Privacy Policy

Who we are

Tradeways ("we", "us", "our") provides business management software for trades and interior design professionals. This privacy policy explains how we collect, use, and protect personal data when you use our website and application.

Contact: info@tradeways.co.uk

What data we collect

• Account details such as your name, email address, and authentication information.
• Business and workspace data you enter, including clients, jobs, proposals, invoices, files, messages, and team member details.
• Billing information processed by our payment provider (we do not store full card numbers).
• Usage, device, and log data needed to operate, secure, and improve the service.
• Support communications and feedback you send to us.
• Social media connection data when you choose to connect Facebook, Instagram, LinkedIn, or Google Business Profile accounts (see below).

Facebook and Instagram (Meta) connections

If you connect a Facebook Page and/or Instagram professional account to Tradeways, we use Meta's Facebook Login and Graph APIs so you can publish marketing content to Pages and Instagram accounts you manage.

Specifically, we request the following Facebook and Instagram permissions: pages_show_list, pages_read_engagement, pages_manage_posts, business_management, instagram_basic, and instagram_content_publish.

When you connect, we may receive and store:

• Identifiers for the Facebook user, Pages, and Instagram professional accounts you authorise (such as Page ID and Instagram business account ID).
• Page and account names, and related metadata needed to list destinations you can post to.
• Access tokens (including Page access tokens) required to publish content on your behalf.
• Content you create or upload in Tradeways for publishing (for example captions, images, and videos), and status information about scheduled or published posts.

We use this data only to:

• Authenticate your connection and keep it working securely.
• Display the Pages and Instagram accounts you have authorised.
• Create, schedule, and publish posts you request to those destinations.
• Show publishing status, troubleshoot failed posts, and provide support.

We do not sell Meta data. We do not use data obtained from Meta to build unrelated advertising profiles, and we do not transfer such data to unrelated third parties except as needed to operate Tradeways (hosting and infrastructure processors acting on our instructions) or as required by law.

You can disconnect Facebook/Instagram from Tradeways in Marketing → Integrations at any time. Disconnecting removes or invalidates stored tokens for that connection where technically possible. You can also revoke Tradeways' access in your Facebook/Meta settings. Content already published on Facebook or Instagram remains on those platforms and is subject to Meta's terms.

Use of Facebook and Instagram features in Tradeways is also subject to Meta's Platform Terms, Developer Policies, and Community Standards. You are responsible for the content you choose to publish and for having the rights and permissions needed to post to the selected Pages and Instagram accounts.

LinkedIn connections

If you connect LinkedIn to Tradeways, we use LinkedIn's OAuth and APIs so you can publish marketing content to your LinkedIn profile and/or LinkedIn Company Pages you administer.

When you connect, we may receive and store:

• Basic profile information needed to identify your LinkedIn account (such as name and member identifier from LinkedIn's sign-in / OpenID profile scopes).
• Identifiers and names for organisations/Company Pages you can administer, so we can list posting destinations.
• Access tokens and refresh tokens required to publish content on your behalf.
• Content you create or upload in Tradeways for publishing (for example captions, images, and videos), and status information about scheduled or published posts.

We use this data only to:

• Authenticate your connection and keep it working securely.
• Display the LinkedIn profile and Company Pages you have authorised.
• Create, schedule, and publish posts you request to those destinations.
• Show publishing status, troubleshoot failed posts, and provide support.

We do not sell LinkedIn data. We do not use data obtained from LinkedIn to build unrelated advertising profiles, and we do not transfer such data to unrelated third parties except as needed to operate Tradeways (hosting and infrastructure processors acting on our instructions) or as required by law.

You can disconnect LinkedIn from Tradeways in Marketing → Integrations at any time. Disconnecting removes or invalidates stored tokens for that connection where technically possible. You can also revoke Tradeways' access in your LinkedIn settings. Content already published on LinkedIn remains on LinkedIn and is subject to LinkedIn's terms.

Use of LinkedIn features in Tradeways is also subject to LinkedIn's User Agreement, Privacy Policy, and API / developer terms. You are responsible for the content you choose to publish and for having the rights and permissions needed to post to the selected LinkedIn profile or Company Pages.

Google Business Profile connections

If you connect Google Business Profile to Tradeways, we use Google OAuth and the Google Business Profile APIs so you can publish marketing content to business locations you manage.

When you connect, we may receive and store:

• Identifiers for the Google account and Business Profile locations you authorise (such as location / account IDs and display names).
• Access tokens and refresh tokens required to publish content on your behalf.
• Content you create or upload in Tradeways for publishing (for example captions and images), and status information about scheduled or published posts.

We use this data only to:

• Authenticate your connection and keep it working securely.
• Display the Google Business Profile locations you have authorised.
• Create, schedule, and publish posts you request to those locations.
• Show publishing status, troubleshoot failed posts, and provide support.

