Effective Date: August 2026
BSPEC INC (operating as “D3Prospect,” “we,” “us,” or “our”) is an enterprise data intelligence layer. We provide high-speed AI predictive modeling, data enrichment, and entity resolution technologies (our “Services”) to businesses via our API and Web Application.
This Privacy Policy describes how we collect, process, predict, and protect personal information. It includes specific provisions for United States residents (e.g., CCPA/CPRA) and individuals in the European Economic Area (EEA), the United Kingdom, and Switzerland.
Because D3Prospect offers both an OSINT prediction engine and a Web Application for bulk list enrichment, our legal responsibilities change based on how you use our Services:
As a Data Controller: When we collect public Open-Source Intelligence (OSINT) to train our machine learning models and generate predictive business contact data, we act as a Data Controller.
As a Data Processor (User-Uploaded Files): When a customer uploads a proprietary file (e.g., a CSV lead list) into our Web Application or pushes data via our API for enrichment, BSPEC INC acts strictly as a Data Processor. We process these uploaded files in isolated, ephemeral environments solely to fulfill the customer’s request. We do not ingest, retain, or use customer-uploaded CRM files to train our AI models or populate our global database.
We do not collect sensitive personal information (such as health, genetic, racial, religious, or financial data). We focus strictly on professional, B2B technographic data.
A. Information Collected Directly From You (Our Customers) When you create a D3Prospect account, we collect Identifiers (name, email), Commercial Information (billing details, API usage logs), and Account Credentials.
B. Information Collected from Public and Third-Party Sources (OSINT) To power our predictive engine, we ingest data from explicitly public online sources (professional networks, company websites, public directories) and internet infrastructure records (DNS, MX, SPF/DMARC records, RDAP).
Categories: Professional/employment-related information (employer, job title, tenure), Education information, and Business Identifiers (public profile URLs, company domains).
C. Information We Create, Derive, or Infer (The AI Engine) Unlike traditional databases, D3Prospect operates a probabilistic machine learning engine. We derive and infer Definitive Intelligence and Professional Inferences based on the public technographic data described above.
We process data under the lawful basis of Legitimate Interest (pursued by us and our B2B customers to utilize public professional data for legitimate commercial networking) and Contractual Necessity (to provide our Services to you).
Data Products & AI Training: To normalize, match, and calculate statistical probabilities of corporate contact formats.
Identity Resolution: To execute deterministic waterfalls and fuzzy-matching for entity resolution.
Security & Fraud Prevention: To secure our Cloudflare Edge Network, prevent DDoS attacks, and enforce API rate limits.
We do not sell data to consumer data brokers for behavioral tracking. We disclose information to:
Our Customers: B2B organizations accessing our API/Web App for sales, RevOps, and recruitment intelligence.
Infrastructure Partners: Cloud providers (e.g., Cloudflare, Hetzner) and payment processors (Stripe) under strict Data Processing Agreements (DPAs).
Verification Networks: Specialized SMTP network providers used strictly when customers request our “Done-For-You Waterfall Verification” to perform live server handshakes.
Standard data deletion is technically insufficient for an OSINT engine, as public data may be scraped again in the future. To guarantee the permanent enforcement of privacy rights, D3Prospect utilizes a Cryptographic Suppression Architecture.
When an individual exercises their Right to Opt-Out or Delete, their identifiers are securely hashed (via SHA-256) and placed on a permanent blocklist at our network edge. This ensures our AI programmatically halts the future generation, prediction, or display of that individual’s data across our entire API network in milliseconds.
Residents of California, Colorado, Connecticut, Virginia, Utah, Texas, and other applicable states possess specific rights regarding their data. Note that many U.S. state laws expressly exclude publicly available information from the definition of personal data.
Your Rights:
Right to Know & Access: You may request to see what metadata our AI associates with your professional identity. To prevent data breaches, D3Prospect mandates strict Identity Verification via a secure cryptographic token (Magic Link/OTP) sent to the queried corporate email address before any data is revealed.
Right to Delete / Opt-Out of Sale or Sharing: You may opt out of our database via our automated Privacy Portal. We execute this via Cryptographic Suppression (see Section 5).
Non-Discrimination: We will not discriminate against you for exercising your privacy rights.
How to Exercise: Email [email protected]. We also honor browser-based opt-out preference signals like Global Privacy Control (GPC).
If you are located in the EEA, UK, or Switzerland, you have the right to access, rectify, erase, restrict, or object to the processing of your personal data.
Article 14 Indirect Collection Notice: Because our AI models ingest explicitly public B2B data rather than collecting it directly from you, this Privacy Policy serves as our notice of indirect collection.
Article 27 Representatives: BSPEC INC has appointed external representatives to act as our direct liaisons with European and UK regulators and data subjects.
For the EU: Cvetko Stavreski, Lege 6, Sofia, Bulgaria, [email protected]
For the UK: BSPEC GROUP LIMITED, 71-75 Shelton Street, Covent Garden, London, UK, WC2H 9JQ, [email protected]
Note: You may also process your Opt-Out instantly via our global portal at privacy rights.
We use enterprise-grade technical safeguards, including AES-256 encryption at rest and in transit, Role-Based Access Controls (RBAC), and edge-network worker interception, to protect data against unauthorized access. Files uploaded by customers for processing are held in ephemeral memory and automatically purged upon completion of the enrichment waterfall.
We may update this Privacy Policy continuously to reflect evolving global privacy regulations and updates to our Machine Learning infrastructure.
Name: BSPEC INC
Address: 1213 Eagle Crest Drive, Lemont, Illinois, 60439, USA
Email: [email protected]
