Privacy Policy

PrepFive is provided by KodingKorp (“we”, “us”, “our”).

Registered address:
H-264, WeWork Berger Delhi One, Sector-16B, C-001/A2,
Gautam Buddha Nagar, Noida, Uttar Pradesh 201301, India.

Privacy contact: [email protected]
Security contact: [email protected]
Support contact: [email protected]

Grievance officer (India DPDP Act): the privacy contact above acts as our grievance officer for users in India. We aim to acknowledge grievances within 7 days and resolve them within a reasonable period.

This policy applies to PrepFive, including the marketing website (prepfive.com), the PrepFive Chrome extension, the PrepFive backend API, and our support channels. It does not cover third-party sites, stores, or services that link to or from PrepFive.

PrepFive is intended for adults using it in a professional capacity (sales, recruiting, founder research, networking). It is not designed for children or minors. If you believe a child has provided personal data to us, contact [email protected] and we will delete it.

We collect only the data we need to provide, secure, support, bill, and improve PrepFive.

• Account data — email address, authentication identifier, sign-in events. Provided by you and managed through our authentication provider (Clerk).
• Billing data — plan, invoice ID, payment status, billing country, refund status. Handled by our merchant of record (Dodo Payments). We do not store payment-card numbers.
• Profile context — optional background information about you (role, focus area, additional notes) that you choose to save to personalise briefs.
• Search inputs — names, roles, companies, profile URLs, and other text you enter to generate a brief.
• Brief outputs — the AI-generated brief content (person summary, company context, news, suggested talking points, source links) returned to you and stored in your search history.
• Meeting types — names and descriptions of meeting types you create.
• Settings — extension preferences such as theme and whether profile context is enabled.
• Usage and diagnostics — feature events, sign-up and search events, error events, latency, and release version. Sent to our product analytics provider (PostHog) under the limits described in section 6.
• Server logs and security events — request metadata, IP address, and error stacks captured for reliability and abuse prevention.
• Support data — emails you send us and the related correspondence.

We do not intentionally collect government IDs, biometric data, precise location, health data, financial-account data, children’s data, or other special-category data.

For the Chrome extension, in Chrome Web Store terms the categories of data we handle are: personally identifiable information (name, email), authentication information (your sign-in session), financial and payment information (subscription and billing status), location (IP address, for security and abuse prevention), and user activity (product analytics).

PrepFive helps you research other people for legitimate professional purposes. To do that, your search inputs and the resulting briefs include information about third parties (the people and companies you look up), drawn from publicly available sources at the time the brief is generated.

You are responsible for using PrepFive in line with the laws that apply to you and the people you research, including data protection laws (such as the GDPR, the UK GDPR, India’s DPDP Act, and US state privacy laws). PrepFive is not a data broker, an enrichment service, or a people-search database, and must not be used to make high-impact decisions about employment, credit, insurance, housing, education, public benefits, or legal rights. See our Terms of Service for the full acceptable-use rules.

If you are a person researched in PrepFive and want to know what we hold about you, contact [email protected]. We will need enough information to identify the records and verify your request.

• Provide and operate PrepFive — generate briefs, save your history and preferences, route requests through our infrastructure.
• Secure the service — authenticate you, prevent abuse, rate-limit requests, investigate incidents, comply with law.
• Billing and account administration — process payments, issue invoices, apply tax, handle refunds, enforce plan limits.
• Support — respond to questions and fix issues you report.
• Product analytics and improvement — understand which features are used and where users get stuck.
• Legal compliance — meet our legal obligations and enforce our agreements.

Where the law requires a legal basis (for example, in the EU/EEA and UK), we rely on contract performance for service delivery and billing, legitimate interests for security and product improvement, consent for non-essential cookies and marketing, and legal obligation for tax and accounting records.

We use the following third-party service providers (sub-processors) to run PrepFive. We share only the data each one needs to perform its role.

We do not sell personal data. We do not share personal data for cross-context behavioural advertising. The list above changes only when our infrastructure changes — we will update this page when it does.

We use PostHog for privacy-respecting product analytics. We send a small set of behavioural events such as page views on the marketing site, install-button clicks, sign-ups, brief requests and renders, view changes inside the extension, subscription start, and errors. Each event carries a small set of properties from a fixed allowlist.

