1. Who we are

Traddie ("we", "our", or "us") operates the Traddie mobile application (iOS and web) and the website at gettraddie.com (the "Service"). We are the data controller for the personal data we collect through the Service.

You can contact us at hello@gettraddie.com for any privacy-related questions.

2. Introduction

This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. It applies to all users of the Traddie app and website. Please read it carefully.

By using the Service, you agree to the collection and use of your information in accordance with this policy. If you do not agree, please do not use the Service.

3. Information we collect

Information you provide

When you register and use the Service, we may collect:

Name, email address, and phone number
Business information (company name, address, VAT number)
Payment and billing details (processed by Stripe; we do not store full card numbers)
Customer, quote, job, and invoice data you enter into the Service
Communications you send to us (e.g. support requests)

Information collected automatically

When you access the Service, we may automatically collect:

Device type, operating system, and unique device identifiers
IP address and general location
Usage data (e.g. features used, frequency of use) to improve the Service

Information from third parties

If you connect accounting or payment integrations (e.g. Xero, QuickBooks, FreeAgent, Stripe), we receive only the data necessary to sync your workflow (e.g. chart of accounts, payment status). We do not receive or store your login credentials for those services.

4. How we use your information

We use the information we collect to:

Provide, operate, and maintain the Service
Create and manage your account and authenticate you
Process payments and send invoices, quotes, and related communications
Sync data with your chosen accounting and payment providers
Send you service-related notices (e.g. security alerts, product updates)
Respond to your enquiries and provide customer support
Improve the Service, fix errors, and develop new features
Comply with legal obligations (e.g. tax, HMRC, or regulatory requirements)
Protect against fraud, abuse, and misuse of the Service

We do not sell your personal information to third parties. We do not use your data for advertising or profiling for marketing purposes.

5. Legal basis (UK GDPR)

We process your personal data on the following bases:

Contract: To perform our contract with you (providing the Service you have signed up for).
Legitimate interests: To run and improve our business, prevent fraud, and ensure security, where this does not override your rights.
Legal obligation: Where we must process data to comply with law (e.g. tax records).
Consent: Where we have asked for your consent (e.g. marketing emails). You can withdraw consent at any time.

6. Data storage and security

Your data is stored in the United Kingdom using Supabase on Amazon Web Services (AWS) in the eu-west-2 (London) region. Data is encrypted in transit (TLS) and at rest (AES-256). We use industry-standard security practices to protect your information from unauthorised access, alteration, disclosure, or destruction.

Payment card data is handled by Stripe and is subject to Stripe's privacy policy and PCI DSS compliance. We do not store full card numbers on our servers.

7. Data retention

We retain your personal data for as long as your account is active or as needed to provide the Service. After you close your account, we may retain certain data for a limited period to comply with legal obligations (e.g. tax, HMRC), resolve disputes, enforce our agreements, and for legitimate business purposes. After that, we delete or anonymise your data.

Tax and invoice records (UK): Where you use Traddie for invoicing, VAT, CIS, or expenses, we keep the underlying business and financial records (including anonymised or non-identifying references where needed) for at least six years where UK law requires it (for example record-keeping for VAT and general tax purposes). If you exercise your right to erasure under UK GDPR, we will remove or anonymise personal identifiers where possible while retaining this information where we have a legal obligation to do so. You can download a JSON export of your financial data from the app before closing your account where this is available.

You may request deletion of your personal data at any time (see "Your rights" below). We will honour such requests where we are not required to retain the data by law.

8. Sharing and third-party services

We may share your information with:

Service providers that help us operate the Service (e.g. hosting, email, analytics). They are contractually required to protect your data and use it only for the purposes we specify.
Payment processing: Stripe (for card payments). Stripe's privacy policy applies to their processing.
Accounting integrations: If you choose to connect Xero, QuickBooks, or FreeAgent, we send only the data you have authorised for sync (e.g. invoices, payments). Their privacy policies apply to their handling of that data.
Legal and regulatory: Where required by law (e.g. court order, HMRC) or to protect our rights, safety, or property.

We do not sell or rent your personal information to third parties for their marketing purposes.

9. International transfers

Your data is stored and processed in the United Kingdom (and within the European Economic Area via AWS). We do not routinely transfer your personal data outside the UK/EEA. If we ever do, we will ensure appropriate safeguards (e.g. standard contractual clauses or adequacy decisions) are in place as required by UK GDPR.

10. Children's privacy

The Service is not directed at anyone under the age of 18. We do not knowingly collect personal data from children. If you believe we have collected data from a child, please contact us at hello@gettraddie.com and we will delete it promptly.

11. Your rights (UK GDPR)

You have the right to:

Access the personal data we hold about you
Rectification of inaccurate or incomplete data
Erasure ("right to be forgotten") in certain circumstances
Restrict processing in certain circumstances
Data portability (receive your data in a structured, machine-readable format)
Object to processing based on legitimate interests or for direct marketing
Withdraw consent where we rely on consent

To exercise any of these rights, contact us at hello@gettraddie.com. We will respond within one month. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) in the UK: ico.org.uk/make-a-complaint.

12. Cookies and similar technologies

Our website may use cookies and similar technologies (e.g. local storage) to keep you signed in, remember your preferences, and understand how the site is used. You can control cookies through your browser settings. Disabling certain cookies may affect how the website works.

Our mobile app may use local storage and identifiers necessary for the app to function (e.g. session tokens). We do not use cross-app tracking for advertising.

13. Changes to this policy

We may update this Privacy Policy from time to time. We will post the updated policy on this page and update the "Last updated" date. For material changes, we will notify you by email or through the Service where appropriate. Your continued use of the Service after the effective date of changes constitutes acceptance of the updated policy.

14. Contact us

For questions about this Privacy Policy, your personal data, or to exercise your rights, contact us:

Email: hello@gettraddie.com
Website: https://www.gettraddie.com