Privacy Policy

Information we collect

Account and profile

When you create an account, we collect information such as your name, email address, company or business name, and credentials. We use this to provide the Services, communicate with you about your account (including security and billing), and offer product updates where permitted.

Billing

If you purchase a paid plan, payment details are collected and processed by our payment processor; we do not store your full card number on our servers. We may retain limited billing and transaction history (for example, last four digits, invoices, and tax-related information) as needed for accounting, fraud prevention, and support.

Content and usage

We process the data you enter into TradeFlowPro (for example, customers, jobs, quotes, and invoices) so the product can function. We also collect technical and operational data such as log data, device and browser type, and approximate location derived from IP address, to secure our systems, fix bugs, and understand aggregate usage.

Cookies and similar technologies

We use cookies and similar technologies as needed for sign-in, preferences, and security, and, where you allow it, to measure how our site and product are used. You can control cookies through your browser; disabling certain cookies may limit some features.

How we use information

We use personal information to:

• Provide, maintain, and improve TradeFlowPro
• Process payments and send transactional communications
• Provide customer support and respond to your requests
• Monitor and help prevent fraud, abuse, and security incidents
• Comply with law and enforce our terms

We do not sell your personal information and we do not use it for third-party interest-based advertising as a “sale” of personal data in the CCPA sense.

Legal bases (EEA, UK, and similar)

Where the GDPR or UK GDPR applies, we rely on appropriate legal grounds such as: performance of a contract, legitimate interests (for example, securing the Services, improving the product, and limited analytics), compliance with legal obligations, and, where required, your consent (for example, certain marketing or non-essential cookies).

Service providers and subprocessors

We use trusted service providers to host the application, process payments, send email, and perform similar functions. They may process data only to provide services to us and are required to protect your information. If you need details for vendor due diligence, contact us at the address below.

Retention

We retain personal information for as long as your account is active, as needed to provide the Services, and as required to comply with law, resolve disputes, and enforce our agreements. When you delete your account, we will delete or de-identify personal information subject to legal and technical constraints (for example, backups may persist for a limited time).

Security

We use industry-standard technical and organizational measures to protect your information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.

Your rights and choices

Depending on where you live, you may have the right to access, correct, delete, or port your personal information, to object to or restrict certain processing, to withdraw consent where processing is based on consent, and to complain to a supervisory authority.

If you are a California resident, you have rights under the CCPA/CPRA, including the right to know what we collect, to delete personal information in certain cases, to correct inaccurate information, and to opt out of the sale or sharing of personal information (we do not sell your personal information as “sale” is commonly defined in the CCPA for our Services).

International transfers

Our team and infrastructure are primarily located in the United States. If you access the Services from outside the United States, you consent to the transfer and processing of your information in the United States and other countries where we or our service providers operate, which may have different data protection rules than your country of residence. Where we transfer personal data from the EEA, UK, or Switzerland, we use appropriate safeguards as required by applicable law.

Children

The Services are not intended for children under 16, and we do not knowingly collect personal information from them. If you believe we have collected a child’s information, please contact us and we will take appropriate steps to delete it.

Changes to this policy

We may update this policy from time to time. We will post the updated version on this page and adjust the “last updated” date when we do. If a change is material, we will provide additional notice as appropriate (for example, by email or in-app).