Privacy

This page explains what personal information ListedOn collects, why, who handles it, how long we keep it, and your rights. We have tried to keep it short and plain.

Who we are

ListedOn is a trading name of Advanced Studio Limited, registered in England and Wales. We decide how your information is used (in data protection terms, we are the controller). To contact us about your information, email hello@listedon.ai.

What we collect, and why

• Public business information. To build a report or a Profile we use details a business has already made public: its name, address, phone number, website, opening hours, photo, ratings and review counts, what appears for it in Google Maps and Google search, what its own website says, and what Google’s AI Mode answers when asked about businesses like it. We look at a business’s latest Google reviews to count how many have a reply, and keep only those counts. We also use public data from the Food Standards Agency (food hygiene ratings) and postcodes.io (the local area for a postcode). For a sole trader some of this can include their name. We use it because it is how we can show a business what AI says about it (our legitimate interest).
• The check on our homepage. When you type a website into the box on our homepage, we look the business up on Google Maps straight away and build its report. We do not ask for your email at this step. We keep the website you typed, and the report is linked to that business. If the check is still running and you choose “Email me the link”, we keep that email address and use it once, to send you the link (or to tell you the check could not finish).
• A scrambled form of your IP address, for limits only. To stop the check and some forms (claiming a Profile, choosing a branch, and disputes) being overused, we turn your IP address into a one-way scrambled code and count how many times that code has used them in the last hour. We store the code, never the IP address itself, and use it for nothing else.
• Your email address. If you claim a Profile or sign in, we collect your email so we can send you a one-time link. There are no passwords. We keep the email on your account and use it to send you the link, confirmations and messages about your Profile. These include: telling you when we have approved your claim; up to two short follow-up emails in the first two weeks (where you stand and one free thing to do, then where we would start and what Pro is); and, every three months, the result of a free re-run of your check. Every one of these says how to stop them, and if you reply asking us to, we will.
• What you add to your Profile. If you claim a Profile you can add, among other things: a description, opening hours, services and areas, photos, the names, roles and photos of people who work there, up to four reviews your customers left (with a first name or similar, as you choose), an email address for customers, a booking link and other links, guide prices, memberships and accreditations, languages, and your own questions and answers. You can also give us your own name and phone number, which we use to contact you and do not show on the Profile. Photos are stored privately with Vercel and shown publicly from listedon.ai on your Profile. Only add other people’s names, photos or reviews if they have agreed.
• When what you add goes public. What an owner writes and the photos they add are shown publicly only once we are satisfied the claim is genuine: the owner’s email is on the business’s own website domain, or we have checked and approved it. Until then the Profile shows public Google and website information only.
• “This is my business” requests. If you tell us a claimed Profile is not theirs to hold, we keep the name, email, phone number (if given), role and the proof you send, so we can look into it.
• Pro. If you take Pro we keep your answers to the Pro questions, the phone number you give us if you want a call, and any call you book (its time, your name, email and phone number). We email you and us a calendar invite for each call. Each month we re-run your check and email you what changed. James’s written review of your answers is emailed to you and saved in your account.
• Payments. If you pay for Pro, Stripe takes the payment. We never see or store your card number. We keep your plan, its status and Stripe’s reference numbers for it.
• Simple usage records. We note steps such as opening a report, entering an email, claiming a Profile or starting a payment, so we can see where people get stuck. We also count which parts of our pages are seen and which buttons are tapped, and whether the screen is phone-sized. Each page view gets a random number that is never stored on your device and is not carried between visits. This counting does not record your IP address, and we do not use advertising or third-party analytics trackers.
• Profiles of businesses that have not signed up. We create unclaimed Profiles from public information for businesses we report on, for other businesses named in AI answers in a report (for example competitors), and for independent local businesses we list on other Profiles as worth knowing nearby. Unclaimed Profiles are public pages and can appear in search engines. Any business can ask us to remove its Profile (see below).
• Business contact emails. We look for a business’s contact email on its own website. We have also tested Hunter, a business contact lookup, which can return named work email addresses for a website.
• Emails to businesses. We have built the ability to email a business about its report, using an address from its own website. Sending these emails is currently switched off, and we do not send them. If we switch it on, every such email will say who we are and how to stop them, and if you reply “remove” we will add your address, or your whole website, to a do-not-contact list and keep that entry so we do not contact you again.

Cookies

We use only the cookies the site needs to work, and our page counting does not use cookies or store anything on your device. One keeps you signed in (up to 60 days). Another lets you carry on to your Profile before you have confirmed your email (up to 48 hours, or up to 30 days once you have started paying). We do not set analytics or advertising cookies, so there is no cookie banner.

Who else handles your information

We use these services to run ListedOn. They process information on our behalf:

• Neon hosts our database.
• Vercel hosts the website and stores Profile photos.
• Postmark sends our emails, so it receives the email address and the message.
• Stripe processes payments and receives your payment details directly from you.
• DataForSEO returns the Google Maps, Google search, Google review and Google AI Mode information we use. We send it business names, places, websites and questions, not your email.
• Hunter returns public business email addresses for a website we send it.
• OpenStreetMap provides the map on Profile pages. Your browser fetches the map pictures directly from OpenStreetMap, so it sees your IP address, as with any website you visit.
• The Food Standards Agency and postcodes.io are public data services. We send them a business name and postcode, not anything about you.

We do not sell your information. Some of these providers are based in, or process data in, the United States. Where that happens we rely on the safeguards the UK allows for international transfers, such as the UK Addendum or the UK–US data bridge.

How long we keep it

• Page-counting records and the scrambled codes used for limits are deleted after 90 days.
• Your account and Profile, including what you added, are kept while your account exists, and deleted within 30 days of you asking us to delete them.
• Payment records are kept for 6 years, because tax law requires it.
• Reports, and the business details behind them, are kept while that business’s Profile exists.
• Unclaimed Profiles are kept until the business asks us to remove them.
• A do-not-contact entry is kept for as long as we might otherwise contact you, so the request keeps working.

Your rights

You can ask us for a copy of your information, to correct it, to delete it, to restrict or object to how we use it (including emails to your business), and to move it. To do any of these, email hello@listedon.ai. We will reply within one month.

If your business has a ListedOn Profile you did not ask for, use the “remove this Profile” link on the Profile page, or email hello@listedon.ai, and we will take it down.

If you are unhappy with how we have handled something, you can complain to the Information Commissioner’s Office at ico.org.uk or on 0303 123 1113.

What AI says is not ours

Reports show what public AI tools answered when we asked. Those answers come from third parties, can change, and can be wrong. We do not control them and cannot guarantee that any AI will mention your business.

Changes

If we change how we use your information we will update this page and the date at the top.