Last updated: 19 June 2026
This Privacy Notice explains how BenevolAI Limited (Promptally) ("NicheEdge", "we", "us") collects, uses, and protects your personal information when you use our app and related services (the "Service"). It addresses requirements in the UK, the European Economic Area, the United States, and Australia. If you're located elsewhere, the same standards generally apply to you as well.
BenevolAI Limited (Promptally), registered in England and Wales, is the controller (UK/EU terms) responsible for your personal information collected through the Service.
Privacy enquiries: darren.sutton@benevolai.co.uk
Data Protection Officer: Darren Sutton — darren.sutton@benevolai.co.uk
| Category | Examples | Source |
|---|---|---|
| Account information | Email address, password (hashed) | Provided by you at signup |
| Payment information | Billing details, transaction history | You, processed via Stripe — we do not store full card numbers |
| Content you provide | Prompts and inputs submitted to AI-powered features | You |
| Usage data | Pages and features used, timestamps, device and browser type, approximate location from IP | Automatically, via PostHog |
| Communications | Support requests, emails to us | You |
We do not knowingly collect more personal information than we need to provide the Service.
| Purpose | Legal basis (UK/EU GDPR) |
|---|---|
| Create and maintain your account | Performance of a contract |
| Process payments and manage your subscription | Performance of a contract |
| Provide AI-powered features (see Section 4) | Performance of a contract / legitimate interests |
| Improve and secure the Service | Legitimate interests |
| Send service-related communications (e.g. billing notices) | Performance of a contract |
| Send marketing communications | Consent (you can withdraw at any time) |
| Comply with legal obligations | Legal obligation |
NicheEdge is intended for users aged 16 and over. We do not knowingly collect personal information from anyone below this age. If we learn that we have collected information from someone below our minimum age, we will delete it and may suspend the associated account.
We do not use data from any account we know belongs to a minor for targeted advertising or behavioural profiling.
If you believe a child has provided us with personal information, contact darren.sutton@benevolai.co.uk.
We share personal information only with:
We do not sell your personal information, and we do not share it with third parties for their own independent advertising or marketing purposes.
Your information may be processed in countries other than the one you live in, including the United States (Vercel, Anthropic, Stripe, PostHog). Where we transfer personal information out of the UK or EEA, we rely on the UK International Data Transfer Addendum or the EU Standard Contractual Clauses with the recipient, or another legally recognised transfer mechanism.
| Data type | Retention period |
|---|---|
| Active account data | For the duration of your account |
| Data after account deletion | 30 days, then permanently deleted |
| Payment and transaction records | As required by applicable tax and financial regulations (typically 6–7 years) |
| Support communications | 2 years from last contact |
You have the right to: access your data; correct inaccurate data; request erasure; restrict or object to processing; data portability; and withdraw consent at any time where we rely on it. You also have the right to complain to your local data protection authority — in the UK, the Information Commissioner's Office (ico.org.uk).
Depending on your state of residence, you may have the right to: know what personal information we collect and how it's used; request deletion; request correction; opt out of the sale or sharing of personal information (we don't sell or share data — see Section 6) and of targeted advertising. We do not discriminate against you for exercising these rights. We honour the Global Privacy Control signal as an opt-out request where applicable.
You have rights under the Australian Privacy Principles, including to access and correct your personal information. You may complain to us directly at darren.sutton@benevolai.co.uk, and if unresolved, to the Office of the Australian Information Commissioner (oaic.gov.au). Once Australia's automated-decision-making disclosure requirements take effect in December 2026, this notice will be updated accordingly.
You can access or delete most of your data directly from your account settings. For anything else, email darren.sutton@benevolai.co.uk. We will respond within the timeframe required by your local law (generally 30 days in the UK/EU, up to 45 days in the US, and a reasonable period in Australia).
We use cookies and similar technologies for: essential site functionality (always active); and analytics, to understand how the Service is used (PostHog). You can manage your preferences via the consent banner shown when you first visit the Service.
We use technical and organisational measures appropriate to the sensitivity of the data we hold, including encryption in transit, access controls, and regular review of our security practices. No system is completely secure, and we encourage you to use a strong, unique password.
We'll update this notice as our practices or applicable law change, and update the "Last updated" date above. For material changes, we'll provide more prominent notice, for example by email or in-app notification.
darren.sutton@benevolai.co.uk
BenevolAI Limited (Promptally)
England and Wales