GDPR-compliant outreach on LinkedIn and email
Your data is stored in the EU, never sold, and used only to run your own campaigns. Bring your own lists, reach people at their work address, and hand your legal team a yes they can sign.
- Hosted in the EU
- Never sold or shared
- Work emails only
- PCI DSS checkout
Six promises we put in writing
The short version of how Prosyo treats your data and the people in your pipeline.
-
Your data stays in Europe
Workspaces, lead lists, messages and campaign history are stored on servers in the European Union. Your pipeline lives where your buyers do.
-
We never sell your data
Prosyo is not a contact database. We don’t collect people to resell, and your lists are never pooled with other customers. What you bring stays yours.
-
Work emails only
Our email finder looks for professional addresses only and keeps one only when it is verified with high confidence. Personal inboxes are off limits.
-
Bring your own CSV
Upload a CSV or Excel file, sync your CRM or import from LinkedIn. You decide what comes in, and you stay in control of it.
-
Export or erase, any time
Export any list to CSV in a click. Remove a person and they are gone from your workspace. Close your account and we erase your data.
-
Opt-outs respected everywhere
When someone asks not to be contacted, they are left out of every campaign in your workspace, for good.
A sales platform, not a contact database
Many prospecting tools make their money from data on people. Prosyo makes its money from software, so your data is never the product.
| Question | Prosyo | Typical data vendors |
|---|---|---|
| Where your lead lists are stored | EU servers | Often outside the EU |
| Sells or rents contact records | Never | Yes |
| Personal emails and private numbers | Never | Yes |
| Your lists pooled with other customers | Never | Yes |
| Works with your own CSV and CRM data | Yes | Varies |
| Who controls the data | You do | The vendor |
Is LinkedIn prospecting legal under GDPR? Yes, done right.
GDPR gives six lawful bases for using personal data. B2B prospecting relies on legitimate interest: contacting a professional, at work, about something that matters to their role.
- 1Relevant to their roleReach people whose job your offer genuinely helps, not everyone with a pulse.
- 2Professional channelsLinkedIn and work email. Never personal inboxes.
- 3Say who you are, make leaving easyA clear sender and a one-line way to opt out in every message.
- 4Keep a short recordNote why each audience is relevant, and act on objections straight away.
General guidance, not legal advice. Some countries add stricter rules for cold email (Germany, for example), so check the markets you target.
-
Art. 6(1)(a)
Consent
The person agreed to hear from you.
-
Art. 6(1)(b)
Contract
Needed to deliver a contract with them.
-
Art. 6(1)(c)
Legal obligation
Required to comply with the law.
-
Art. 6(1)(d)
Vital interests
Protecting someone’s life.
-
Art. 6(1)(e)
Public task
Official functions in the public interest.
-
Art. 6(1)(f)
Legitimate interests
A genuine business reason that respects the person’s rights. The basis B2B prospecting relies on.
How Prosyo customers prospect
Privacy built into every campaign
The safeguards run on their own, so doing the right thing is also the easy thing.
- A safe, human paceLinkedIn activity is spread across the working day within safe daily limits, so accounts stay healthy and nobody gets flooded.
- Encrypted connectionsAccess to your LinkedIn and inbox connections is encrypted with AES-256-GCM and never shown back in plain text.
- Website insights, with consentVisitor insights work alongside your cookie banner (Cookiebot, CookieYes or Google Tag Manager) and keep visitor IPs only as one-way hashes.
- Access you controlRemove a teammate and their sessions, API keys and connected accounts are cut off at once.
- AI on a need-to-know basisAI features receive only the details needed for the task you run, never your whole database.
- Isolated and encrypted in transitEvery workspace is kept apart from every other, and all traffic travels over HTTPS.
Card details never touch our servers
Checkout runs on PCI DSS Level 1 certified payment partners, the highest level of card-security certification there is. Your card details go straight to them, never to us.
- PCI DSS Level 1 payment partners
- Your full card number is never stored by Prosyo
- Pay by card, UPI or PayPal
Everything your DPO will ask for
Is Prosyo GDPR compliant?
Yes. Prosyo stores workspace data in the European Union, processes it only to run the campaigns you set up, never sells or shares it, and gives you the tools to honour access, deletion and objection requests. You stay the data controller for the prospects you contact; Prosyo acts as your processor.
Where is my data stored?
Your workspace, lead lists, messages and campaign history are stored on servers in the European Union.
Does Prosyo sell, rent or share my lead lists?
Never. Prosyo is a sales platform, not a contact database. We do not build lists of people to resell, and the people you import or find are visible only to your own workspace.
Is prospecting on LinkedIn legal under GDPR?
B2B prospecting is generally allowed under the legitimate interest basis when you contact professionals about something relevant to their role, through professional channels, say clearly who you are and stop when they ask. Keep a short record of why each audience is relevant. Rules for cold email vary by country, so check the markets you target. This is general guidance, not legal advice.
Do you find personal email addresses?
No. The email finder looks for professional (work) addresses only, and an address is saved only when it is verified with high confidence. Personal inboxes are not looked up.
Can I use my own lists?
Yes. Upload a CSV or Excel file, sync from your CRM or import from LinkedIn. You can export any list back to CSV whenever you like.
How do I handle a deletion or opt-out request?
Remove the person from your workspace and they are gone from your lists and campaigns. Anyone who asks not to be contacted is suppressed across every campaign in your workspace. To close your account and erase your workspace, email [email protected].
Do you sign a Data Processing Agreement (DPA)?
Yes. Ask through the contact page or email [email protected] and we will send our DPA.
Is payment on Prosyo PCI DSS compliant?
Yes. Checkout runs on PCI DSS Level 1 certified payment partners, the highest level of card-security certification. Prosyo never sees or stores your full card number.
Outreach your legal team will actually approve
Bring your own lists, keep your data in the EU and let Prosyo handle safe limits and opt-outs while you book meetings. 7 days free, no card.
- 7 days free
- No card required
- Cancel in two clicks
