Privacy Policy

Introduction

TradeQuote ("we", "us", "our") is a Canadian software service that helps HVAC and plumbing professionals generate quotes using artificial intelligence. This Privacy Policy explains what personal information we collect, how we use it, and the rights you have over it.

We comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws, including Quebec's Law 25.

Information We Collect

We collect the following categories of information when you use TradeQuote:

• Account information: email, password (hashed), company name
• Profile information: contact phone, business address, company logo
• Quote data: customer details you input, job descriptions, pricing, photos you upload
• Billing information: subscription plan, Stripe customer ID (we do not store credit card numbers)
• Usage data: log files, device type, browser, IP address, feature interactions

How We Use Your Information

Your information is used to:

• Provide the quote generation, storage, and PDF export features
• Process subscription payments through Stripe
• Send service-related emails (password resets, receipts, important changes)
• Improve the AI quote generation accuracy and the overall product
• Detect, prevent, and address fraud or abuse
• Comply with our legal obligations

AI and Photo Processing

When you upload a photo to generate a quote, the image is sent to a third-party AI provider (Anthropic) for analysis. The image and the resulting analysis are stored in your account so you can retrieve past quotes.

We do not use your customer data, photos, or quotes to train AI models.

Quote suggestions are produced by automated processing (AI). In accordance with Quebec's Law 25 and equivalent laws, you are not subject to a decision based solely on automated processing — you remain in full control of the final quote you send to your customer. You may request that we explain how a particular quote suggestion was generated, and you may always edit, override, or discard any AI suggestion before sending it.

Sharing Your Information

We share information only with service providers necessary to operate TradeQuote:

• Supabase — database and authentication hosting (data stored in North American regions)
• Stripe — subscription billing and payment processing
• Anthropic — AI image and text analysis
• Vercel — application hosting
• Email providers — transactional email delivery

Data Storage and Security

Data is stored on servers located in Canada and the United States. We use encryption in transit (TLS) and at rest, hashed passwords, and role-based access controls.

No system is 100% secure. We will notify affected users without unreasonable delay in the event of a data breach affecting personal information.

Your Rights

You have the right to:

• Access the personal information we hold about you
• Correct inaccurate information through your settings page
• Delete your account and all associated data
• Export your quote data in a portable format
• Withdraw consent for non-essential data processing
• File a complaint with the Office of the Privacy Commissioner of Canada

Data Retention

Your data is retained for as long as your account is active. After account deletion, we remove personal data within 30 days, except where we are legally required to keep certain records (such as billing records for tax purposes).

United States Residents

If you are a resident of California, Virginia, Colorado, Connecticut, Utah, or another U.S. state with a comprehensive consumer privacy law, you have additional rights, which may include the right to: (a) know what personal information we collect, use, and share; (b) request deletion of your personal information; (c) correct inaccurate personal information; and (d) opt out of the sale or sharing of personal information.

TradeQuote does not sell personal information. We do not share personal information for cross-context behavioural advertising. We do not knowingly collect personal information from minors under 16.

To exercise any of these rights, email luc27c3@gmail.com from the address on your account. We will respond within the timeframe required by applicable law. You also have the right to designate an authorized agent and to be free from retaliation for exercising your rights.

Cookies

We use essential cookies for authentication and session management. We do not use advertising or third-party tracking cookies.

Children

TradeQuote is not intended for individuals under 18 years of age. We do not knowingly collect data from minors.

Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified by email or through the application at least 30 days before taking effect.

Contact

For privacy questions or to exercise your rights, contact us at luc27c3@gmail.com. We respond to all valid requests within 30 days.