Privacy Policy

Last updated: 7 July 2026

PriceAnvil ("we", "us") provides instant-quote calculators that local service businesses embed on their own websites. This policy explains what personal data we handle, why, and what your rights are. It covers three groups of people: visitors to priceanvil.com, account holders (the businesses that use PriceAnvil), and end customers — people who request a quote through a calculator embedded on a business's website.

Contact for anything in this policy: support@priceanvil.com.

1. Data we collect and why

If you visit priceanvil.com

• Analytics (optional, with your consent only) — we use Google Tag Manager to understand which pages bring visitors and where people drop off. This loads only if you choose "Allow analytics" in the cookie banner. Legal basis: consent.
• Hosting logs — our static site is served by GitHub Pages, which may log IP addresses for security and operational purposes as any web host does. Legal basis: legitimate interests.

If you create a PriceAnvil account

• Account data — your email address and a securely hashed password (or your Google account identity if you sign in with Google). Legal basis: contract.
• Billing data — if you subscribe to Pro, payment is handled by Stripe. We never see or store your card details; we store your Stripe customer and subscription identifiers and your plan status. Legal basis: contract.
• Your calculator content — the pricing, questions, branding and settings you build. Legal basis: contract.
• Transactional email — we email you for account actions (password resets, email confirmation) and to notify you when a new lead arrives. Delivery is handled by Resend. Legal basis: contract.

If you request a quote through an embedded calculator

When you use a quote calculator on a business's website, the name, contact details and answers you submit are delivered to that business. For this data the business is the data controller and PriceAnvil is a data processor: we store and transmit the lead on the business's behalf and on its instructions, and we do not use it for our own purposes, sell it, or contact you. To exercise your data rights over a quote you submitted, contact the business you requested the quote from; if you can't reach them, email us and we will help route your request.

2. Cookies and local storage

• Essential (no consent needed) — the dashboard stores your login session in your browser's local storage so you stay signed in. The embedded widget stores only whether you left it open or closed. Your cookie choice itself is stored locally so we don't re-ask.
• Analytics (consent required) — Google Tag Manager and the tags inside it set cookies only after you choose "Allow analytics". You can change your mind at any time via the "Cookies" link in the footer.

We do not use advertising or cross-site tracking cookies.

3. Who we share data with (sub-processors)

• Supabase — database, authentication and file storage, hosted in the EU (London region). All account data, calculators and leads live here, protected by row-level security.
• Stripe — subscription payments and billing.
• Resend — transactional email delivery (account emails and lead notifications).
• Google — analytics, only with your consent.
• GitHub Pages / Cloudflare — static site hosting and DNS.

We never sell personal data.

4. How long we keep data

• Account data: for as long as your account exists. Deleting your account removes your profile, calculators and their leads.
• Leads: until the owning business deletes them or deletes the calculator or account they belong to.
• Billing records: as long as required for tax and accounting law.

5. Your rights

Under UK GDPR you can ask us for access to, correction of, deletion of, or a portable copy of your personal data, and you can object to or restrict certain processing. Email support@priceanvil.com and we'll respond within one month. You also have the right to complain to the Information Commissioner's Office (ico.org.uk).

6. Security

Data is encrypted in transit (TLS) and at rest. Database access is enforced with row-level security so each business can only ever read its own calculators and leads. Payment data is handled entirely by Stripe, a PCI-DSS Level 1 provider.

7. Changes

If we make material changes to this policy we will update this page and the date above, and for significant changes we will email account holders.