Privacy Policy

Last updated: 10 July 2026

PriceAnvil ("we", "us") provides instant-quote calculators that local service businesses embed on their own websites. This policy explains what personal data we handle, why, and what your rights are. It covers three groups of people: visitors to priceanvil.com, account holders (the businesses that use PriceAnvil), and end customers — people who request a quote through a calculator embedded on a business's website.

Contact for anything in this policy: support@priceanvil.com.

1. Data we collect and why

If you visit priceanvil.com

• Analytics (optional, with your consent only) — we use Google Tag Manager to understand which pages bring visitors and where people drop off. This loads only if you choose "Allow analytics" in the cookie banner. Legal basis: consent.
• Campaign attribution (optional, with your consent only) — when a URL contains campaign or PriceAnvil referral parameters, we keep the first and latest source so we can understand which acquisition work produces activated accounts. Legal basis: consent.
• Hosting logs — our static site is served by GitHub Pages, which may log IP addresses for security and operational purposes as any web host does. Legal basis: legitimate interests.

If you create a PriceAnvil account

• Account data — your email address and a securely hashed password (or your Google account identity if you sign in with Google). Legal basis: contract.
• Billing data — if you subscribe to Starter or Pro, payment is handled by Stripe. We never see or store your card details; we store your Stripe customer and subscription identifiers and your plan status. Legal basis: contract.
• Your calculator content — the pricing, questions, branding and settings you build. Legal basis: contract.
• Transactional email — we email you for account actions (password resets, email confirmation), setup/embed assistance and to notify you when a new lead arrives. Delivery is handled by Resend. Legal basis: contract.
• Product activation — we record whether a published calculator has loaded or been opened on an external website and when it receives its first lead. We store the installation domain only as a one-way SHA-256 hash and do not store the widget visitor's identity for this measurement. Legal basis: legitimate interests in operating and improving the service.

If we contact your business about PriceAnvil

• Business prospect data — business name, public business contact address, website, trade, location, source, company type and our relevance assessment. We use this only where we have verified an appropriate B2B legal basis. Legal basis: legitimate interests or consent, depending on the contact.
• Outreach delivery records — sent, delivered, replied, bounced, complained and unsubscribe events. Every outreach message identifies PriceAnvil and includes an unsubscribe mechanism. Replies, bounces, complaints and opt-outs stop follow-ups automatically.
• Automated drafting — OpenAI may receive public business context to draft a short introduction. We do not send it the prospect's email address, and API response storage is disabled. Sending eligibility and suppression are enforced separately in our database.

If you request a quote through an embedded calculator

When you use a quote calculator on a business's website, the name, contact details and answers you submit are delivered to that business. For this data the business is the data controller and PriceAnvil is a data processor: we store and transmit the lead on the business's behalf and on its instructions, and we do not use it for our own purposes, sell it, or contact you. To exercise your data rights over a quote you submitted, contact the business you requested the quote from; if you can't reach them, email us and we will help route your request.

2. Cookies and local storage

• Essential (no consent needed) — the dashboard stores your login session in your browser's local storage so you stay signed in. The embedded widget stores only whether you left it open or closed. Your cookie choice itself is stored locally so we don't re-ask.
• Analytics (consent required) — Google Tag Manager and the tags inside it set cookies only after you choose "Allow analytics". You can change your mind at any time via the "Cookies" link in the footer.
• Attribution (consent required) — first/latest campaign and referral parameters are stored locally only after analytics consent and are attached to your account if you sign in.

We do not use advertising or cross-site tracking cookies.

3. Who we share data with (sub-processors)

• Supabase — database, authentication and file storage, hosted in the EU (London region). All account data, calculators and leads live here, protected by row-level security.
• Stripe — subscription payments and billing.
• Resend — transactional email delivery (account emails and lead notifications).
• OpenAI — constrained drafting of B2B outreach from public business context; no PriceAnvil customer leads or prospect email addresses are included.
• Google — analytics, only with your consent.
• GitHub Pages / Cloudflare — static site hosting and DNS.

We never sell personal data.

4. How long we keep data

• Account data: for as long as your account exists. Deleting your account removes your profile, calculators and their leads.
• Leads: until the owning business deletes them or deletes the calculator or account they belong to.
• Billing records: as long as required for tax and accounting law.
• Unsuccessful outreach records: normally no longer than 12 months. Minimal suppression records may be retained longer so that we continue to honour opt-outs and complaints.

5. Your rights

Under UK GDPR you can ask us for access to, correction of, deletion of, or a portable copy of your personal data, and you can object to or restrict certain processing. Email support@priceanvil.com and we'll respond within one month. You also have the right to complain to the Information Commissioner's Office (ico.org.uk).

6. Security

Data is encrypted in transit (TLS) and at rest. Database access is enforced with row-level security so each business can only ever read its own calculators and leads. Payment data is handled entirely by Stripe, a PCI-DSS Level 1 provider.

7. Changes

If we make material changes to this policy we will update this page and the date above, and for significant changes we will email account holders.