Legal · For professional prospects · Version 1.0

Prospect Privacy Policy

Effective 13 November 2026 · English (prevailing language)

This notice is for professionals whose work contact details we may process in order to generate B2B leads or send role-relevant outreach for a SignalHunt Client. It is not the Client contract. The operator is Nicolas Schmidt, operating as SignalHunt. Contact: [email protected].

1. What we process and why

We may process your name (if available), work email at your organisation’s domain, job title, company, country, a public source URL, and the status of outreach or a meeting. We collect this from public sources we are allowed to use (for example a company website or a public job board) and, where licensed, from official contact APIs. We do not scrape platforms that forbid it, and we do not seek sensitive data (health, religion, political opinions, sexual orientation or similar).

The purpose is B2B prospecting and meeting booking for a named Client, and honouring opt-outs. We comply with applicable data-protection and commercial-email law, including, where they actually apply, Law 25.326 and the AAIP, PIPEDA, CAN-SPAM, CASL, LGPD, LFPDPPP, Law 1581, Law 21.719, and the EU or UK GDPR. We do not send unsolicited commercial email to Spain, or to other outreach-off markets (as at version 1.0: Colombia, Germany, Denmark and Australia).

For Canadian addresses we rely on implied B2B consent from conspicuous publication, with no “do not email” statement, and a message related to your role, and we keep proof of the source.

Where Argentine Law 25.326 applies, we rely on professional data from publicly accessible sources, and you may object or request erasure as set out below. Where the EU or UK GDPR applies, we rely on legitimate interests (Article 6(1)(f)) in conducting B2B prospecting related to your professional role, with a documented legitimate-interest assessment (LIA), and you may object at any time. The first email you receive from us will include an Article 14 notice (who we are, the purpose, the source of the data, your rights, and how to object). Where Brazil’s LGPD or other listed laws apply, we rely on the lawful bases those laws provide for this kind of professional contact, and we honour the rights they grant.

2. Opt-out

You can opt out of SignalHunt outreach at any time, at no cost:

We will honour a commercial-email opt-out in at most ten (10) business days, and we will not sell opt-out lists. Opting out of outreach is not the same as a Client cancelling a paid workspace.

Opt-out request

3. Access and other requests

You may ask us for access to the professional data we hold about you, for correction or erasure, to object to processing, or to exercise any other right that applicable law gives you. Write to [email protected] with the subject “Access request” (or the right you wish to exercise), or use the form below. We may need to verify that we are speaking to the right person. You may also lodge a complaint with a supervisory authority, including the AAIP, and a European supervisory authority or the ICO where the EU or UK GDPR applies. We will respond without undue delay and in any event within the time required by applicable law.

Access or rights request

4. Sharing, retention and security

We may share your professional details with the Client for whom the lead was generated, and with the sub-processors in the DPA (Instantly, Cloudflare, xAI (Grok), Google Workspace if and when used, and the enrichment provider then engaged). We do not sell your data. International transfers are described in DPA section 8.

Prospect records in SignalHunt’s own database, of which SignalHunt is the controller, are retained for a default of twelve months after the last unanswered outreach, earlier on a valid erasure, objection or opt-out, and longer if we must keep a suppression record. If you ask us to erase the professional data we hold about you, we will still keep your address on our suppression list (your email address and the fact that you asked not to be contacted), for as long as we need that record to avoid contacting you again. We do not use that record for outreach or for any other purpose. Client workspace copies of leads follow the DPA (return or deletion within 30 days after that Client’s Service ends) and are a separate retention track. Security and incident notice are described in the DPA.

End of Prospect Privacy Policy, version 1.0. See also the Privacy Policy.