Terms and conditions for companies

Parties to the Agreement

Why and You Prosper Oy, Business ID 3505416-4, Asemakatu 4, 76100 Pieksämäki, Finland (“Prospr”), provides a service (“Service”) through which companies can implement performance-based influencer and affiliate marketing collaborations as well as traditional influencer collaborations.

The company registered as a business user on the Prospr platform (“You”, “Client”).

By using the Service, you accept these Terms and Conditions.

1. Purpose of the Terms

The purpose of these Terms is to define the conditions under which the Client uses the technology platform provided by Prospr for implementing performance-based influencer and affiliate marketing collaborations as well as traditional influencer collaborations.

Prospr provides the Client with a technology platform through which the Client can:

• Create and manage programmes
• Find and collaborate with influencers
• Utilise Prospr’s recommendation system, which suggests suitable influencers for programmes
• Track programme results and performance

Prospr acts as a neutral technology platform that enables collaboration between the parties, but does not participate in the execution of programmes, content creation, or commercial decision-making.

2. Prospr’s Role

Prospr acts solely as a technology platform.

Prospr is not a marketing agency, reseller, employer, principal, or agent, and is not a party to agreements between the Client and influencers.

Prospr provides a platform through which the Client and an influencer can agree on the terms of a programme. The Client may attach to their programme a document describing the obligations of influencers applying to join the programme; the Prospr platform will require the influencer to accept the programme terms before applying. In addition, Prospr requires that influencers comply with Prospr’s general influencer terms and conditions, available at https://prosprapp.com/legal/.

The Client is responsible for:

• The content, terms, and lawfulness of programmes
• The correct use of its brand, materials, and trademarks
• Providing influencers with guidance to the extent that they need it in relation to the Client’s programmes
• The commercial terms agreed with influencers

2.1 No Employment or Agency Relationship

Nothing in these Terms constitutes or is intended to constitute an employment relationship, agency relationship, representation relationship, franchise relationship, or other comparable legal relationship between Prospr and the Client, between Prospr and influencers, or between the Client and influencers. Prospr has no managerial or supervisory authority over influencers.

3. Programmes and Tracking

The Client defines, on a programme-by-programme basis, the fee model according to which influencers are compensated. The tracking data provided by Prospr is used for reporting and calculating fees. Prospr’s tracking data serves as the primary and binding source for determining programme results, events, and fees.

Fraudulent activity and manipulation of the system is prohibited. This includes all actions that manipulate clicks or events, such as the use of automated tools, bots, or scripts; falsifying visits; and deliberately concealing visits by bypassing tracking mechanisms. Invalid traffic also includes traffic that seeks to disrupt or prevent the functioning of the Service, or to gain unauthorised access to the Service.

3.1 Liability for Influencer Activity

Prospr is not responsible for the actions, content, or breaches of contract by influencers. Prospr is not responsible for damages caused to third parties. The Client agrees not to instruct or encourage influencers to act in breach of any applicable laws, good morals, or regulatory requirements. The Client is responsible for ensuring that its instructions and marketing activities are lawful.

3.2 Email Marketing

The Client may permit influencers to carry out email marketing within its programmes only if the recipients have given valid consent (opt-in) to receive marketing communications. It is the Client’s responsibility to ensure that email marketing complies with applicable legislation, including the GDPR, and in Finland, the Act on Electronic Communications Services (Laki sähköisen viestinnän palveluista).

3.3 Tracking Data

Prospr does not guarantee the complete accuracy of tracking data. Factors such as third-party services used on the Client’s web service, ad blockers, network disruptions, and browser privacy settings and restrictions may limit the recording of Events, and Prospr is not responsible for any deficiencies in tracking data arising from these factors.

Where the compensation model for the Client’s programme is based on conversions that occur in the Client’s system or on the Client’s website, the Client is obliged to ensure that every Event which the Client’s system identifies as being related to a Prospr affiliate link is transmitted to Prospr’s system without delay.

4. Payments and Fees

The Client undertakes to pay:

• Compensation to influencers in accordance with the terms of the programmes, through the Prospr platform.
• A platform fee to Prospr in accordance with Prospr’s price list, calculated on the total net amount of compensation paid to influencers (exclusive of VAT). The applicable platform fee is determined in accordance with Prospr’s current price list, available at prosprapp.com. Prospr reserves the right to revise the platform pricing model with 60 days’ notice.

