← Back home

Privacy Policy

Last updated: 10 May 2026

This Privacy Policy explains how Prime Listings (“we”, “us”) collects, uses, and safeguards information when you use primelistings.uk and the related dashboard and AI tools (the “Service”). We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

For any privacy question or to exercise your data rights, email mike@primelistings.uk.

1. Who we are

Prime Listings is a UK-based software service operated by Mike Billington. Contact: mike@primelistings.uk.

2. What data we collect

  • Account data — your email address and a securely-hashed password, handled by our authentication provider Supabase.
  • Payment data — billing details are entered directly into Stripe's hosted checkout. We never see or store your full card number; we only receive a subscription identifier and your billing email back from Stripe.
  • AI inputs you provide — the Google reviews, business names, topics, and descriptions you paste into our tools to generate AI responses.
  • Usage metadata — anonymous counters showing how many AI generations you have used in the current month, used to enforce plan limits.
  • Server logs — standard request logs (IP address, user agent, timestamps) retained briefly for security and abuse-prevention purposes.

3. Why we use it (legal basis)

  • Contract performance — to provide the Service you have signed up for and to bill you correctly on the Pro plan.
  • Legitimate interest — to monitor usage for abuse, debug errors, and improve product quality.
  • Consent — for any optional marketing communication you opt in to.
  • Legal obligation — to keep records required by HMRC and other UK law.

4. Who we share data with (subprocessors)

We use the following third parties to operate the Service. Each handles your data under their own privacy terms and appropriate data-transfer safeguards (Standard Contractual Clauses where applicable):

  • Supabase — authentication and database hosting (EU/US).
  • Anthropic — AI inference for generated text (US). Inputs are sent for processing but are not used to train Anthropic's models.
  • Stripe — payment processing for the Pro plan (US/UK).
  • Resend — transactional email delivery (US).
  • Vercel — application hosting and CDN (US/EU).

We do not sell or rent your personal data to anyone. We do not share your data with advertisers.

5. Data retention

  • Account data — retained while your account is active and for up to 6 months after closure, then deleted.
  • AI inputs — not retained beyond the lifetime of the request. Once your generated response is returned, the input text is not stored on our servers.
  • Billing records — retained for 6 years to comply with HMRC accounting requirements.
  • Server logs — typically retained for up to 30 days.

6. Your rights

Under UK GDPR you have the right to:

  • Access a copy of the personal data we hold about you
  • Have inaccurate data corrected
  • Have your data erased (“right to be forgotten”)
  • Restrict or object to certain processing
  • Receive your data in a portable format
  • Withdraw any consent you previously gave
  • Lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk

To exercise any of these rights, email mike@primelistings.uk. We aim to respond within 30 days.

7. Cookies

We only use strictly-necessary cookies required to keep you signed in (set by Supabase Auth). We do not use analytics cookies, advertising cookies, or any third-party tracking on the public site.

8. International transfers

Some of our subprocessors are based in the United States. Where data is transferred outside the UK or EEA, the transfer is protected by Standard Contractual Clauses or equivalent safeguards approved under UK GDPR.

9. Security

All traffic to the Service is encrypted in transit using TLS 1.2+. Passwords are hashed by Supabase using industry-standard algorithms. We follow the principle of least privilege for internal access to systems and data.

10. Children

The Service is not intended for use by anyone under the age of 18. We do not knowingly collect personal data from minors.

11. Changes to this policy

We may update this Privacy Policy from time to time. We will post any changes here and update the “Last updated” date at the top of this page. Material changes will also be communicated by email to active customers.

12. Contact

For any privacy question, data subject request, or complaint, email mike@primelistings.uk.