Privacy notice
This notice explains how Wheel Limited, trading as Push Visibility, uses personal data. It covers this website, the Push Visibility service (its web app and mobile apps), and how we contact other businesses about our service.
1. Who we are
Wheel Limited, company number 17163116, registered office 26 Cowper Road, Slough, SL2 1TQ, United Kingdom. For anything about your data, email hello@push-visibility.com with "Privacy request" in the subject line. Wheel Limited is registered with the Information Commissioner's Office (ICO) under registration number ZC262666.
2. Our two roles
- Controller: we decide how your data is used for your account, billing, support, the security of our service, visits to this website, and our own business-to-business marketing.
- Processor: when you use Push Visibility to send review invitations to your customers, or to reply to reviews and comments, we handle your customers' data on your behalf and only on your instructions. You are the controller of that data. Our terms contain the data processing terms that apply.
3. What we collect, why, and our lawful basis
| Data | Why we use it | Lawful basis |
|---|---|---|
| Visits to this website: pages viewed, counted without cookies and without identifying you (Cloudflare Web Analytics); technical logs such as IP address, kept briefly for security | To keep the site working and secure and to see which pages are used | Legitimate interests |
| Emails you send us: your name, email address and message | To answer you | Legitimate interests, or steps before a contract |
| Your account: name, email address, password (stored only as a secure hash by our sign-in provider) or your Google sign-in; your business's Companies House number, or your sole-trader declaration; proof that you own your website | To provide the service and check that businesses are genuine | Contract |
| Billing: your plan, invoices and payment status. Stripe collects your card or bank details; we don't see full card or bank account numbers | To take payment and keep accounting records | Contract; legal obligation (tax records) |
| Accounts you connect (Google Business Profile, Facebook, Instagram, TikTok, and Google Ads or Search Console if you choose): the access permission (an encrypted token), the page or account names, and the posts, reviews, comments and statistics needed to do the work you ask for | To draft, publish and report on your content, and to reply to reviews and comments you approve | Contract |
| Your customers' email addresses, when you ask us to send review invitations | To send the invitations on your behalf. Every invitation has a one-click unsubscribe | We act as your processor. You confirm you have a lawful basis to contact them |
| What you approve and when (an audit record) | To show who approved what was published in your business's name | Contract; legitimate interests |
| Business contact details for our own marketing: a company's name, number, business email and, where published with a business role, a person's name and role, from public sources (Companies House and the company's own website) | To offer our service to other businesses by email. Our first email says where we found the details and gives a one-click opt-out | Legitimate interests. We email only companies and LLPs, never sole traders, ordinary partnerships or individuals without their consent |
We don't use tracking pixels or tracked links in our emails, and we never sell personal data.
4. Data from Google
If you connect Google services, we access only what the service needs:
- Google Business Profile: to read your business information and reviews, and to publish posts and review replies that you approve. Google's policy allows us to keep this content for no more than 30 days, so we delete it within 30 days. It is never used to train AI.
- Google Search Console: to submit your website's sitemap and read how your site appears in search.
- Google Ads (pilot clients only): to manage adverts in your own ad account under the plan you approve.
- Google sign-in: your name and email address, to create and sign in to your account.
Push Visibility's use and transfer to any other app of information received from Google APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements. We use this data only to provide the features you see in Push Visibility. We don't use it for advertising or sell it, and no person at Push Visibility reads it unless you ask us to (for example, for support), or the law or the security of the service requires it.
5. Data from Facebook, Instagram and TikTok
When you connect a Facebook Page, an Instagram professional account or a TikTok account, we use the permissions you grant to show which account is connected (its name and picture), publish the posts and videos you approve, read comments and statistics for your reports, and reply to comments you approve. We use this data only to provide the service to you. It stays separate from other clients' data. You can remove our access at any time, and we then delete what we hold (see Data deletion).
6. How we use AI
We use AI models to draft your plans, posts and replies. A person (you) approves everything before it is published in your business's name, and no decision with legal or similarly significant effects is made about anyone by automated means alone. We send the AI models only what a task needs. Our web research sends no personal data. We don't use your content to train AI models unless you opt in separately, and then only with personal details removed.
7. Who we share data with
We use these service providers. Each acts on our instructions under a contract:
| Provider | What for |
|---|---|
| Cloudflare | Hosting, security and cookieless website statistics |
| Supabase | Database and account sign-in (London region) |
| Amazon Web Services | Sending service emails (London), backups (London) and a back-up AI route (EU) |
| Anthropic | AI models that draft your content |
| Our business email, and the Google services you connect | |
| Stripe | Payments |
| DataForSEO | Search results used for rankings and research (no personal data sent) |
| Meta and TikTok | Only when you connect your accounts and publish to them |
We may also share data if the law requires it, or with a buyer if our business is sold. We will tell you before any new provider starts handling your data.
8. Transfers outside the UK
We keep our main database and backups in the UK. Some providers above may process data in other countries, including the United States. When they do, we rely on the protections UK law requires: UK adequacy regulations, or the ICO's International Data Transfer Agreement or Addendum.
9. How long we keep data
| Data | How long |
|---|---|
| Your account and connected-account data | While your account is open. When you close it, we delete it within 90 days, apart from invoices, which we keep for 6 years. |
| Access permissions to your connected accounts | Until you disconnect the account or remove our access; then deleted |
| Content from Google Business Profile | No more than 30 days |
| Images and videos you publish through us | 30 days after publishing |
| Web pages we read for research | No more than 30 days |
| Free website checks | 7 days |
| Records of what we did and why (without Google content) | 400 days |
| Invoices and accounting records | 6 years, as tax law requires |
| Backups | Up to 35 days |
| Business contacts from our marketing | Deleted after 12 months without a reply (24 months after a closed conversation). If you opt out, we keep only a coded (hashed) note of your address so that we never contact you again |
10. Security
Access permissions and contact details are encrypted, each client's data is kept separate by the database's own access rules, staff accounts use two-step verification, and every action is logged.
11. Your rights
Under UK data protection law you can ask for a copy of your data, and ask us to correct it, delete it, limit how we use it, or give it to you in a portable form. You can object to our use of your data based on legitimate interests. You can object to direct marketing at any time, and we will stop. Email hello@push-visibility.com with "Privacy request" in the subject line. We reply within one month. If we handle your data for one of our clients (as their processor), we pass your request to them and help them answer it.
12. Complaints
If you are unhappy with how we have used your data, please tell us first at hello@push-visibility.com. We acknowledge a complaint within 30 days and tell you the outcome without undue delay. You also have the right to complain to the Information Commissioner's Office: ico.org.uk/make-a-complaint, or 0303 123 1113.
13. Cookies
This website sets no cookies. The Push Visibility app uses only the cookies needed to keep you signed in securely. See Cookies.
14. Children
Push Visibility is a service for businesses and is not meant for anyone under 18.
15. Changes
We will update this notice when our use of data changes, and we will tell account holders about important changes by email.