Privacy

9 September 2026 (D34). What we keep, why, and how to get rid of it.

What we keep

• Account: name, business name, email, phone, role, city and state. Used to sign you in, show you on the book, and reach you about a job.
• Location: the city and state you set, and a map point for it, so we can show jobs near you and tell vendors how far a job is. We look up cities with a public geocoding service; we do not track your device location in the background.
• Jobs, bids, listings, equipment: what you post, what you bid, what you list, what you log, with timestamps. This is the record the book exists to keep. Bids are sealed from other vendors.
• Cases: a home may keep a decedent name, date of death, tag number, notes, and chain-of-custody events (who, when, where, signatures) on a case. Only that home sees the name and tag — on the case page, the case list, the PDFs, the export zip, and the cases API. Vendors on a linked job may add a custody event but cannot read the case. Closed cases are kept for the state's record period (seven years unless the table says otherwise), then the name is replaced with "Redacted", the tag is cleared, and signature images are dropped; the event log stays. Deleting the home's account does not delete those records; they stay under a tombstone owner with no login.
• Photos: stored privately. Only people who can see the job, listing or log can open them. Market listing photos are public.
• Payments: handled by Stripe. We never see or store your card number. Stripe may save a card for faster checkout if you choose. Vendors' payout details live in their Stripe Connect account, not with us.
• Credentials: what a vendor attests at signup (typed name, time, IP address) and what a home logs on a job about proof shown. See the Terms for what these mean.
• Tax forms: if you upload or fill in a W-9, the tax ID is stored encrypted, only the last four digits are ever shown, and only you and a home that settled direct with you can download the form. Every download is logged.
• Sessions and passkeys: where and when you signed in, so you can sign a device out. Passkeys use your device's Face ID or Touch ID; we never receive your biometrics.
• Notifications: push tokens, and whether you want email, text, push or Discord alerts. Off by default for nothing; turn any of them off under Account → Notifications.
• Error reports: when the app breaks we send a crash report to Sentry with a request id. No personal data, no session replay.

What we do not do

No ads. No tracking pixels. No selling or sharing your list, your jobs or your photos. No background location. No analytics beyond counting what works in the app.

Texts and email

By adding a phone number and leaving text alerts on, you agree to receive job texts from TradeBook. Reply STOP to any text to turn them off, or switch them off in the app. Emails come from hello@tradebook.co. Both stop the moment you turn them off.

Who else sees your data

Stripe (payments and payouts), Twilio (texts), Resend (email), Expo (push), Neon (database), Vercel and Cloudflare (hosting), Sentry (crash reports). Each sees only what it needs to do its part.

Delete your account

In the app: Account → Danger → Delete account. Your account is closed the same day and hidden from the book. Records of paid jobs and custody cases are kept for as long as tax, payment, and record law requires, then the case name is redacted. Email us if you cannot get into the app.

Contact

hello@tradebook.co · support@tradebook.co