Privacy Policy

TradesOps Inc. ("we," "us," or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our SaaS platform ("the Service"). Please read this policy carefully. By using the Service, you consent to the practices described herein.

1. Information We Collect

We collect the following types of information:

Account Information

When you create an account, we collect your name, email address, phone number, organization name, and other details necessary to set up your account and organization profile.

Business Data

Information you enter into the Service, including project details, client contact information, financial records (invoices, quotes, expenses), employee data, equipment records, contracts, daily logs, time entries, and other operational data.

Payment Information

Payment card details and billing information are collected and processed by our payment provider, Stripe. We do not store your full credit card number on our servers.

Usage Data

We automatically collect information about how you interact with the Service, including IP addresses, browser type, device information, pages visited, features used, timestamps, and referring URLs.

Files and Documents

Documents, photos, and other files that you upload to the Service, including project photos, contracts, and attachments.

1A. Mobile Application & Device Permissions

Our mobile application, TradesOps Field (for iOS and Android), is a workforce tool used by field crews on behalf of their employer (the organization whose account they sign into). It requests the following device permissions, each used only for the stated purpose:

Location (Precise, Foreground and Background)

With your permission, we collect your device's precise (GPS) location to verify that you are at an assigned job site when you clock in and out, and to record on-site verification for payroll and labor-compliance purposes. Each location reading is associated with a specific clock-in/clock-out action and your employer's account.

If you additionally grant "Always" (background) location access, the app uses geofences around your assigned job sites to detect when you arrive at or leave a site — even when the app is closed or not in use — so it can remind you to clock in or out. Background location is used solely for this job-site arrival/departure reminder feature.

We do not collect location when you are not signed in, we do not track your location outside the context of job-site time-tracking, and we never sell location data or share it for advertising. Location permissions are optional and can be revoked at any time in your device settings; foreground clock-in continues to work with "While Using" permission, and revoking background access simply disables arrival/departure reminders.

Camera and Photos

With your permission, the app accesses your camera and photo library so you can capture or select photos to attach to a project or daily log. Photos may be tagged with the location and time they were taken. Photos are uploaded only when you choose to attach them.

Microphone and Voice Recordings

With your permission, the app accesses your microphone so you can record voice notes for daily logs. Recorded audio is uploaded to the Service, stored in association with the relevant log, and may be transcribed to text to make it searchable.

Push Notifications and Device Identifiers

To deliver push notifications (for example, dispatch assignments and reminders), we register a push token issued for your device and store basic device metadata (platform, device name, app version). You can disable notifications in your device settings.

2. How We Use Your Information

We use the information we collect to:

• Provide, operate, and maintain the Service
• Process transactions and send related information, including invoices and payment confirmations
• Create and manage your account and organization
• Verify job-site presence for time-tracking and remind you to clock in or out based on job-site geofences (mobile app)
• Attach photos and voice notes you capture to your projects and daily logs (mobile app)
• Send administrative notifications, such as security alerts and support messages
• Respond to your requests, comments, and questions
• Analyze usage patterns to improve the Service and develop new features
• Detect, prevent, and address technical issues, fraud, and security vulnerabilities
• Comply with legal obligations and enforce our Terms of Service
• Send marketing communications, where permitted by law (you may opt out at any time)

3. Data Sharing and Disclosure

We do not sell your personal information. We may share your information in the following circumstances:

• Service Providers: We share data with third-party providers who assist in operating the Service, including Stripe (payments), Resend (email), DigitalOcean (file storage), and Anthropic (AI analysis). These providers are contractually obligated to protect your data.
• Within Your Organization: Data entered into the Service is accessible to other authorized members of your organization, based on role-based access controls.
• Public Invoice and Contract Links: When you generate public payment or contract signing links, the associated data (invoice amounts, contract terms) is accessible via those links without authentication.
• Legal Requirements: We may disclose information if required by law, regulation, legal process, or government request.
• Business Transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.
• With Your Consent: We may share information for other purposes when you provide explicit consent.

4. Data Security

We implement industry-standard security measures to protect your information, including encryption in transit (TLS/SSL), encrypted storage for sensitive fields, secure authentication with optional two-factor authentication (TOTP), role-based access controls, and regular security audits.

While we strive to use commercially acceptable means to protect your data, no method of transmission over the Internet or method of electronic storage is 100% secure. We cannot guarantee absolute security.

5. Data Retention

We retain your data for as long as your account is active or as needed to provide the Service. If you or your organization administrator deletes your account, we will retain your data for 30 days to allow for recovery, after which it will be permanently deleted from our systems.

We may retain certain information as required by law, for legitimate business purposes (such as resolving disputes and enforcing agreements), or as part of anonymized and aggregated data sets.

6. Your Rights

Depending on your location, you may have the following rights regarding your personal data:

For All Users

• Access: Request a copy of the personal data we hold about you.
• Correction: Request that we correct inaccurate or incomplete data.
• Deletion: Request deletion of your personal data, subject to legal retention requirements.
• Export: Request a portable copy of your data in a commonly used format.

GDPR (European Economic Area)

If you are located in the EEA, you have additional rights under the General Data Protection Regulation, including the right to restrict processing, object to processing, and withdraw consent. Our legal basis for processing is contract performance (to provide the Service) and legitimate interests (to improve the Service and ensure security).

CCPA (California)

If you are a California resident, you have the right to know what personal information we collect and how it is used, request deletion of your personal information, and opt out of the sale of personal information. We do not sell personal information.

To exercise any of these rights, please contact us at hello@tradesops.app. We will respond to your request within 30 days.

7. Cookies and Tracking

We use cookies and similar technologies to maintain your session, remember your preferences (such as language and theme settings), and analyze usage patterns. The Service uses the following types of cookies:

• Essential Cookies: Required for the Service to function, including authentication session cookies.
• Preference Cookies: Store your settings such as language selection, theme, and dashboard layout.
• Analytics Cookies: Help us understand how users interact with the Service to improve functionality and performance.

You can control cookies through your browser settings. Disabling essential cookies may prevent you from using certain features of the Service.

8. Children's Privacy

The Service is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children. If we become aware that we have collected personal data from a child under 18, we will take steps to promptly delete that information.

9. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify you by posting the revised policy on the Service and updating the "Last updated" date. Your continued use of the Service after any changes indicates your acceptance of the updated policy.

We encourage you to review this Privacy Policy periodically to stay informed about our data practices.

10. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at: