Chantry is operated by Chantry Leads Ltd ("Chantry", "we", "us"). This page explains what data we collect, why we collect it, and what choices you have. We try to keep it short and in plain English.
What we collect
When you sign up we ask for your business name, your email address, and a password. We also collect the business details you give us — your phone number, opening hours, service area, and the services you offer.
If you connect your Google Business Profile, Google Search Console, or Google Analytics, we store the access tokens Google issues so we can read and (where you've enabled it) update those on your behalf. If you ask us to edit your website automatically, we store your website-builder login credentials in encrypted form so the agent can sign in and make the changes you approve.
When you run a scan we record the website you scanned, the city you serve, and the results — including how competitors in your area appear. When the agent runs we record what it changed and a short before/after note for your activity log. If you use our lead-capture or review-request features, we store the contact details (names, phone numbers, emails) of the leads and customers you add or that come through your site.
We do not collect payment details directly — those are handled by Stripe. We only receive a customer ID, subscription status, and the last four digits of your card.
How we use it
Your data is used to provide Chantry: to run scans, score your AI visibility, edit your website and Google profile when you ask us to, and send you the morning summary email. We also use anonymised, aggregated data to improve how the scoring works (for example, average scores by trade) — your business is never identifiable in that data.
We will email you operationally (scan results, weekly summaries, billing) and occasionally with product news. You can turn the product news emails off in Settings at any time. Operational emails continue until you delete your account.
How we use Google user data
When you connect Google Business Profile we use the access strictly to: (1) read your profile so we can show your current visibility and review status in your dashboard, and (2) with your approval, update your profile — including its description, opening hours, service categories, posts, and replies to reviews — to improve how you appear. We will never delete your reviews or your photos. We do not use your Google data for anything else, never share it with third parties for advertising, and never use it to train AI models. When you connect Google Search Console or Google Analytics, we only read your search and traffic metrics to show insights in your dashboard — read-only, never written, never shared. Google user data is handled in line with the Google API Services User Data Policy, including its Limited Use requirements.
Who we share it with
We use a small set of trusted third-party processors to actually run the product: Cloudflare and Vercel (hosting/infrastructure), Supabase (database), Stripe (payments), Resend (email delivery), Anthropic, OpenAI and Perplexity (the AI models that write content and check how AI assistants describe you), DataForSEO (search-results and AI-answer data), Google Places and Open-Meteo (business lookup and local weather/location), Google (your own profile, Search Console and analytics data), and PostHog (privacy-friendly product analytics). Each receives only the data needed for its function. Some of these providers are based outside the UK/EU; where that's the case we rely on appropriate safeguards (such as the UK International Data Transfer Agreement or EU Standard Contractual Clauses). We never sell your data, and we never share it with a third party for advertising.
How long we keep it
While your account is active we keep your data so the product works. If you cancel your subscription, we keep your account data so you can re-subscribe later without losing your history. If you delete your account (Settings → Danger zone), we permanently delete it and the data associated with it — including the OAuth tokens we hold for Google and any stored website credentials — straight away. Deletion is immediate and cannot be undone.
Your rights
You can:
- See everything we hold on you in your dashboard.
- Export your scan history and activity log.
- Delete your account at any time in Settings → Danger zone.
- Revoke Chantry's access to your Google account at any time from your Google account permissions page.
- Email us at hello@chantryleads.com with any other request.
If you are in the UK or EU you also have the right to lodge a complaint with the ICO. Our lawful bases for processing are: performing our contract with you (to deliver the service you signed up for); your consent (for product-news emails and any analytics cookies); and our legitimate interests (keeping the service secure and improving how it works). You can withdraw consent at any time in Settings.
Cookies
We use a single first-party cookie to keep you signed in. We use no advertising cookies and we do not track you across other sites. If we enable product analytics (PostHog), it loads only after you choose "Accept all" in our cookie banner — choose "Essential only" and it never loads.
Contact
Questions or requests: hello@chantryleads.com.