Draft - pending review
Privacy notice (draft)
This notice describes Quote Rescue Engine and the pages on this site. It is a draft. The live notice at /privacy is unchanged, and it still stands until this draft is approved.
Who we are
Prosper AI Systems is a sole trader business. It is not a registered company. The business is based at Venture Towers, Portsmouth, PO1 5DL. You can contact us at info@prosperaisystems.co.uk.
If you subscribe and store your own customers in the app, you are the controller of that customer data and Prosper AI Systems is the processor. That arrangement is set out in the Data Processing Agreement. For your own account email and subscription, Prosper AI Systems is the controller.
What we collect
- Your account email, so you can sign in.
- Your subscription and billing status, received from the checkout provider. The project records describe that checkout as GoHighLevel. The app stores whether the plan is active. It does not store card numbers.
- The records you enter about your customers: names, contact details, quote details, notes, and follow-up history. We process those records as your processor.
- Drafts you prepare in the app. You send or approve what goes to your customer. In this release that send opens in your own email.
The public demo uses fictional records held in your browser for that visit. It is not a customer account.
Lawful bases
For your account and subscription, the basis is contract, UK GDPR Article 6(1)(b). The email and the plan status are needed to provide the service you asked for.
For customer records in the app, you decide the basis. You should say so in the privacy information you give your own customers. Prosper AI Systems processes those records on your instructions. We do not use them to market our own services.
Where the service is hosted
The database and sign-in are hosted by Supabase. The project records name the pooler host aws-0-eu-west-2.pooler.supabase.com (eu-west-2, London). The application is hosted by Netlify. The Netlify region is to be confirmed.
Sub-processors
For personal data held in the app, the sub-processors are the same as in the Data Processing Agreement:
- Supabase — database and authentication. Region recorded as eu-west-2 (London). Confirm it on the live project.
- Netlify — application hosting. Region: to be confirmed.
- SendSets — an email adapter is in the code, aimed at api.sendsetsapi.com. The current release does not call it to send a message. Region: to be confirmed.
Account email is sent through Supabase. The project records describe a custom SMTP setting for info@prosperaisystems.co.uk. They do not name a separate SMTP company.
GoHighLevel is the checkout for your own subscription. It is not used to store your customer quote book. A solicitor should confirm how to describe that relationship.
Retention
The periods below are proposed. They are not yet a settled policy.
- Proposed: account email and plan status are kept while the account is open, and for 12 months after it closes, so billing questions can be answered.
- Proposed: customer and quote records, notes, and follow-up history are kept while the account is open. On closure, or on a written deletion request, they are deleted or returned within 30 days, unless the law requires longer.
- Proposed: if SendSets is later switched on, its own log period applies, and that period is to be confirmed.
- The fictional demo in the browser is cleared when that browser session ends.
Deletion and account closure
You can ask for access, correction or deletion, and you can ask to close the account, by emailing info@prosperaisystems.co.uk. Account deletion is handled personally, so records are not removed by mistake. A signed-in account can export quotes as CSV and the full record as JSON.
Your UK GDPR rights
You can ask for access, correction, deletion, restriction, and portability. You can object to processing that relies on legitimate interests. You can complain to the Information Commissioner’s Office at ico.org.uk.
If you are a customer of a trade that uses Quote Rescue Engine, contact that trade first. They are the controller of the record they entered.
Cookies and browser storage
The application code does not set its own cookies. The sign-in client stores the session in browser storage. The public demo stores fictional records in session storage under the key qre-fictional-demo-v1. This application does not add an analytics cookie.
Contact
Email info@prosperaisystems.co.uk. Prosper AI Systems, Venture Towers, Portsmouth, PO1 5DL.