We do not sell Google Business Profile data. We do not use data obtained from Google to build unrelated advertising profiles, and we do not transfer such data to unrelated third parties except as needed to operate Tradeways (hosting and infrastructure processors acting on our instructions) or as required by law.

You can disconnect Google Business Profile from Tradeways in Marketing → Integrations at any time. Disconnecting removes or invalidates stored tokens for that connection where technically possible. You can also revoke Tradeways' access in your Google Account settings. Content already published on Google Business Profile remains on Google and is subject to Google's terms.

Use of Google Business Profile features in Tradeways is also subject to Google's terms and API policies. You are responsible for the content you choose to publish and for having the rights and permissions needed to post to the selected locations.

How we use your data

• To provide, maintain, and improve Tradeways.
• To authenticate users and manage workspaces and permissions.
• To process subscriptions and send service-related communications.
• To provide customer support and respond to enquiries.
• To publish content to connected social accounts when you request it.
• To power optional AI-assisted features (see Artificial intelligence below).
• To monitor security, prevent abuse, and meet legal obligations.

Artificial intelligence

Tradeways includes optional AI-assisted features, such as help answers, proposal and pricing assistance, document or image analysis, speech-to-text, client import helpers, and similar tools. When you use these features, relevant prompts, uploaded content, and related workspace context may be sent to our AI provider to generate a response.

Our current AI provider is OpenAI. Content processed for AI features is handled under OpenAI's terms and data-processing arrangements applicable to our API use. We do not use your Tradeways content to train public consumer AI models. You can choose not to use AI features; core product workflows that do not require AI remain available without them where the product allows.

AI outputs can be incorrect or incomplete. You remain responsible for checking AI-generated content before relying on it in your business (for example quotes, invoices, or client communications).

Legal bases

Where UK GDPR applies, we rely on contract performance, legitimate interests (such as securing and improving our service), legal obligation, and consent where required (for example, connecting a social account, or non-essential marketing cookies if enabled).

Sharing your data

We use trusted processors to run Tradeways. They may only process data on our instructions and must protect it appropriately. Depending on how you use the service, this includes:

• Supabase — authentication, database, and file storage.
• Vercel — application hosting and related infrastructure.
• Stripe — subscription and payment processing (we do not store full card numbers).
• OpenAI — AI-assisted features described above.
• Email delivery providers (such as Resend, Amazon SES, or SMTP/nodemailer, depending on our configuration) — transactional and service emails.
• Sentry (when enabled) — error monitoring and performance diagnostics.
• Google Analytics (when enabled) — aggregated website usage analytics.

When you use social publishing features, content and necessary account identifiers are shared with Meta Platforms, Inc. (Facebook/Instagram), LinkedIn (Microsoft), and, where connected, Google, solely to provide the feature you requested.

We do not sell your personal data. We may disclose information if required by law or to protect our rights, users, or the public.

Data deletion requests

You may request deletion of your Tradeways account data by contacting info@tradeways.co.uk, or by using in-app account deletion where available. Where you have connected Meta, LinkedIn, or Google Business Profile accounts, you may also request that we delete stored connection tokens and related publishing records we hold. We will action deletion requests subject to legal retention requirements (for example billing records). Published posts on Facebook, Instagram, LinkedIn, or Google Business Profile must be managed or deleted on those platforms if you want them removed there.

Deleting a file in the app typically marks it as deleted (soft delete) so it no longer appears in your library. Soft-deleted files may remain in our storage systems for a retention period for recovery, abuse prevention, or legal reasons before permanent removal. Permanent erasure of specific files or an entire workspace can be requested by email.

Deleting a team or personal account removes associated records from our application database. File objects in storage may not be removed automatically at the same moment. If you need confirmation that storage has been purged after account or file deletion, contact us and we will complete the purge.

Retention

We keep personal data for as long as your account is active or as needed to provide the service, comply with law, resolve disputes, and enforce agreements. Soft-deleted files and backups may be retained for a limited period after you delete them in the app. Social connection tokens are retained while the connection remains active and are removed or invalidated when you disconnect or when tokens expire and cannot be refreshed. You may request deletion subject to legal and operational requirements.

Your rights

Depending on your location, you may have rights to access, correct, delete, restrict, or object to processing of your personal data, and to data portability. You may also lodge a complaint with the ICO (UK).

To exercise your rights, contact info@tradeways.co.uk.

Security

We use technical and organisational measures designed to protect personal data, including access controls and encryption in transit. No online service can be guaranteed completely secure.

International transfers

Some processors may store or process data outside the UK. Where this happens, we use appropriate safeguards such as standard contractual clauses where required. Meta and other social platforms may process data in the United States and other countries under their own terms.

Changes

We may update this policy from time to time. Material changes will be communicated where appropriate. Continued use after an update may require renewed acceptance in the app.

Related policies

See also our Terms of Use.