Privacy policy
Effective date: October 15, 2026
Prime Sales Signals is operated by LSO Group LLC, 936 SW 1st Ave #432, Miami, FL 33130. Contact for privacy and support: hello@primesalessignals.com.
What we collect
Account data. Your email address and a password, which we store only as a one-way hash. We record when you confirmed your email and when you last signed in.
Information you give us. Your company website, a description of what you sell, your ideal customer, your buyer job titles, the monitors you approve, and the company domains (and optional company names and LinkedIn page addresses) you ask us to watch. Whether each company is a customer or a prospect, which only you see. Your feedback on findings.
Research results. For each company you watch, we store findings: a short quote from a public web page, job posting, or public LinkedIn post, its link, its date when the source gives one, the author of a LinkedIn post, our summary, and our reading of why it may matter to your offer. We keep a fingerprint of pages we have read so we do not read unchanged pages again.
Discover. If you use Discover, we store the scopes you approve (states, an industry in your words, a size band, and one event), a record of each run (what was searched, how many pages were read, an estimated cost, and a plain-language result), and the companies a run found: the company name, its website if the page gave one, a short quote from the public page that states the event, the page link, and its date. Searches for Discover use only your scope, never your watchlist.
Contact data. When you ask us to reveal a contact, we look up a person at that company who matches your buyer titles and store what our contact data provider returns: name, job title, company, work email, the provider's email status, and a LinkedIn profile address if supplied. We look up contacts only when you ask.
Removal requests. When a person is removed from contact results, by you or at their request, we keep a matching fingerprint (a one-way hash) of their email address, or of their name together with their company's website, instead of the plaintext, so they are not shown again. Because an email address or a name is easy to guess, we treat the fingerprint as personal data. Saved results that matched are emptied of the person's details.
Digest address changes. When you ask to send the weekly digest to another address, we store that address as pending, with a one-way hash of a single-use link, until its owner confirms. We email that address a confirmation message that names no company and no finding.
Usage and operations data. Records of the provider calls made for your workspace (type, count, and estimated cost), scan status and errors, and a log of the emails we sent you (type, recipient, and status, not the message body).
Cookies. One sign-in cookie, pss_session, which is httpOnly and secure and expires after 14 days. The application sets no advertising or analytics cookies and runs no analytics.
Billing. Paid plans are not available yet, so we collect no payment details. When they open, a payment processor will handle payments and we will store only customer and subscription identifiers and the subscription status.
How we use it
To run the monitoring you ask for, show you results, send the emails you need (email confirmation, password reset, and the weekly digest), keep the service secure, and understand cost and quality. We do not sell your data. We do not send outreach for you. We do not use your offer, lists, or results to serve other customers.
Who receives it
We share data only with service providers that help us run the service: hosting and database, artificial intelligence processing of public pages and your offer description, web search (which receives search terms such as a company's name, or for Discover your chosen states, industry, and event, and never your list as a whole), public social post reading, contact data lookup (only when you ask), email delivery, and website hosting. They process data on our behalf and for no other purpose. We do not sell your data, and we do not share it for advertising.
Public pages we read are cached for up to 3 days and may be reused for another customer who watches the same page; the cache holds public page content only and never records which customer asked for it. Search results are cached for 24 hours within your workspace only.
How long we keep it
- Account, workspace, findings, contacts, and feedback: while your account is open.
- Contact lookups are reused for 30 days, then looked up again if you ask. Expiry is not erasure: the stored record stays in your workspace, and is excluded from the default export once expired, until you or we delete it, or the person is removed. Expired records can still be exported if you ask for them, labeled stale.
- Discover scopes, runs, and the companies a run found: while your account is open, or until you delete the scope, which deletes its runs and finds. Companies you added to a watchlist stay.
- Removal fingerprints (hashes): kept as long as needed to keep a removed person from reappearing, and not deleted with your workspace when they apply to everyone.
- Digest confirmation links expire after 24 hours, and a newer request replaces an older one.
- Page cache: up to 3 days. Search cache: 24 hours.
- Email confirmation links expire after 24 hours and reset links after 1 hour, and each works once.
- Database backups: kept by our host for 3 days.
- Usage and email logs: Kept while your account is open.
Deleting your data
Email hello@primesalessignals.com from your account's address to delete your account and workspace. We delete it, including findings and contacts, within 30 days. Records of provider usage (type, count, and estimated cost) are kept for spend history with the link to your workspace removed. Copies in backups age out within the backup window above. Deletion is handled by hand today, and there is no self-serve button yet. You can remove a watched company at any time, and its earlier findings stay in your workspace until you ask us to delete them. Removing a company or letting a stored contact expire does not delete the personal data already saved in your workspace; deleting your workspace does.
Contact data about other people
Contacts come from a third-party data provider and describe business people at companies you choose. You are responsible for using contact data lawfully, including anti-spam and privacy laws where you and they are located. We call an email verified only when the provider reports it as verified. If your business contact details appear in the service and you want them removed, write to hello@primesalessignals.com from the address concerned. We remove the saved details everywhere and keep only a matching fingerprint (a one-way hash, treated as personal data) so you are not shown again. Customers can also remove a person from their own results with one click. A person's name may still appear inside a short quote from a public page that a finding or a Discover result is based on, and we remove that on request too.
Security
Passwords are hashed, sign-in links are stored only as hashes, data is encrypted in transit, provider keys stay on the server, and each workspace's data is separated in every query. No system is perfectly secure.
Where we operate and international transfers
The service is available to businesses worldwide. Our providers are located mainly in the United States, so your data is processed there. If you are in the European Economic Area, the United Kingdom, or Switzerland, we rely on appropriate safeguards such as standard contractual clauses for those transfers.
Legal bases and your rights
Where data protection law applies, we process account data to perform our contract with you, and we process public business information about the companies you watch and the business contacts you reveal on the basis of our legitimate interests in providing the service. Depending on where you live, you may have the right to access, correct, delete, restrict, or export your data, to object to processing, and to withdraw consent. You may also complain to your local data protection authority. California residents have the rights described in the CCPA, and we do not sell or share personal information. To use any right, write to hello@primesalessignals.com.
Children
The service is for businesses and is not intended for anyone under 18.
Changes
We will post changes on this page and email account holders about material ones.