Privacy Policy

Introduction

TradeQuote ("we", "us", "our") is a Canadian software service that helps HVAC and plumbing professionals generate quotes using artificial intelligence. This Privacy Policy explains what personal information we collect, how we use it, and the rights you have over it.

We comply with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws, including Quebec's Law 25.

Information We Collect

We collect the following categories of information when you use TradeQuote:

• Account information: email, password (hashed), company name
• Profile information: contact phone, business address, company logo
• Quote data: customer details you input, job descriptions, pricing, photos you upload
• Billing information: subscription plan, Stripe customer ID (we do not store credit card numbers)
• Usage data: log files, device type, browser, IP address, feature interactions

How We Use Your Information

Your information is used to:

• Provide the quote generation, storage, and PDF export features
• Process subscription payments through Stripe
• Send service-related emails (password resets, receipts, important changes)
• Improve the AI quote generation accuracy and the overall product
• Detect, prevent, and address fraud or abuse
• Comply with our legal obligations

AI and Photo Processing

When you upload a photo to generate a quote, the image is sent to a third-party AI provider (Anthropic) for analysis. The image and the resulting analysis are stored in your account so you can retrieve past quotes.

We do not use your customer data, photos, or quotes to train AI models.

Sharing Your Information

We share information only with service providers necessary to operate TradeQuote:

• Supabase — database and authentication hosting (data stored in North American regions)
• Stripe — subscription billing and payment processing
• Anthropic — AI image and text analysis
• Vercel — application hosting
• Email providers — transactional email delivery

Data Storage and Security

Data is stored on servers located in Canada and the United States. We use encryption in transit (TLS) and at rest, hashed passwords, and role-based access controls.

No system is 100% secure. We will notify affected users without unreasonable delay in the event of a data breach affecting personal information.

Your Rights

You have the right to:

• Access the personal information we hold about you
• Correct inaccurate information through your settings page
• Delete your account and all associated data
• Export your quote data in a portable format
• Withdraw consent for non-essential data processing
• File a complaint with the Office of the Privacy Commissioner of Canada

Data Retention

Your data is retained for as long as your account is active. After account deletion, we remove personal data within 30 days, except where we are legally required to keep certain records (such as billing records for tax purposes).

Cookies

We use essential cookies for authentication and session management. We do not use advertising or third-party tracking cookies.

Children

TradeQuote is not intended for individuals under 18 years of age. We do not knowingly collect data from minors.

Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified by email or through the application at least 30 days before taking effect.

Contact

For privacy questions or to exercise your rights, contact us at luc27c3@gmail.com. We respond to all valid requests within 30 days.