · Contact: [email protected]

This Privacy Policy explains what information Prospect 811 (“we,” “us”) collects when you use prospect811.com (the “Service”), how we use it, and the choices you have. It is part of our Terms of Service.

The short version: we collect what we need to run the Service — your account details, a session cookie, the working data you save, and server logs, plus your email address if you opt in to our mailing list. We don't sell your data, we don't run ads, and we don't use third-party analytics trackers.

1. Information We Collect

Account information. Your email address, and — if you sign in with Google — your name and profile image as provided by Google. If you sign in by magic link, just your email.
Session data. A session cookie that keeps you signed in, the IP address associated with your session, and the date your account last used the Service (kept on our own server; we use it to understand overall activity and to check in on inactive accounts).
Your working content. The CRM data you choose to save in the Service: provider statuses, notes, contacts, qualified-lead flags, and territories. If you are on a team, your team’s manager can see your territories (their names and zip lists) and can assign territories to you. What else a manager sees depends on how your account was created:
- Independent accounts (you created your account yourself, or accepted a team invite): your manager sees your pipeline and field activity only for the providers you explicitly share — their statuses, and the counts and dates of your visits, status changes, notes, and follow-ups for those providers. Your route days and mileage totals are visible, but not route names or stops. Managers can never read the contents of your notes, and you can share or un-share any provider at any time.
- Managed accounts (created for you by your team’s manager): your manager can see all of the work you log in the account, including the contents of your notes. You are shown this disclosure the first time you sign in.
Server logs. Standard request logs (pages and endpoints accessed, timestamps, IP address) used for security, debugging, and capacity planning.
Mailing list (optional). If you request our free guide or join our mailing list, we store the email address you enter, the signup time, the IP address it came from, and which page you signed up from. Every marketing email includes an unsubscribe link, and unsubscribing stops all marketing email. This list is separate from your account, and we never sell it.
Billing information (paid accounts). Payments are processed by Stripe. We receive and store your Stripe customer ID, subscription plan, and payment status. We never see or store your full card number.
Correspondence. Emails you send us for support.

We do not collect information about you from data brokers or other third-party sources, and the Service contains no advertising or third-party analytics scripts.

2. How We Use Information

To provide and operate the Service — signing you in, saving your work, and showing it back to you;
To bill for paid subscriptions and manage your plan;
To secure the Service — detecting abuse, enforcing seat limits, and investigating misuse;
To fix problems and improve the Service using aggregate, non-identifying usage patterns;
To send transactional email: login links, receipts, and important service or terms updates. We do not send marketing email without your consent.

3. What We Share (and With Whom)

We do not sell or rent your personal information. We share it only with the service providers that make the Service run, and only for that purpose:

Provider	Purpose	What they process
Google	Optional sign-in	Your Google account email, name, photo
Resend	Login, transactional, and (if you opt in) mailing-list email	Your email address and message contents
Stripe	Payments	Billing details and payment method (held by Stripe)
Cloudflare	Network and DDoS protection	Request traffic, IP addresses
Mapbox	Drive-route optimization and road distances	Provider practice locations (public data), sent from our servers — not your identity or account details
Esri	Map imagery (base tiles)	Map-tile requests from your browser (IP address); no account information

We may also disclose information if required by law, or to protect the rights, safety, or property of Prospect 811, our users, or the public. If Prospect 811 is involved in a merger, acquisition, or sale of assets, account data may transfer with the business; this Policy would continue to apply to it.

4. About the Provider Data in the Service

The healthcare-provider information displayed in the Service (names, NPIs, practice addresses, phone numbers, billing statistics) comes from public datasets published by the U.S. government, including CMS Medicare provider utilization files and the NPPES registry. It is professional/business information about healthcare providers, published for public use — it is not data we collected about our users, and it contains no patient information.

5. Cookies

We use a single first-party, HTTP-only session cookie to keep you signed in. It is essential to the Service and is deleted when you log out. We do not use advertising, tracking, or third-party cookies.

6. Data Retention

Account information and Your Content are kept while your account is active.
Sessions expire after 30 days; expired sessions and used login links are purged routinely.
Server logs are retained for a limited period for security and debugging, then deleted.
Billing records are retained as required for tax and accounting purposes.

7. Your Rights and Choices

You can access the data you've stored in the Service at any time by signing in. To request a copy of your data, correct your account information, or delete your account and all associated data, email [email protected] from your account email. We respond to verified requests within 30 days. Depending on where you live (e.g., California, the EU/UK), you may have additional statutory rights — we honor access, correction, and deletion requests from all users regardless of location.

8. Security

All traffic to the Service is encrypted over HTTPS. Sessions use secure, HTTP-only cookies. Access to production data is limited to those who operate the Service. No system is perfectly secure — if we learn of a breach affecting your personal information, we will notify you as required by law.

9. Children

The Service is a business tool for adults. It is not directed to anyone under 18, and we do not knowingly collect information from children.

10. Changes to This Policy

If we make material changes, we will notify you in the app or by email before they take effect. The “Last updated” date at the top reflects the current version.

Contact

Privacy questions or requests: [email protected]

← Back to Prospect 811 · Terms of Service · Refund Policy