Privacy Policy

Last updated: March 31, 2026

TradeStack LLC ("TradeStack," "we," "us," or "our") operates the TradeStack platform, which provides automated business communication tools to contractors and service businesses. This Privacy Policy describes how we collect, use, and protect your information.

Information We Collect

We collect information necessary to provide our services:

• Contractor information: Name, phone number, email address, business name, trade type, and billing information.
• Customer information: Name, phone number, and job-related details provided to us by contractors who have an existing business relationship with the customer.
• Message data: The content of SMS messages sent and received through our platform, including timestamps and delivery status.
• Usage data: Information about how the platform is used, including message volume, feature usage, and system performance data.

How We Use Your Information

We use collected information to:

• Provide, operate, and improve our automated messaging services
• Send follow-up messages, appointment reminders, review requests, and other business communications on behalf of contractors
• Process billing and payments
• Provide customer support
• Ensure compliance with TCPA regulations and carrier requirements
• Generate anonymized, aggregated analytics to improve our services

SMS/Text Messaging Consent and Data

All categories of information described above exclude text messaging originator opt-in data and consent. This information will not be shared with any third parties.

Specifically:

• We do not share, sell, rent, or transfer mobile phone numbers or messaging consent data to any third parties or affiliates for marketing or promotional purposes.
• Messaging consent is obtained through the pre-existing business relationship between the contractor and their customer.
• Customers may opt out of messaging at any time by replying STOP to any message.
• We maintain records of all consent and opt-out actions for compliance purposes.

Information Sharing

We do not sell, rent, or share your personal information with third parties for their marketing purposes. We may share information only in the following circumstances:

• Service providers (sub-processors): We use the following third-party services to operate TradeStack. Each processes data only as necessary to provide their services and is bound by their own privacy policies.
• Legal requirements: We may disclose information if required by law, subpoena, court order, or government regulation.
• Business transfers: In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

Sub-Processors

TradeStack uses the following third-party services to deliver our platform:

• Supabase — Database and authentication (West US / Oregon region)
• Anthropic — AI message generation (Claude API)
• Twilio — SMS delivery and phone number management
• Railway — Backend application hosting
• Stripe — Payment processing (future)
• Vercel — Website hosting (tradestack.us)

AI Data Processing

TradeStack uses Anthropic's Claude API to generate follow-up messages, classify customer replies, and parse lead intake information. When this processing occurs:

• Conversation content (customer names, job details, message text) is sent to Anthropic's API for message generation and classification.
• Anthropic's API usage terms and privacy policy apply to this data processing.
• Data sent to Anthropic's API is not used for model training under their commercial API terms.
• We send only the minimum data necessary for each AI task — we do not send phone numbers or billing information to the AI.

Data Security

We implement industry-standard security measures to protect your information, including encryption in transit and at rest, access controls, and regular security reviews. However, no method of transmission over the Internet is 100% secure.

Data Retention

We retain data according to the following schedule:

• Account data (contractor name, phone, email, billing): Retained for the duration of your active account plus 30 days after account closure.
• Message history (SMS content, timestamps, delivery status): Retained for the duration of your active account.
• Customer records (names, phone numbers, job details): Retained for the duration of the associated contractor's active account plus 30 days.
• Opted-out customer records: Retained indefinitely. This is required for TCPA compliance — we must permanently record opt-out requests to ensure we never re-message a customer who has opted out.

After the retention period, data is permanently deleted from our systems and sub-processor databases.

Data Breach Notification

In the event of a data breach that affects your personal information, TradeStack will notify affected contractors within 72 hours of becoming aware of the breach. Notification will be sent via SMS to your registered phone number and via email if we have your email address on file. The notification will include the nature of the breach, the types of data affected, and the steps we are taking in response.

Your Rights

You may:

• Request access to the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your information (subject to legal retention requirements)
• Opt out of text messages at any time by replying STOP

Children's Privacy

Our services are not directed to individuals under 18 years of age. We do not knowingly collect personal information from children.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify contractors of material changes via text message or email. The "Last updated" date at the top of this page reflects the most recent revision.

Contact Us

If you have questions about this Privacy Policy, contact us at:

TradeStack LLC
Bend, Oregon
Email: hello@tradestack.us