Privacy Policy

• Account information — your name, email address, and a hashed password (we never store the password itself).
• Business profile — your business name, contact details, and logo, shown on the quotes and invoices you send.
• The records you enter — your customers (names, phone numbers, emails, addresses), jobs, quotes, and invoices.
• Operational data — for example the typed name, date, and IP address recorded when one of your customers e-signs a quote, and basic logs needed to keep the service secure (such as rate-limiting counters).

We don't collect data we don't need, and we don't run third-party ad trackers.

To provide the service — and that's it: showing you your dashboard, sending the emails you trigger (quotes, invoices, password resets, verification links, signature notifications), securing accounts, and improving the product. We do not sell your data or your customers' data, and we don't use your customer list to market to anyone.

Your data is stored in a Postgres database managed by Supabase, and the application runs on Vercel. Connections are encrypted in transit (HTTPS), passwords are hashed with bcrypt, database access is restricted with row-level security, and customer-facing links (quotes, invoices) use unguessable tokens. No system is perfectly secure, but we treat your business records like we'd want ours treated.

• Supabase — database hosting.
• Vercel — application hosting.
• Resend— delivers the emails you send (a recipient's address and the message content pass through Resend to be delivered).
• Stripe — once online payments launch, payment processing will be handled by Stripe; card details will go to Stripe directly and never touch our servers. (Not yet live.)

Each processes data only to provide their service to us.

The customer, job, quote, and invoice records you enter are yours. We act as the processor of that data on your behalf. If one of your customers contacts us about their data, we'll refer them to you and help you honor the request.

We keep your data for as long as you have an account. Delete your account (email support@tradeaide.io) and we delete your records — account, customers, jobs, quotes, and invoices — from the production database. Short-lived operational data (like rate-limit counters and expired verification tokens) is cleaned up automatically.

You can access everything you've stored directly in the app, correct it there, and request a full export or deletion at any time by emailing support@tradeaide.io. We honor these requests for everyone, regardless of where you live. We don't currently claim certification under any specific privacy framework — if a regulation applies to your use of TradeAide, ask us and we'll tell you honestly where we stand.

As TradeAide matures this policy will be updated, and the “last updated” date above will move; material changes will be announced by email or in-app notice. Questions about privacy: support@tradeaide.io. See also the Terms of Service.