Legal

Privacy Policy

Effective Date: April 9, 2026  ·  Last Updated: October 16, 2026

This Privacy Policy describes how Local Sphere, LLC ("Local Sphere," "MyProspects," "we," "us," or "our") collects, uses, shares, and protects information in connection with the MyProspects identity resolution and buyer intent platform, including our website at www.myprospects.com (the "Site") and related services (collectively, the "Services").

By using the Services, you agree to the collection and use of information in accordance with this policy. If you do not agree, please do not use our Services.

1. Information We Collect

1.1 Information You Provide

We collect information you provide directly when you:

  • Complete a demo request or contact form (name, email, company, job title, phone)
  • Subscribe to communications or newsletters
  • Enter into a subscription or service agreement
  • Communicate with our team by email or other means

1.2 Automatically Collected Information

When you visit our Site, we and our service providers may automatically collect:

  • IP address, browser type, device type, and operating system
  • Pages visited, time spent, and navigation paths
  • Referring URLs and search terms
  • General geographic location derived from IP address

1.3 Identity Resolution Data (Platform Customers)

Our core service — visitor identity resolution — processes data on behalf of our business customers ("Customers"). When deployed on a Customer's website via our JavaScript pixel, our platform may identify individuals visiting that site using probabilistic and deterministic matching techniques against our identity graph. This includes:

  • Hashed email addresses and identifiers (SHA-256 hashing for the platform customer identifier workflow)
  • Behavioral signals observed across the open web (intent data)
  • Household-level demographic context sourced from our Local Sphere data infrastructure
  • On-site behavior including pages viewed, session duration, and interaction patterns

In these contexts, MyProspects acts as a data processor on behalf of our Customers, who are the data controllers responsible for their own end-user privacy disclosures. We encourage all Customers to maintain a transparent privacy policy on their own sites.

This platform customer identifier workflow does not describe fields submitted on our public Site. The optional public-site pixel's collection of names, emails, Contact messages and Trial notes is described in Section 7.

2. How We Use Information

We use the information we collect to:

  • Provide, operate, and improve the Services
  • Respond to inquiries, schedule demos, and fulfill service agreements
  • Send product updates, marketing communications (where consented), and service notices
  • Analyze usage trends and improve our identity graph and matching accuracy
  • Detect, prevent, and address fraud or security incidents
  • Comply with legal obligations

3. Data Sharing and Disclosure

We do not sell your personal information to third parties. We may share information in the following circumstances:

3.1 Service Providers

We work with third-party vendors (hosting, analytics, CRM, payment processors) who process data on our behalf and are contractually obligated to protect it.

3.2 Business Customers

Identified visitor data is shared with the Customer whose site generated the identification event — consistent with their service agreement and this policy.

3.3 Legal Requirements

We may disclose information when required by law, court order, or other governmental authority, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

3.4 Business Transfers

In the event of a merger, acquisition, or sale of substantially all of our assets, user information may be transferred as part of the transaction. We will provide notice before your data is transferred and becomes subject to a different privacy policy.

4. Compliance & Data Privacy Regulations

4.1 GDPR (EU General Data Protection Regulation)

For individuals in the European Economic Area, we process personal data only where we have a lawful basis to do so — including your consent, performance of a contract, compliance with a legal obligation, or our legitimate interests. You have the right to access, rectify, erase, restrict, or port your personal data, and to object to certain processing. To exercise these rights, contact us at privacy@localsphere.io.

4.2 CCPA (California Consumer Privacy Act)

California residents have the right to know what personal information we collect and how it is used, the right to delete personal information, and the right to opt out of the sale of personal information. We do not sell personal information. To submit a request under the CCPA, contact us at privacy@localsphere.io.

4.3 IAB Transparency & Consent Framework

MyProspects is registered with the IAB Transparency and Consent Framework (IAB TCF). Our platform processes consent signals from publisher environments and suppresses processing for users who have not provided consent in TCF-enabled contexts.

5. Data Security

We implement administrative, technical, and physical safeguards to protect your information, including:

  • AES-256 encryption at rest
  • TLS 1.3 encryption in transit
  • SHA-256 hashing for platform customer email identifiers. When optional tracking is enabled, the public-site pixel's tracking and form data described in Section 7 can be transmitted as plain-text fields within encrypted HTTPS requests.
  • Isolated per-customer processing environments

No method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

6. Data Retention

We retain personal information for as long as necessary to provide the Services and fulfill the purposes described in this policy, or as required by law. Visitor-level identity data processed on behalf of Customers is retained in accordance with the applicable service agreement. You may request deletion of your data at any time by contacting us below.

7. Cookies and Tracking Technologies

Our Site uses Google Analytics to measure visits and visitor identification to recognize visitors and understand website activity. These optional tracking tools are enabled by default unless you opt out or your browser sends Global Privacy Control. The cookie banner provides notice and an immediate opt-out. Global Privacy Control keeps optional tracking off even if you previously allowed it. If saved preferences cannot be read, tracking stays off unless you explicitly allow it for that visit.

We remember acknowledgment of the banner for 180 days. Opt-outs, including previously saved rejections, remain in effect until you explicitly choose to allow tracking or clear your browser's saved site data. You can withdraw at any time by opening Privacy choices in the footer and choosing Opt out. Withdrawal is stored, disables optional analytics, and tells the pixel to stop future SDK collection. If the pixel has loaded, withdrawal also refreshes the page to unload running partner code and restart with tracking denied. An opt-out in another tab or a newly detected Global Privacy Control signal applies the same refresh when the pixel is loaded. These actions do not retract information already sent or control downstream processing by recipients. You can re-enable tracking by opening Privacy choices and choosing Allow tracking, unless Global Privacy Control is active. Expiration of a banner acknowledgment shows the notice again without changing the default tracking state. If your browser blocks preference storage, your choice may apply only for the current visit.

Our Google Analytics configuration removes query strings and fragments from the page location and reduces the referrer to its origin. Google advertising signals and advertising personalization are disabled.

When tracking is enabled, the visitor identification pixel sends website activity and form values, including names, email addresses, Contact messages and Trial notes, and copied text to Sitelytics at api.sitelytics.tech. It also initiates partner tracking at ce.lijit.com and pxdrop.lijit.com, which may receive browser/IP identifiers and site activity.

Pixel collection can transmit plain-text fields within HTTPS requests and is not limited to hashed identifiers. Messages and notes may contain confidential or sensitive information. Our current Contact and Trial forms have no dedicated password or payment credential fields; do not enter passwords or payment credentials in messages or notes. Pixel form values are not sent by our Google Analytics configuration. These controls do not establish every downstream action taken by the vendor or its partners.

8. Children's Privacy

The Services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a minor, please contact us and we will promptly delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the revised policy on this page with an updated effective date. Your continued use of the Services after such changes constitutes acceptance of the revised policy.

10. Contact Us

For privacy-related questions, data subject requests, or opt-out requests, contact us at:

Local Sphere, LLC — Privacy Team
Email: privacy@localsphere.io

Note: This Privacy Policy is provided for informational purposes and reflects our current data practices. It does not constitute legal advice. Consult qualified legal counsel for compliance with all applicable privacy laws.