NicheEdge
NicheEdge
by Promptally
← Back

Privacy Notice

Last updated: 19 June 2026

This document is a working template and has not yet been reviewed by a solicitor for this specific business. Have it reviewed before relying on it commercially.

This Privacy Notice explains how BenevolAI Limited (Promptally) ("NicheEdge", "we", "us") collects, uses, and protects your personal information when you use our app and related services (the "Service"). It addresses requirements in the UK, the European Economic Area, the United States, and Australia. If you're located elsewhere, the same standards generally apply to you as well.

1. Who we are

BenevolAI Limited (Promptally), registered in England and Wales, is the controller (UK/EU terms) responsible for your personal information collected through the Service.

Privacy enquiries: darren.sutton@benevolai.co.uk
Data Protection Officer: Darren Sutton — darren.sutton@benevolai.co.uk

2. Information we collect

CategoryExamplesSource
Account informationEmail address, password (hashed)Provided by you at signup
Payment informationBilling details, transaction historyYou, processed via Stripe — we do not store full card numbers
Content you providePrompts and inputs submitted to AI-powered featuresYou
Usage dataPages and features used, timestamps, device and browser type, approximate location from IPAutomatically, via PostHog
CommunicationsSupport requests, emails to usYou

We do not knowingly collect more personal information than we need to provide the Service.

3. How we use your information, and our legal basis (UK/EU)

PurposeLegal basis (UK/EU GDPR)
Create and maintain your accountPerformance of a contract
Process payments and manage your subscriptionPerformance of a contract
Provide AI-powered features (see Section 4)Performance of a contract / legitimate interests
Improve and secure the ServiceLegitimate interests
Send service-related communications (e.g. billing notices)Performance of a contract
Send marketing communicationsConsent (you can withdraw at any time)
Comply with legal obligationsLegal obligation

4. AI-powered features

  • When you use an AI-powered feature, the content you submit is processed by Anthropic, acting as our sub-processor, to generate a response.
  • Anthropic does not use inputs submitted via the API to train their models by default. We use Anthropic's standard API tier, under which your inputs are not used for model training.
  • We do not use AI to make decisions about you that have legal or similarly significant effects — decisions about pricing, account suspension, or eligibility are made by us directly, not by an automated system. If this changes, we will update this notice.
  • Where you interact with an AI system directly, we clearly indicate that you are interacting with an AI rather than a human.

5. Children and minors

NicheEdge is intended for users aged 16 and over. We do not knowingly collect personal information from anyone below this age. If we learn that we have collected information from someone below our minimum age, we will delete it and may suspend the associated account.

We do not use data from any account we know belongs to a minor for targeted advertising or behavioural profiling.

If you believe a child has provided us with personal information, contact darren.sutton@benevolai.co.uk.

6. Who we share information with

We share personal information only with:

  • Service providers who process data on our behalf under contract: Stripe (payments), Anthropic (AI features), PostHog (analytics), and Vercel (infrastructure, hosted in the United States — see Section 7).
  • Legal and safety reasons, where required to comply with law, enforce our Terms of Service, or protect the rights, property, or safety of NicheEdge, our users, or others.
  • Business transfers, if BenevolAI Limited (Promptally) is involved in a merger, acquisition, or sale of assets — you'll be notified before personal information becomes subject to a different privacy notice.

We do not sell your personal information, and we do not share it with third parties for their own independent advertising or marketing purposes.

7. International data transfers

Your information may be processed in countries other than the one you live in, including the United States (Vercel, Anthropic, Stripe, PostHog). Where we transfer personal information out of the UK or EEA, we rely on the UK International Data Transfer Addendum or the EU Standard Contractual Clauses with the recipient, or another legally recognised transfer mechanism.

8. How long we keep your information

Data typeRetention period
Active account dataFor the duration of your account
Data after account deletion30 days, then permanently deleted
Payment and transaction recordsAs required by applicable tax and financial regulations (typically 6–7 years)
Support communications2 years from last contact

9. Your rights

If you're in the UK or EEA

You have the right to: access your data; correct inaccurate data; request erasure; restrict or object to processing; data portability; and withdraw consent at any time where we rely on it. You also have the right to complain to your local data protection authority — in the UK, the Information Commissioner's Office (ico.org.uk).

If you're in the United States

Depending on your state of residence, you may have the right to: know what personal information we collect and how it's used; request deletion; request correction; opt out of the sale or sharing of personal information (we don't sell or share data — see Section 6) and of targeted advertising. We do not discriminate against you for exercising these rights. We honour the Global Privacy Control signal as an opt-out request where applicable.

If you're in Australia

You have rights under the Australian Privacy Principles, including to access and correct your personal information. You may complain to us directly at darren.sutton@benevolai.co.uk, and if unresolved, to the Office of the Australian Information Commissioner (oaic.gov.au). Once Australia's automated-decision-making disclosure requirements take effect in December 2026, this notice will be updated accordingly.

Exercising your rights

You can access or delete most of your data directly from your account settings. For anything else, email darren.sutton@benevolai.co.uk. We will respond within the timeframe required by your local law (generally 30 days in the UK/EU, up to 45 days in the US, and a reasonable period in Australia).

10. Cookies and similar technologies

We use cookies and similar technologies for: essential site functionality (always active); and analytics, to understand how the Service is used (PostHog). You can manage your preferences via the consent banner shown when you first visit the Service.

11. Security

We use technical and organisational measures appropriate to the sensitivity of the data we hold, including encryption in transit, access controls, and regular review of our security practices. No system is completely secure, and we encourage you to use a strong, unique password.

12. Changes to this notice

We'll update this notice as our practices or applicable law change, and update the "Last updated" date above. For material changes, we'll provide more prominent notice, for example by email or in-app notification.

13. Contact us

darren.sutton@benevolai.co.uk
BenevolAI Limited (Promptally)
England and Wales