All fees referred to in these Terms are subject to the applicable rate of value added tax and any other statutory charges.

5. Payment Processing and Invoicing

Prospr acts solely as a technical payment intermediary and reporting system. Prospr will not pass compensation on to influencers until the Client has paid the corresponding programme or collaboration fees and the platform fee in full into Prospr’s account. Prospr is not responsible for influencers’ taxes, social security contributions, or other statutory obligations.

The invoicing process between Prospr and the Client is as follows:

At the end of each calendar month, the Client shall review the programme results for preceding months on the Prospr platform and, using the platform’s functions, submit any reasoned objections within 30 days. After 30 days, Prospr has the right either to consider any unreviewed results from preceding months as approved, or to invoice the Client a late fee equal to 5% of the total commissions for programme results that were not reviewed by the deadline.

Following approval or deemed approval of the report, Prospr will issue an invoice to the Client. The payment term is fourteen (14) days net from the date of the invoice.

Prospr is not obliged to pay influencers their compensation until the Client has made the corresponding payment in full to Prospr.

6. Data Protection (GDPR)

The parties undertake to comply with the applicable data protection legislation in force at any given time, including the EU General Data Protection Regulation (GDPR).

Each party acts as an independent data controller in respect of its own processing of personal data. Prospr processes personal data for the purposes of providing its service, in accordance with Prospr’s then-current privacy policy.

If the collaboration between the parties requires the processing of personal data such that one party acts as the data controller and the other as the data processor, the parties undertake to enter into a separate Data Processing Agreement (DPA) before processing commences.

7. Intellectual Property Rights and References

The Client retains all rights to its own brand, logos, and materials.

The Client grants Prospr the right to use the Client’s name and logo as a reference and in marketing communications. The Client may withdraw this right by notifying Prospr’s customer service by email.

Prospr grants the Client the right to use Prospr’s name and logo as a reference and in marketing communications. Prospr may withdraw this right by notifying the Client by email.

8. Limitation of Liability

Prospr provides the service on an “as is” basis.

Prospr is not liable for:

• The commercial results of programmes
• Loss of revenue or profit
• Disputes between the Client and influencers
• Damages arising from temporary outages, maintenance work, or technical disruptions
• Outages arising from the actions of third parties (such as web hosting services)
• Damages arising from force majeure events, such as natural disasters, war, regulatory orders, or other events beyond the parties’ control
• Loss or destruction of data
• Errors in the service; Prospr does not guarantee uninterrupted or error-free operation of the service

Prospr’s total liability for all direct damages arising in connection with these Terms is limited to the amount paid to Prospr by the relevant contracting party under these Terms during the six (6) months preceding the event that caused the damage. Prospr is not liable for indirect or consequential damages.

The Client undertakes to reimburse Prospr for reasonable legal and court costs incurred should a third party bring a claim against Prospr arising directly from the Client’s breach of its obligations under these Terms.

9. Duration and Termination

These Terms are valid until further notice. Either party may terminate the agreement with 14 days’ notice. Termination must be submitted in writing.

Prospr may update these Terms by notifying the Client by email 60 days before the new terms take effect. The Client has the right to terminate the agreement if it does not accept the new terms.

9a. Prohibition on Off-Platform Collaboration

The Client commits not to engage in collaboration outside the Prospr platform with any influencers that it has come to know through the platform, or with whom it has collaborated through the platform. This prohibition applies for the duration of the agreement and for 12 months after its termination. In the event of a breach of this provision, the Client shall be obliged to pay Prospr a contractual penalty of €3,000 or an amount equal to Prospr’s estimated lost platform fee, whichever is higher. The contractual penalty shall be paid separately for each influencer in respect of whom the contractual term has been breached.

10. Applicable Law and Other Terms

These Terms are governed by the laws of Finland.

Any disputes shall be resolved primarily through negotiation and, as a final recourse, before the Helsinki District Court.

By accepting this agreement, you also agree to Prospr’s Privacy Policy, available at https://prosprapp.com/legal.

Why And You Prosper Oy / Prospr Last updated: April 15th 2026

PRIVACY POLICY

Updated: 20 March 2026

Why And You Prosper Oy (Business ID 3505416-4) (“Prospr”, “we”) operates the Prospr platform at prosprapp.com. We are committed to processing personal data lawfully, transparently, and securely in accordance with the EU General Data Protection Regulation (GDPR, 2016/679) and applicable national data protection legislation.

