Privacy

When you create an account we store your email address and a password, handled by our authentication provider — we never see your password in a readable form.

You can also give us a business name, a phone number, a logo, and a link to your reviews page. All of these appear on the invoices and graphics you send, so they are shown to your customers by design.

For each job you create, we store the customer name and phone number you enter, the job address if you add one, the private notes you keep for yourself, a job description, the amount, and the two photos you take. Your notes are never shown to the customer.

Job photos are stored privately by default. They are not indexed by search engines and never viewable by other contractors. When your customer opens their invoice, the link to each photo is temporary and expires.

One exception. A contractor can choose to put an individual finished job on his public work page at tradeproofapp.com/w/, and a job he has published there can also appear on the contractor directory at tradeproofapp.com/find, which search engines can reach. That is a decision he makes one job at a time, it is off unless he turns it on, and it publishes the two photographs and what the work was. It never publishes the customer’s name, phone number, email or street address, and only a job that has actually been paid for can be put there.

If your property is in a photograph on a contractor’s work page and you would rather it were not, tell us and we will take it down — you do not need an account to ask, and we do not ask the contractor’s permission first.

If you turn on the timestamp and location stamp, the date, time, and the town you are in are drawn permanently into the image itself. That stamped image is what your customer sees and what appears on any graphic you share publicly. The stamp is optional and off with a single tap — but once a photo is stamped and shared, the location is part of the picture.

The stamp names a town and state only — never a street address. It is written into a picture you are encouraged to post publicly, and a street address would put your customer's home on the internet.

To turn the coordinates from your device into a town name, we send that one position to BigDataCloud, a location lookup service. We send nothing else — no name, no photo, no account details — and we do not keep what comes back except as the words drawn on the photo. If the lookup fails, the stamp shows the raw coordinates instead.

We only ask your device for location while you are on the capture screen with the stamp enabled, and we never track it in the background. When a photo is stamped we also store the exact position on that job, privately, as evidence of where the work was done — it is never shown on the photo, never on your public work page, and never given to your customer. Your most recent stamped job’s position is sent to the US National Weather Service to get the forecast for your area.

Your contractor entered your name and phone number in order to send you the link. We hold that information on their behalf so the invoice can be delivered and the payment recorded.

Your invoice page is reachable by anyone with the link, so treat the link as private. It is not listed anywhere and search engines are asked not to index it.

If you would like your details removed, contact the contractor who sent the invoice — it is their record. You can also contact us using the address below.

We store your email address and password through our authentication provider, the phone number you verify, and your name if you give one. Verifying your number lets you see work invoiced to it and nothing else.

If you send a contractor a job request, he sees what you wrote, the photographs you attached and your contact details; nobody else does.

Card payments are processed by Stripe. Card numbers are entered on Stripe's own payment page and never reach TradeProof's servers — we cannot see them, and we do not store them.

We record whether an invoice was paid, when, and the amount. Stripe's own privacy policy covers what they hold.

We use a small number of providers to run the service: Supabase for the database and file storage, Vercel for hosting, Stripe for payments, Resend to send email, ImprovMX to receive it, BigDataCloud to turn a GPS position into a town name, and the US National Weather Service for the forecast on your schedule. We also record product usage events against your account id in our own analytics. They process data on our instructions in order to make the product work.

We do not sell your data. We do not share it with advertisers. We do not use it to train anything.

Jobs and their photos are kept until you delete them. Deleting a job removes its photos from storage as well.

If you want your whole account and everything in it removed, email us and we will do it.

You can edit or delete any job from the app. You can turn the location stamp off at any time. You can remove your logo and review link from Settings.

Depending on where you live you may have additional rights over your data, including access, correction, and deletion. Contact us and we will help.

Questions about this policy, or a request about your data: privacy@tradeproofapp.com