TRADEBOARD

Privacy Policy

Effective Date: October 13, 2026 | Version: 2026-10-13

1. Overview

This Privacy Policy explains how Lyubomir Perets ("Service Provider", "we", "us", or "our") collects, uses, stores, and shares information when you use TradeBoard through a web browser or related service (the "Application").

This Policy is written for a business-to-business SaaS product used by contractors and construction professionals. Where privacy laws such as the GDPR, UK GDPR, CCPA, or CPRA apply, we handle personal information in accordance with those laws.

2. Controller and Contact

Lyubomir Perets is the controller for personal data relating to TradeBoard user accounts, subscriptions, support, and service administration. The Service Provider is based in North Carolina, United States.

For privacy questions, data requests, or Data Processing Agreement requests, contact lyubomirvperets@gmail.com.

3. TradeBoard User Data and Client Data

TradeBoard handles two different categories of information. First, we handle data about you as a TradeBoard user, including account, subscription, authentication, and service usage information.

Second, you may enter information about your own clients, jobs, estimates, and schedules. For that client and project data, you are responsible for having a lawful basis to collect and enter the data, informing your clients as required, and responding to client privacy requests. We process that information only as needed to provide TradeBoard.

4. Information We Collect

  • Account data: email address, authentication records, optional full name, optional company name, and account identifiers.
  • Client and project data: job names, client names, client addresses, job type, value, status, due date, estimate titles, line item descriptions, quantities, prices, subtotals, tax rates, and schedule phase names, dates, and colors.
  • Payment and subscription data: Stripe customer ID, subscription status, plan status, and billing events. We do not store full payment card numbers.
  • Technical data: IP address, browser and device information, request logs, authentication/session identifiers, and security or diagnostic logs generated by our service providers.
  • Legal acceptance data: Terms and Privacy Policy versions accepted during signup, where captured by the Application.

5. How We Use Information

  • Create, authenticate, and manage TradeBoard accounts.
  • Provide jobs, estimates, calculator, schedule, converter, PDF export, and dashboard features.
  • Process subscriptions and billing through Stripe.
  • Enforce plan limits, including the Free Plan active-job limit and Pro PDF export.
  • Send transactional messages such as account, password reset, confirmation, billing, and service notices.
  • Maintain security, prevent abuse, troubleshoot, and improve the Application.
  • Comply with legal obligations and enforce our Terms of Service.

6. Legal Bases Where GDPR or UK GDPR Applies

  • Contract performance: to provide and administer the Application.
  • Legitimate interests: security, abuse prevention, service diagnostics, and core business administration.
  • Consent: where consent is required, such as for non-essential marketing or tracking.
  • Legal obligation: where processing is required by law.

7. Service Providers and Infrastructure

We use third-party service providers to host and operate TradeBoard. These providers may process personal information for us, and in some situations may also act as independent controllers for their own services.

  • Supabase: database hosting, authentication, account sessions, and authentication-related emails.
  • Stripe: checkout, subscription billing, payment processing, billing records, and payment-related communications.
  • Vercel: application hosting, content delivery, deployment infrastructure, request logs, and operational/security diagnostics.

8. International Transfers

Your information may be processed in the United States and other countries where we or our providers operate. Where required, we rely on appropriate transfer mechanisms such as Standard Contractual Clauses, data processing terms, or other safeguards made available by our providers.

9. Cookies, Local Storage, and Similar Technologies

TradeBoard uses browser storage and similar technologies for authentication, session management, checkout, security, and service delivery. Supabase authentication sessions are stored by the browser client. Stripe-hosted checkout and our hosting providers may use cookies or similar technologies to provide their services.

We do not currently use third-party behavioral advertising trackers. If we add non-essential tracking that requires consent, we will request consent where required by law.

10. Data Retention

  • Account data is retained while your account is active and for up to 12 months after closure unless a longer period is required by law or legitimate business needs.
  • Client and project data is retained while your account is active and for up to 12 months after closure unless you request earlier deletion or legal obligations require retention.
  • Billing records and Stripe customer identifiers are retained as needed for billing, tax, accounting, dispute, and legal compliance.
  • Technical, security, and diagnostic logs are retained according to operational need and provider retention settings.
  • Aggregated or anonymized information may be retained indefinitely because it no longer identifies a person.

11. Estimate PDF Generation

TradeBoard can generate estimate PDFs from estimate and line item data you enter. PDFs are generated for delivery to you and are not intentionally stored by us as separate files after generation. You are responsible for storing, sending, and retaining PDF estimates in compliance with your business and legal obligations.

12. Security

We use reasonable administrative, technical, and organizational safeguards, including access controls and encrypted transmission where supported by our providers. No system is completely secure, and we cannot guarantee that unauthorized access, loss, or misuse will never occur.

If a personal data breach occurs, we will provide notices to affected users, regulators, or supervisory authorities where required by applicable law.

13. Your Privacy Rights

Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a copy of personal information. You may also have the right to withdraw consent and lodge a complaint with a supervisory authority. To exercise rights, contact lyubomirvperets@gmail.com.

Where CCPA/CPRA applies, California residents may request to know, delete, or correct personal information and may opt out of sale or sharing for cross-context behavioral advertising. We do not sell personal information and do not share personal information for cross-context behavioral advertising.

We will respond within the time required by applicable law. For example, GDPR requests are generally handled within one month, and CCPA/CPRA requests to know, delete, or correct are generally handled within 45 calendar days, subject to legally permitted extensions.

14. Children

TradeBoard is intended for business users who are at least 18 years old. It is not directed to children, and we do not knowingly collect personal information from children under 13 or the applicable age of digital consent.

15. Changes

We may update this Privacy Policy from time to time. The updated version will be posted with a new effective date. Previous versions are available upon request at lyubomirvperets@gmail.com.

16. Contact

For privacy questions, data requests, or DPA requests, contact lyubomirvperets@gmail.com.