TradeBoost Privacy Policy

Last updated: October 7, 2025

1. Overview

TradeBoost ("we", "us", "our") provides an AI-driven advertising platform for UK trades. This Privacy Policy explains how we collect, use, and safeguard personal and non-personal data when you access or use our services.

2. Information We Collect

  • Account Information: name, email address, and authentication data supplied via Clerk.
  • Billing Information: payment method details processed through Polar.sh; we store only necessary identifiers for billing status.
  • Usage Data: interactions with onboarding flows, campaign settings, and dashboard activity captured through Convex.
  • Cookies & Analytics: browser cookies, device identifiers, and analytics events for improving performance and security.

3. How We Use Information

  • Provide, maintain, and improve the TradeBoost platform and AI campaign outputs.
  • Process subscription payments, manage billing status, and prevent fraud.
  • Communicate service updates, onboarding guidance, and critical alerts via Resend.
  • Monitor usage trends, diagnose technical issues, and enhance user experience.

4. Legal Basis

We process personal data where it is necessary to perform our contract with you, comply with legal obligations, and pursue legitimate interests such as platform security and product improvement.

5. Sharing & Disclosure

  • Infrastructure & Hosting: Vercel (application hosting) and Convex (real-time backend).
  • Authentication: Clerk for account creation and session management.
  • Billing & Payments: Polar.sh for subscription processing and invoicing.
  • Advertising Integrations: Google Ads API for campaign drafts and reporting.
  • AI Services: OpenAI to generate campaign copy using context you supply.
  • Email Delivery: Resend for transactional messages.
  • Compliance: We may disclose information when required by law or to protect rights, safety, or security.

All third parties only receive the minimum data required to perform their services.

6. International Data Transfers

Our partners may operate in jurisdictions outside your home country. We rely on appropriate safeguards (such as Standard Contractual Clauses) where required by applicable laws.

7. Data Retention

We retain personal data while your account is active and for a reasonable period afterward to meet legal, tax, or accounting requirements. We delete or anonymize data when it is no longer needed.

8. Your Rights

Depending on your location, you may request access, correction, deletion, restriction, portability, or objection to processing of your personal data. Submit requests through in-app support; we'll respond in line with applicable law.

9. Cookies & Tracking

You can set your browser to refuse cookies, though certain features may become unavailable. We do not respond to Do Not Track signals at this time.

10. Children's Privacy

TradeBoost is not directed to children under 16, and we do not knowingly collect personal data from them.

11. Security

We implement administrative, technical, and physical safeguards to protect data, including encryption of sensitive credentials and role-based access controls.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated through the dashboard or other prominent notice.

13. Contact

If you have questions or would like to exercise data rights, please reach out via the in-app support channel. A dedicated email address will be provided in future updates.

14. Compliance & Regulatory Data

Certification Verification Data

To ensure compliance with UK trade regulations, we may collect and verify:

  • Gas Safe registration numbers and certification documents
  • Part P electrical certification and qualification records
  • Public liability insurance policies and coverage details
  • Business registration information from Companies House or HMRC
  • Professional accreditation from trade bodies (NICEIC, etc.)

Compliance Monitoring

We monitor advertising content for compliance purposes, including:

  • Automated scanning of generated advertising content
  • Violation tracking and compliance issue reporting
  • Certification status monitoring and renewal reminders
  • Regulatory correspondence if investigations occur

Data Sharing for Compliance

We may share information with regulatory authorities when legally required:

  • Trading Standards investigations of advertising practices
  • Gas Safe Register verification of certification claims
  • HMRC business registration and tax compliance inquiries
  • Consumer protection agencies investigating service complaints

Data Retention for Legal Protection

We retain different types of data for varying periods to meet legal obligations and protect against regulatory investigations:

  • Personal data (names, emails, contact info): 1 year after account closure
  • Compliance records (warnings shown, user acknowledgments): 6 years after account closure
  • Certification verification (Gas Safe checks, insurance validation): 6 years after account closure
  • Advertising content (generated campaigns, claims made): 6 years for regulatory compliance
  • Violation reports (compliance breaches, regulatory issues): 7 years for legal defense
  • Regulatory correspondence (Trading Standards communications): 7 years or as legally required

Extended retention periods protect both users and TradeBoost AI from potential legal claims that may arise years after account closure, in accordance with UK limitation periods and regulatory requirements.