Privacy
Last updated 3 November 2026.
Who we are. Echolisted runs this website and service and is the controller of your personal data. Contact: hello@echolisted.com.
What we collect
- Free check: your email address, the business name, keywords, area and (if given) website, plus a one-way scrambled version of your IP address to prevent abuse.
- Free tools and newsletter: your email address, and whether you ticked the box for tips.
- Free trial and clients: your email, your business details from the setup form, your typed signature and the date, and records of the work we do.
- Review requests: if you give us customers’ phone numbers or emails so we can ask them for a review, we use them only to send those requests, on your behalf, and then delete them.
- Payments: handled by Stripe. We see your payment status and the last four digits of your card, never the full number.
- Emails: a record of the emails we’ve sent you.
Why, and our legal basis
- To run the check and show you the report, provide the service you sign up for, take payment and send the emails you ask for (contract and legitimate interests).
- To keep proof of your permission to manage your Google profile, which Google requires (legal obligation and legitimate interests).
- To send tips and follow-ups, only if you ticked the box (consent). Every one has a one-click unsubscribe, or switch it off in your account.
- To prevent abuse (legitimate interests).
- To improve our methods: each check also leaves an anonymised record in our Echo Dataset (type of business, area, scores, and which websites AI read). It holds no names, emails, IP addresses or business names, so it isn’t personal data, and it can’t be used to identify you.
Who we share it with
Only the services we use to run Echolisted, under contracts that protect your data: our hosting (Vercel), database (Supabase), email delivery (Resend) and payments (Stripe). The questions we send to AI services (OpenAI, Google, Anthropic, Perplexity) and Google Maps contain your business type and area, never your email. Some of these companies are in the USA; transfers are covered by the UK–US data bridge or standard contract clauses.
Cookies
We only use cookies that are needed for the site to work: one to keep you signed in to your account (and one for our own admin login). No advertising or tracking cookies, so there’s no cookie banner.
Reports
Each report has a private, hard-to-guess link. Anyone you share the link with can see it.
How long we keep it
Free check reports for up to 12 months. Client records, including your signed permission, for as long as you’re a client and 6 years after (for tax and legal claims). Newsletter details until you unsubscribe.
Your rights
You can ask to see, correct or delete your data, or object to how we use it, at any time by emailing us. You can also complain to the Information Commissioner’s Office (ico.org.uk). See also our terms of service.