Privacy Policy
Effective [date]
This policy explains what information TradeMettle collects, what we do with it, who we share it with, and the choices you have. TradeMettle is run by [your legal business name] ("TradeMettle", "we", "us"). It covers the TradeMettle apps (Offcut, Rough-In and Home Run) and this website.
The short version
- Your company's data belongs to your company. We keep it so the apps work, and for nothing else.
- We don't sell data, show ads or use trackers. The only cookie is the one that keeps you signed in.
- Each company's data is kept in its own database, separate from every other company's.
- We share information only with the services that make TradeMettle run (listed below), and only what they need.
Who is responsible for what
Each company that uses TradeMettle (a "customer company") decides what goes into its apps, such as its customers' names and addresses, quotes, invoices and job photos. For that information, the customer company is in charge of it, and TradeMettle stores and processes it on the company's behalf and on its instructions. If you're a customer of one of those companies and have a question about your information, contact that company first; we'll help them answer it.
For the information about the companies and people who use TradeMettle itself (accounts, billing and support), TradeMettle is in charge of it.
What we collect
Account information
For each person who signs in: their name, username, email address if one is given, role, and a scrambled (hashed) version of their password. We never store passwords themselves.
What your company puts in the apps
Quotes, invoices, purchase orders and payments recorded on them; customers and their contact details; service tickets and maintenance plans; inventory, price book and tool records; time clock entries; job photos and customer signatures; branding such as your logo; and the settings your admins choose.
Billing information
For TradeMettle's own subscription: the company's name, a billing email, the apps it uses and its payment status. Card details are entered on Stripe's own page and stay with Stripe; we never see or store card numbers.
Technical information
To keep the service working and secure: sign-in records, the IP address a request comes from, the device and browser in general terms, and error logs. The sign-in page runs a small check in your browser to tell people from automated password-guessing; it doesn't use any outside service.
On this website
The home page remembers the company short name and app you last picked, in your own browser, so you don't have to type it again. Nothing about your visit is sent to us beyond what any website receives (the page you asked for and your IP address).
How we use it
- To run the apps: storing your data, showing it to the people in your company who are allowed to see it, and keeping everyone's phones up to date.
- To send what you ask the apps to send, such as a quote or reminder emailed to a customer.
- To bill for TradeMettle and tell a company's admins when a payment is due.
- To keep TradeMettle secure, back it up, fix problems and support you.
- To tell you about important changes to TradeMettle or this policy.
We don't use your company's data to advertise, to build profiles, or to train artificial intelligence.
Who we share it with
Only these kinds of services, only as needed for TradeMettle to work:
- Hosting: [your hosting provider], which runs the servers TradeMettle is on.
- Email: when someone emails a quote, invoice or reminder, the message goes through TradeMettle's email service ([Postmark or Resend]) or, if your company set one up, your company's own mail server.
- TradeMettle billing: Stripe processes TradeMettle's subscription payments.
- Your company's payments: if your company connects its own Stripe or Square account to put pay links on invoices, the invoice number, amount and description go to that account. That's between your company and its payment provider.
- Photo reading: if your company turns on photo reading and someone uses it, that photo is sent to Anthropic's API to read it, and the result comes back to the app. Under Anthropic's commercial terms, it doesn't use what's sent to its API to train its models.
We may also share information if the law requires it, to protect people's safety, or as part of a sale of the business (in which case this policy keeps applying to it). We'll tell you first where the law allows.
How we protect it
- Everything travels over HTTPS.
- Each company's data is kept in its own database. People only see what their company's admin lets their role see, and the server enforces it.
- Passwords are hashed, sign-ins lock for a while after repeated wrong passwords, and TradeMettle's own admin tools are only reachable over a private VPN.
- Each app backs itself up every day, and before every update.
No system is perfectly secure. If we learn of a breach that affects your information, we'll tell the affected companies without unreasonable delay, and as the law requires.
How long we keep it
While a company uses TradeMettle, we keep its data so the apps work. Daily backups are kept for 14 days. If a company stops using TradeMettle, we keep its data for [30] days so it can come back or take an export, then delete it; backups roll off within 14 days after that. Records we must keep by law, such as billing records, are kept as long as the law requires.
Your choices and rights
- A company's admins can see, change, export (to Excel) and delete their company's data from the apps.
- Anyone can ask us for a copy of their information, to correct it, or to delete it. Depending on where you live (for example California, or the European Union and United Kingdom), you may have further rights under laws such as the CCPA or GDPR, including to object to some uses. We'll answer within the time those laws set.
- If your information is in a customer company's apps, we'll pass your request to that company, since it decides about that information.
Children
TradeMettle is for businesses, not for children under 16, and we don't knowingly collect their information.
Changes
If we change this policy, we'll post the new version here with a new date, and tell companies' admins about important changes before they take effect.
Contact
[your legal business name]
[mailing address]
Email: [privacy@gettradekit.app]