Legal

GDPR Compliance

This page outlines our data protection controls and GDPR-aligned privacy practices for Estate Prospector.

Effective Date: March 6, 2026Last Updated: April 10, 2026

1. GDPR Commitment

BRIGHTLINE SOFTWARE LLC is committed to handling personal data responsibly and in alignment with GDPR principles where applicable.

This page describes our data protection approach for Estate Prospector users, customers, and related service interactions.

Estate Prospector is a B2B data platform that provides access to professional contact information.

This data is sourced from:

We do not intentionally collect or process sensitive personal data.

  • Publicly available information
  • Licensed data providers
  • Professional and business-related sources

2. Roles and Responsibilities

Depending on context, we may act as:

  • A data controller for personal data related to account management, billing, and platform operations
  • A data processor where processing is performed under customer instructions

3. Data Protection Principles

Our processing approach aligns with core GDPR principles:

  • Lawfulness, fairness, and transparency
  • Purpose limitation and data minimization
  • Accuracy and storage limitation
  • Integrity, confidentiality, and accountability

4. Lawful Bases and Purpose

We process personal data under lawful bases such as:

Processing purposes include:

  • Contract necessity
  • Legal obligation
  • Legitimate interests
  • Consent (where required)
  • Service delivery and account administration
  • Billing, subscriptions, and credit usage
  • Security, fraud prevention, and abuse monitoring
  • Customer support and communication
  • Product improvement and service reliability

5. Data Subject Rights

Where GDPR applies, data subjects may request:

Requests can be submitted through the Contact Us page and are handled according to applicable timelines.

Opt-Out and Removal

Individuals may request removal or suppression of their professional contact information where applicable.

We review and process such requests in accordance with GDPR obligations.

  • Access to personal data
  • Correction of inaccurate data
  • Deletion of personal data
  • Restriction of processing
  • Data portability
  • Objection to processing

6. Security Measures

We use administrative, technical, and organizational controls designed to protect personal data against unauthorized access, loss, misuse, or alteration.

Security controls are reviewed as part of ongoing risk management and service operations.

7. International Transfers

Personal data may be processed outside the EEA/UK/Switzerland, including in the United States, depending on infrastructure and service providers.

Where required, we apply appropriate transfer safeguards, including:

  • Standard Contractual Clauses (SCCs)
  • Organizational and technical protections

8. Retention and Deletion

We retain personal data only as long as necessary for:

Retention periods vary by record type and operational context.

  • Legitimate business purposes
  • Legal obligations
  • Dispute handling
  • Contract enforcement

9. Subprocessors and Vendors

We may engage vetted subprocessors and vendors for:

Vendors are selected and managed with data protection obligations appropriate to their role.

  • Hosting and infrastructure
  • Analytics and monitoring
  • Customer support
  • Communications and email delivery
  • Payment processing

10. User Responsibilities

Estate Prospector is a data platform. Users are responsible for ensuring that their use of data complies with applicable laws, including GDPR.

Users must:

Estate Prospector does not control or monitor user campaigns.

  • Establish a lawful basis for outreach
  • Respect data subject rights
  • Honor opt-out and deletion requests

11. Contact and Complaints

Legal entity: BRIGHTLINE SOFTWARE LLC

Registered address: 30 N GOULD ST, STE 100 SHERIDAN, WY 82801 United States

For GDPR-related questions or requests, use the Contact Us page.

If unresolved and applicable, you may lodge a complaint with your competent data protection authority.