This Privacy Policy describes how we collect, use, store, share, and protect your personal data when you use our website, platform, and services.

1. Data Controller

Why And You Prosper Oy Business ID: 3505416-4 Asemakatu 4, 76100 Pieksämäki, Finland Email: hello@prosprapp.com

Why And You Prosper Oy is the data controller for all processing of personal data described in this policy, unless otherwise stated. If you have any questions about the processing of your personal data, please contact us at the email address above.

2. Definition of Personal Data

Personal data means any information relating to an identified or identifiable natural person. Such data includes, for example, name, email address, IP address, payment details, identifiers, and online behaviour.

3. Personal Data Collected

We collect different categories of personal data depending on how you use Prospr.

3.1 Website Use

We automatically collect technical data to ensure the functioning and security of the website:

• IP address
• Date and time of visit
• Pages visited
• Browser type and version
• Operating system
• Language and approximate location
• Referring website

Legal basis for processing: Legitimate interest (website security, functionality, and visitor statistics — GDPR Article 6(1)(f)).

3.2 Account Creation and Platform Use

When brands, influencers, or affiliates register and use the platform, we may collect the following data:

• Name
• Email address
• Phone number
• Company or brand name
• Social media profiles
• Billing and payment details
• IP address and device information

If you link your social media accounts to your profile, we load data about you and your posts from those accounts: for example, your follower count, number of posts, view counts, and your most recent posts. This data is used when presenting you to companies, matching you to suitable programmes, and in certain cases for calculating commissions. Data loaded from a social media account is deleted when you remove the link to your social media account, or when you delete your account from Prospr.

Legal basis for processing: Performance of a contract (GDPR Article 6(1)(b)) and legitimate interest (GDPR Article 6(1)(f)).

3.3 Contact Enquiries

When you contact us by email, chat, or via forms, we collect the following data:

• Name
• Email address
• Phone number
• Message content

Legal basis for processing: Legitimate interest (customer service and communications — GDPR Article 6(1)(f)).

Data is retained for a maximum of 24 months, unless legislation requires a longer retention period.

3.4 Job Applications

In the recruitment process, we process:

• CV and cover letter
• Contact details
• Employment and educational history

Legal basis for processing: Legitimate interest (recruitment — GDPR Article 6(1)(f)).

Data is retained for 24 months, unless the applicant requests earlier deletion.

3.5 Newsletter Subscription

When subscribing to the newsletter, we collect:

• Name
• Email address

We send marketing communications and product updates. Legal basis for processing: Consent (GDPR Article 6(1)(a)). You may cancel your subscription at any time via the link in the newsletter.

3.6 Affiliate Link Tracking

3.6.1 When you click on an affiliate link enabled by the Prospr platform as a web user

When influencers promote companies through the Prospr platform, Prospr receives information about web users who have clicked on influencers’ links. In this context, Prospr may store the following data about the web user:

• The user’s IP address, which is recorded in logs solely for technical troubleshooting and temporarily for rate-limiting excessive traffic. It is not linked to the user’s activity on the destination website or to link tracking.
• A functional cookie for recognising a returning click by the same user: this enables the possible revocation of tracking consent given in the Prospr service in relation to that specific link, as well as ensuring the correct redirection of the link to the destination website. The cookie is not used for any purpose other than this; it is not used, for example, to track the user on the site they are directed to.

Prospr may also ask whether your visit to the destination website may be tracked by placing a cookie or similar technical identifier specifically linked to the link you clicked.

If you permit tracking of your visit, Prospr passes your consent to the destination website, which is responsible for compliance with your consent. Even in this case, Prospr does not store in its own system any data that would link your visit to your personal data.

Legal basis for processing: Consent (GDPR Article 6(1)(a)) and legitimate interest (GDPR Article 6(1)(f)).

3.6.2 When you are an influencer on the Prospr platform

When you share links created on the Prospr platform and web users click on them, we track the clicks on your shared links and the events transmitted to Prospr by the destination website or system in connection with those links, such as conversions and purchases. This data is used to calculate fees, prevent misuse, and provide transparent reporting. We do not associate personal data of web users with this data.

