Privacy at Prospero Tools

Who we are

Prospero Tools is operated by Prospero Advisory Limited, a company registered in Jersey, Channel Islands (company number 166208). We are the data controller of account data, and the data processor of the content you choose to process through Brief and Minutes.

Deletion-first

Board packs, audio recordings, transcripts, generated briefings and minutes are deleted from our servers within 60 minutes by default. Corporate workspace administrators may configure a longer retention window for their workspace, in which case that window applies. Our purge job runs every 10 minutes. The audit log retains only metadata (file fingerprints, sizes, timing) — never your content.

What we keep

A minimal account record (email, hashed password or Google/Apple OAuth identity, display name, organisation, plan, billing references), your default settings, your consent timestamps, and a tamper-evident audit log retained for 24 months. If you sign in with Apple and choose to hide your email, Apple gives us a@privaterelay.appleid.com alias — we store and email that alias only. Unlink Apple in Account & security to stop the relay.

What we never keep

Pack content, audio, transcripts, briefing or minutes content, your lens inputs and your free-text prompts. None of these persist past the 60-minute deletion window.

Data residency & sub-processors

Application, database, file storage and audit logs run in a single EU/UK cloud region. All AI inference for Brief and Minutes is pinned to Google Vertex AI in the EU under the Google Cloud DPA. For text calls, personal data is redacted to opaque tokens locally before the request. For Minutes' initial board-pack fact-extraction step the raw PDF is sent to Vertex EU so the model can read scanned pages, images and tables faithfully — no other processor sees it. Audio transcription for Minutes runs on Speechmatics, a UK-headquartered provider, in its EU region — see our Sub-processors page. Email relay runs on Mailgun's EU region.

Telemetry

The site uses only strictly-necessary cookies and browser storage for authentication, security and core functionality — no consent banner is required for these. On the public marketing pages ofprosperotools.com we use Google Analytics 4 in cookie-less mode: Consent Mode is set to deny analytics and advertising storage, so GA4 receives only aggregate, cookie-less pings with truncated IPs. No _ga or other analytics cookies are written, Google Signals and advertising features are off, and there is no cross-site tracking of any kind. We do not run analytics or session replay inside the signed-in tools. See cookies for details.

Your data rights

You can export or delete your account at any time from Account → Settings. Under UK/EU GDPR and the Jersey Data Protection (Jersey) Law 2018 you have rights of access, rectification, erasure, restriction, portability and objection. To exercise any of these rights, contact our data-protection contact below.

Data-protection contact

Data-protection enquiries: dataprotection@prosperotools.com. General support: support@prosperotools.com. We aim to acknowledge requests within 5 working days and resolve within 30 days as required by law.

Complaints

If you are not satisfied with our response, you may complain to the Jersey Office of the Information Commissioner (jerseyoic.org), or your local supervisory authority in the UK/EU.

Prospero Advisory Limited (company number 166208) · Jersey, Channel Islands.