We do not send PostHog any of the following:

• your search queries or any free-text you enter;
• the names of people or companies you research;
• the contents of any brief, source link, profile, or note;
• your email address, phone number, or other contact details;
• API tokens, session tokens, or any other secret;
• raw prompts sent to or responses returned from AI providers.

On the marketing site, PostHog runs in a cookieless mode by default — the same behavioural events are recorded anonymously in memory, but no cookie or localStorage identifier is set. If you accept the consent banner, a first-party identifier is stored in a cookie and localStorage so your sessions can be linked across visits. If you reject the banner, no further events are sent at all. Inside the Chrome extension, you can disable product analytics entirely from the Settings view.

PrepFive’s briefs are produced by an AI inference provider (currently OpenAI). When you run a search, your search inputs and the source material PrepFive retrieves are sent to that provider so the model can generate a brief.

AI output can be incomplete, out of date, or wrong. You must review briefs before relying on them. PrepFive’s briefs are not professional advice, and must not be used as the basis for high-impact decisions about employment, credit, insurance, housing, education, public benefits, legal rights, or similar matters.

We use a small number of cookies and local-storage entries. The full list, including durations and how to opt out, is in our Cookie Policy. You can change your consent choice at any time via the “Cookie settings” link in the footer of the marketing site.

PrepFive is operated from India and uses sub-processors based in the United States and other countries. When we transfer personal data internationally, we rely on appropriate safeguards, including standard contractual clauses where required, vendor data-processing agreements, and technical and organisational security measures.

For India: cross-border transfers are made only to destinations not restricted by the Indian government under the DPDP Act.

• Account data — kept while your account is active. Removed within a reasonable period after account deletion, subject to legal retention rules.
• Brief and search history — deleted automatically on a rolling basis by plan: Free, 7 days after a record was last searched; Pro, at the end of your current billing cycle; Ultra, retained indefinitely. Also removed when you delete your account.
• Billing and tax records — kept for as long as required by tax and accounting law (typically several years).
• Server logs and security events — kept for a limited security and abuse-prevention window, then rotated out.
• Product analytics — kept under PostHog’s default retention policy. You can opt out at any time; opt-out stops new events but does not retroactively delete past events.
• Support correspondence — kept for support history and dispute handling.

Depending on where you live, you may have rights to access, correct, delete, export, restrict, or object to our processing of your personal data, and to withdraw any consent you have given. You can also unsubscribe from any marketing emails we send.

To make a request, email [email protected]. We may need to verify your identity before responding. We aim to respond within the timeframe required by the law that applies to you (typically 30 days, shorter in some jurisdictions).

India (DPDP): you can contact our grievance officer at the address above. You may also raise concerns with the Data Protection Board of India once it is operational.
EU/EEA and UK: you have the right to lodge a complaint with your data protection authority.
California and other US privacy-law states: rights of access, deletion, correction, and opt-out apply where the relevant law covers us or the processing.

You can delete your account from the extension Account view, or by emailing [email protected]. Deleting your account triggers cancellation of any active subscription and removal of your account data, profile context, search history, and saved meeting types from our systems within a reasonable period, subject to legal retention rules for billing and tax records.

We use reasonable technical and organisational measures to protect personal data, including HTTPS in transit, access controls and least-privilege vendor keys, secrets kept out of client code and source control, dependency monitoring, server-side rate limiting, and routine logging and incident response. No system is perfectly secure.

Report a security issue to [email protected]. Please give us a reasonable opportunity to investigate and remediate before public disclosure.

Our use of information received from Google APIs, and all user data handled by the PrepFive Chrome extension, adheres to the Chrome Web Store User Data Policy, including the Limited Use requirements.

We will update this policy when PrepFive, our sub-processors, our data practices, our markets, or the law materially change. The updated version will show a new “Last updated” date. If a change is material, we will provide additional notice where required.

Privacy: [email protected]
Security: [email protected]
Support: [email protected]
Provider: KodingKorp, H-264, WeWork Berger Delhi One, Sector-16B, C-001/A2, Gautam Buddha Nagar, Noida, Uttar Pradesh 201301, India.