Legal basis for processing: Performance of a contract and legitimate interest (GDPR Article 6(1)(b) and (f)).

4. Purposes of Processing Personal Data

We use personal data for the following purposes:

• Providing and maintaining the Prospr platform
• Connecting brands with influencers and affiliates
• Tracking campaign results and fees
• Preventing fraud and misuse
• Improving and developing our services
• Communicating with users
• Sending marketing communications (with consent)
• Fulfilling statutory obligations

We do not use personal data for automated decision-making or profiling, with the sole exception that if you have registered on the Prospr platform as an influencer and have consented to Prospr creating a profile of you based on your linked channels, Prospr’s staff and automated systems may use this profile to recommend you for suitable programmes as quickly and accurately as possible. In this case, Prospr reads the data and content of your linked channels, including follower counts, content themes, and similar information that helps identify suitable programmes. Influencers may also always apply to programmes of their own choosing.

5. Data Retention Periods

We retain personal data only for as long as is necessary to fulfil the purposes for which it was collected, including legal, accounting, and contractual obligations. Typical retention periods:

• Account data: for as long as your account is active
• Support requests: up to 24 months
• Marketing data: until you withdraw your consent
• Billing and payment data: data required directly for invoicing for 6–9 months, with invoice-related data retained for the period required by legislation

6. Data Sharing and Processors

We do not sell personal data to third parties.

We may share data with trusted data processors who assist us in providing our services, such as:

• Hosting and cloud service providers
• Payment processors
• Analytics and marketing platforms
• Customer service tools
• Email and CRM service providers

All processors are bound by data processing agreements in accordance with the GDPR. We do not permit processors to use data for purposes other than those agreed.

We may also disclose data to authorities where we have a statutory obligation to do so.

 

6.1. Third Parties and Personal Data Processing

Processor	Country	Purpose	Further information
Google Cloud EMEA Limited	Ireland	Cloud services and platform infrastructure	Subprocessors
UpCloud Oy	Finland	Data storage	Data processing agreement
Plus Five Five, Inc. (Resend)	United States	Email services	Subprocessors
Notion Labs, Inc.	United States	Internal workspace platform	Subprocessors
Sendinblue SAS (Brevo)	France	Newsletter and marketing automation	Data processing agreement

7. International Data Transfers

Data held by Prospr is stored in data centres located within the EU/EEA. Some of our service providers are located outside the EU/EEA, including in the United States, meaning data may be temporarily processed outside the EU/EEA. When data is transferred outside the EU/EEA, we use the following safeguards:

• EU Standard Contractual Clauses (SCCs)
• GDPR-approved safeguards

We ensure that all international data transfers take place with appropriate safeguards and in accordance with GDPR requirements.

 

8. Rights of the Data Subject

Under the GDPR, you have the following rights in relation to the processing of your personal data:

• Right of access — you may request a copy of the data we hold about you
• Right to rectification — you may request the correction of inaccurate or incomplete data
• Right to erasure — you may request the deletion of your data where the basis for processing no longer applies
• Right to restriction of processing — you may request the restriction of processing in certain circumstances
• Right to object — you may object to processing based on legitimate interest
• Right to withdraw consent — you may withdraw any consent you have given at any time
• Right to data portability — you may request your data in a machine-readable format
• Right not to be subject to automated decision-making — you have the right to request a human review

To exercise your rights:

• If you are a Prospr platform user, you may delete your data by deleting your account directly through the Prospr platform or application.
• In other cases, please contact us at hello@prosprapp.com

We aim to respond to requests within 30 days as required by the GDPR. You also have the right to lodge a complaint with the data protection authority:

Office of the Data Protection Ombudsman P.O. Box 800, 00531 Helsinki, Finland tietosuoja@om.fi | www.tietosuoja.fi

9. Data Security

We apply appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, misuse, or alteration. These measures include, among others:

• Encryption of data in transit and at rest
• Access controls and restriction of user privileges
• Regular security assessments
• Staff training on data protection matters

In the event of a data breach, we will notify the competent supervisory authority within 72 hours in accordance with GDPR Article 33, and where necessary, also notify the affected data subjects.

10. Changes to the Privacy Policy

We may update this Privacy Policy from time to time. We will notify data subjects of any significant changes by email or via the platform before the changes take effect. The latest version is always available at prosprapp.com.

