ProspectPop Companion privacy

Last updated 25 October 2026.

ProspectPop is an invite-only business prospecting application. The ProspectPop Companion is its browser extension: a side panel that lets an invited member of an organisation's ProspectPop Workspace look up the business on the page they are viewing and record their own research about it in that Workspace.

What the Companion reads

  • While its side panel is open and connected, the address of the page you are viewing, when the browser lets it see that address (after you click the extension, use its shortcut or menu, or grant it access to that site). It sends that address, without its query string or # part, to your ProspectPop to check whether the business is already there. The page title stays in the browser and is only used to suggest a name you can edit.
  • Only when you choose an action: the one email address you selected, or, when you click “Recognize businesses on this page”, the link addresses on that page, of which at most 200 site names are sent.
  • When you right-click a business's logo on a page — its own website, or another page such as its social profile — and choose to send it to ProspectPop, your browser reads that one image from the page and uploads it, with its address and the page's address, to your organisation's ProspectPop Workspace, where it waits for your review. A logo drawn on the page as SVG is sent the same way after you click it: only that one drawing's markup (with the colours and fonts the page shows it in) and the page's address. ProspectPop turns an SVG into a picture on its own server, without contacting the website, and keeps the picture, not the SVG. Nothing else on the page is read, and nothing is sent until you confirm.
  • It acts only when you do. It does not crawl, browse in the background, visit pages you did not open or keep a list of the pages you visit.
  • It does not read page text, passwords, form fields, cookies, the clipboard or your browsing history.
  • On LinkedIn it reads nothing from the page. It can save the page's address as a profile link and record what you type.

What it keeps in your browser

  • In the browser's local extension storage: the ProspectPop address you confirmed, the Companion's own revocable ProspectPop connection (an access token and a refresh token that ProspectPop issued for this extension), and display text such as the connection's end time.
  • It never stores an Apptermath password, token or cookie, or a ProspectPop sign-in cookie. You approve the connection on ProspectPop's own page.
  • Its storage is not synced to other devices. The Companion adds no encryption of its own; it relies on your browser profile's protection.
  • An action waiting for your confirmation and the business you are working on are kept in memory only and cleared when the browser closes.

What ProspectPop keeps

  • The records you choose to save, in your organisation's ProspectPop Workspace. The page address you were on can be kept with a change as a record of where the information came from.
  • An audit entry of each change: who made it, when, and that it came from the Companion.
  • The connection itself: when it was approved, when it was last used and which extension version used it.

What it never does

  • It never sends email or any other outreach.
  • Browsing data is not sold, and is not shared outside your organisation's ProspectPop Workspace.
  • It uses no advertising or analytics service.
  • What it handles is used only for your organisation's work in ProspectPop, never for an unrelated purpose such as advertising or credit decisions.

How long, and your control

  • Disconnect in the Companion asks the ProspectPop server to end its connection and clears it from your browser, whether or not the server could be reached. A connection also ends on its own: 30 days after your last action in the Companion, and at most 90 days after you approved it. It ends within about a minute if you are removed from your organisation's Workspace.
  • You can remove the Companion's access to any site in your browser's extension settings. Removing the extension deletes everything it stored in your browser.
  • Records you saved belong to your organisation's Workspace. They stay there when you disconnect or remove the extension, until someone with access to that Workspace changes or removes them. No fixed retention period is published for them.
  • Access comes only from your organisation's invitation and its Apptermath sign-in, never from installing the extension.

Tax-exempt purchases

If you ask to buy tax-exempt through a store that uses ProspectPop, we collect what you enter on the "Buying tax-exempt?" form — your organization's name, its state, your exemption certificate or permit number, the email address you check out with — and the certificate you upload. We use them only to decide your request and, once it is approved, to mark your customer account at that store as tax-exempt. Your certificate and its number are stored encrypted, and only the store's owner and administrators can view them; every view is recorded. To check the certificate, an automated document review reads an image of it (for a PDF, images of its first one or two pages) through OpenAI's API, which does not use API data to train its models; each request asks OpenAI not to store it. Please don't include a Social Security number; if you type one as your organization name or certificate number, we keep only its last four digits, but one shown on the certificate you upload stays in it. If your checkout email is a government address, we email it a 6-digit code from the store's own email account to confirm it; the code expires in 30 minutes. While your tax-exempt status is in force, we record each tax-exempt order's number, total and date at that store, to apply the first-order limit and the retention period. We keep your request and certificate while your tax-exempt status is in force, and otherwise delete them five years after your last tax-exempt purchase, or after the request was sent, decided or withdrawn, whichever is latest (as tax records). You can ask the store to withdraw your tax-exempt status at any time.

Contact

Questions about this page or the Companion: use the ProspectPop contact form.