Privacy
Policy.

TradeFix, Inc. ("TradeFix," "we," "us," "our") operates the TradeFix field service management platform at tradefix.org and app.tradefix.org. Our mailing address is available upon request at hello@tradefix.org.

We collect information in three ways:

Information you provide

• Account details: name, email address, company name, phone number
• Business data: customer records, job details, estimates, invoices, pricebook items, technician profiles
• Payment information: processed by Stripe — we never store card numbers
• Communications: messages you send through our contact form or email

Information collected automatically

• Device and browser type, IP address, operating system
• Pages visited, time spent, referral source
• GPS location data (mobile app only, when on-shift and with your permission)

Information from third parties

• Stripe: payment confirmation and subscription status
• Google Maps: geocoding of service addresses

• Operate and maintain your TradeFix account and tenant
• Process payments and generate invoices
• Send transactional messages: magic link sign-ins, dispatch notifications, payment confirmations
• Provide customer support when you contact us
• Improve the platform based on usage patterns (aggregated, never individually identifying)
• Comply with legal obligations

We do not use your data for advertising, sell it to third parties, or build marketing profiles from your business data.

We share data only when necessary to operate the service:

• Stripe — payment processing
• Mailgun — transactional email delivery (magic links, notifications)
• Twilio — SMS notifications (dispatch, appointment reminders)
• Google Maps — address geocoding and route calculation
• Cloudflare R2 — file storage (job photos, documents)

Each provider operates under their own privacy policy and is contractually limited to processing data only as needed for TradeFix.

We will disclose information if required by law, court order, or to protect the safety of our users.

TradeFix is a multi-tenant platform. Each business (tenant) has its data isolated via PostgreSQL Row-Level Security policies. Your customers, jobs, invoices, and business data are never accessible to other tenants. Tenant isolation is enforced at the database level, not just the application level.

We retain your account and business data for as long as your account is active. If you cancel, we retain data for 90 days in case you reactivate, then permanently delete it. You can request immediate deletion at any time by emailing hello@tradefix.org.

We protect your data with:

• TLS encryption in transit for all connections
• Encrypted database storage at rest
• HMAC-SHA256 signed authentication tokens
• httpOnly, SameSite cookies — no localStorage token exposure
• Per-request session validation with revocation support
• Row-Level Security enforced at the database layer

We use a single httpOnly session cookie (tf_session) for authentication. We do not use advertising cookies, tracking pixels, or third-party analytics that identify individual users. The marketing site at tradefix.org sets no cookies at all.

You have the right to:

• Access your data — export all records from your dashboard
• Correct inaccurate information at any time
• Delete your account and all associated data
• Port your data — CSV export available on all plans

To exercise any of these rights, email hello@tradefix.org or use the account settings in your dashboard.

TradeFix is a business-to-business platform. We do not knowingly collect information from anyone under 18. If you believe a minor has provided us with personal information, contact us and we will delete it.

We may update this policy as the platform evolves. Material changes will be communicated via email to account holders. The "Effective" date at the top reflects the latest revision.

Questions about this policy? Email us at hello@tradefix.org.