COOKIE POLICY

Prospr – Why And You Prosper Oy

Updated: 30 March 2026

This page explains how we use cookies and similar tracking technologies on our website prosprapp.com and our influencer marketing platform prosprapp.com (“Service”).

The use of cookies is based on the EU General Data Protection Regulation (GDPR, 2016/679) and the Act on Electronic Communications Services. We use cookies only for the purposes described in this document.

1. What Are Cookies?

Cookies are small text files stored on your device when you visit the Service. Cookies contain an anonymous, unique identifier that allows Why and You Prosper Oy to count and recognise different browsers visiting the Service. They help the Service function correctly, improve user experience, save preferences, and collect analytics on Service usage.

Through cookies, we may collect information such as: IP address, time of visit, pages visited and time spent on them, as well as browser type and operating system.

In addition to cookies, we may use similar tracking technologies such as pixels and local storage (local storage, session storage).

2. Why Does Prospr Use Cookies?

We use cookies for the following purposes:

• Ensuring the correct functioning of the Service and recording transaction data
• Remembering user settings and login information
• Enabling user account login
• Utilising analytics in product development and reporting
• Improving the customer experience
• Measuring and reporting on campaigns
• Our own marketing (with consent)

3. Purposes of Data Use

3.1 Essential Cookies

Functional Cookies

We use functional cookies to provide the Service and enable its core functionalities. These include functions such as implementing login, security and fraud prevention, submitting forms, and remembering user-specific settings.

Contractual Cookies

Through contractual cookies, we enable the Service to function, such as the operation of affiliate links and the implementation of conversion tracking. These cookies are necessary for the performance of the agreement you have made with Prospr. If you have registered on the platform as a Company or an Influencer, your separate consent for their use will not be requested.

These cookies collect information about the occurrence of events on the platform across different devices and may also be used in the development of the Service.

Affiliate Link Tracking

When you click on an advertising link shared by an influencer that has been generated in Prospr’s system, we use the following types of cookies:

• Consent-based cookie (on the destination website): Prospr may ask whether your visit to the destination website may be tracked by placing a cookie linked to the link you clicked. If you allow this, it will be used to associate your visit with the influencer whose link you clicked. Prospr passes your consent to the destination website, which is responsible for compliance with your consent. Prospr’s system does not associate your personal data, IP address, or any other transaction data with the cookie; it only links the visit to the influencer who created the link.
• Functional cookie for recognising a returning click by the same user: This enables the possible revocation or modification of tracking consent given in Prospr’s service regarding that link, as well as the correct redirection of the link to the destination website. The cookie is not used for any other purpose; it is not used on the destination site you are directed to.

Analytics and Marketing Cookies for Our Website and Newsletters

These cookies help us understand how visitors use our Service and what they expect from it. Through cookies and similar technologies, we can improve the services of Why And You Prosper Oy. These cookies collect data such as pages visited, time spent on the site, and device and browser type, and you may decline them when visiting our site.

Data is aggregated and anonymised where possible. IP anonymisation is applied where applicable.

4. Third-Party Cookies

In addition to our own cookies, we use third-party services that may set cookies and process them in accordance with their own terms. We currently use the following services:

• Brevo for sending newsletters and marketing automation

We have no direct influence over the technical operation of third-party cookies — we only control when and to whom consent for their use is granted.

5. How Can Users Manage Their Preferences?

You have the right to manage your cookie settings and withdraw your consent at any time.

The storage and collection of cookie data takes place on the basis of the user’s consent or a customer agreement. The user gives their consent through a pop-up window in the Service or by entering into an Influencer or Company agreement.

For newsletters, the user accepts the storage and collection of cookie data upon subscribing to the newsletter. The user may cancel their subscription at any time at prosprapp.com, after which the storage and collection of cookie data will also cease.

6. Updates to the Cookie Policy

We may update this Cookie Policy from time to time, for example as legislation changes or our services develop. We will notify you of any significant changes on our website or by email. The latest version is always available at prosprapp.com/legal.

By continuing to use the website after an update, you accept the amended content of the Cookie Policy with respect to non-essential cookies for which you have previously given your consent.

7. Contact Information

If you have any questions about cookies or the processing of personal data, please contact us:

Why And You Prosper Oy Asemakatu 4, 76100 Pieksämäki, Finland hello@prosprapp.com prosprapp.com