Draft dated September 27, 2026 — for lawyer review before launch. SOHEIL LLC, a Delaware limited liability company ("PROSPECT", "we"), operates prospectpad.fun.
We collect the minimum needed to run the site: a public X handle to name a page, and, for prospects who claim a page, what it takes to verify them and pay them. We don't sell data, run ad trackers, or profile anyone. Blockchain activity is public by its nature and isn't ours to hide or delete.
Anyone visiting. Standard server logs (IP address, browser type, pages requested) kept briefly for security and debugging. A session cookie only if you sign in. No third-party analytics or advertising cookies.
Fans who launch or nominate. The public wallet address that signs the launch transaction; for nominations, a hashed form of your IP address used only to limit repeat votes. We don't link either to a name.
Prospects who claim a page. Your X account id and handle (from X sign-in), your school email address (to verify you), your display name, school and conference, a profile photo and social links you choose to show, your age confirmation, the wallets you and your immediate family use (kept so we can enforce the no-trading rule), your payout method and payout handle, and your typed signature on the Player Agreement with the time you signed. Payment and tax records are kept as the law requires.
The public ledger. Fee events, payouts and receipts are recorded so you and anyone else can check what a prospect was paid. Receipts show the prospect's name, the amount and the date; they never show your email, wallets or payout details.
We use a few service providers, each only for the job named: Railway (hosting and the database), Cloudflare (domain, email routing and encrypted backups), Helius (reading the Solana network), X (sign-in and public posts), pump.fun (where tokens live; we send nothing about you to them beyond the public transaction), Telegram (our internal alerts, which contain no personal data beyond a handle), and, when we send email, Resend. Payments are sent through the method you pick (for example Venmo or a bank transfer), which has its own privacy policy. We share information with law enforcement or a school only when legally required or to enforce the Player Agreement's delisting rule, and we'll tell you when we can.
We don't sell or rent personal information. We don't show ads. We don't use your data to train models. We don't publish a prospect's email, wallets or payout details.
Server logs: about 30 days. Nomination hashes: until the nominated prospect claims or 90 days, whichever is first. Prospect account data: while the page is claimed, then removed within 90 days of delisting, except payment, tax and agreement records, which we keep for seven years because the law requires it. Encrypted database backups roll off within 30 days. Records on the Solana blockchain are permanent and public.
Prospects can edit or remove their socials and photo, pause or delist their page, and ask us for a copy or deletion of their data at any time by emailing hello@prospectpad.fun from the school email on file. Residents of California and other states with privacy laws have the rights those laws provide, including to know, delete and not be discriminated against for asking; we honor them for everyone. We don't sell data, so there is nothing to opt out of.
The site is for people 18 and older. We don't knowingly collect information from anyone under 18; if we learn we have, we delete it.
Everything is served over HTTPS. Keys that control token fees are encrypted at rest, backups are encrypted, and access to the database is limited to the operator. No system is perfect; if a breach affects you we'll notify you as the law requires.
When this policy changes the date at the top changes. Questions: hello@prospectpad.fun. [Lawyer: confirm state-law disclosures (CCPA/CPRA thresholds likely not met at launch) and the retention periods above.]