Privacy Policy

1. Information We Collect

We collect several types of information in order to operate and improve the TradesStack platform.

Account Information

When you create an account we may collect:

• Name
• Email address
• User ID
• Organization membership
• User role or permissions within an organization

Authentication is managed through Supabase Auth.

Organization and Project Data

TradesStack is a multi-tenant platform where users belong to organizations and collaborate within projects.

Information stored may include:

• Organization identifiers
• Project names and identifiers
• Project metadata
• Organization membership relationships
• User permissions within projects

Uploaded Files

Users may upload documents to the platform for analysis.

These may include:

• Construction drawing PDFs
• Supporting documents or files related to projects

Metadata stored may include:

• File name
• File path
• File size
• File type
• Upload timestamps
• Associated project identifiers

Files are stored in secure cloud storage managed through Supabase.

AI Processing Data

TradesStack uses artificial intelligence services to analyze construction documents and generate outputs.

Data processed by AI systems may include:

• Extracted text from uploaded documents
• Prompt text submitted by users
• AI-generated outputs including:

• Trade packs
• Scope generation
• Change detection results
• AI assistant responses

AI processing is performed through server-side requests to the OpenAI API.

No OpenAI API keys are exposed to users or client-side applications.

Usage and Operational Data

To maintain platform reliability and security we collect operational data such as:

• AI usage metrics
• Request timestamps
• Error logs
• Processing status of AI tasks
• Token or response usage statistics

Technical and Security Data

We may collect limited technical information including:

• IP address
• Network request metadata
• Security and rate-limiting events
• Authentication logs

This information is used for:

• Security monitoring
• Abuse prevention
• Platform reliability

2. How We Use Your Information

We use collected information to operate and improve the TradesStack platform.

This includes:

Platform Functionality

Processing uploaded documents to generate:

• Trade Pack Builder outputs
• Scope Builder outputs
• Change Detection analysis
• AI Assistant responses

Account Management

Managing user accounts, organization membership, and project permissions.

Platform Security

Preventing abuse, enforcing usage limits, detecting suspicious activity, and maintaining platform integrity.

Service Improvement

Monitoring performance and improving the accuracy and reliability of AI outputs.

3. AI Processing

TradesStack uses artificial intelligence to analyze documents and generate structured outputs.

AI processing may include sending relevant document text and prompts to OpenAI for analysis.

Important notes:

• AI processing occurs server-side only.
• API credentials are not exposed to users.
• Only the necessary information required to generate results is transmitted.
• AI responses are generated automatically and may not always be accurate.
• Users should review outputs carefully before relying on them for professional, contractual, or compliance decisions.

4. Data Storage and Infrastructure

TradesStack uses trusted cloud infrastructure providers.

Primary services include:

• Supabase

• Database
• Authentication
• File storage

• OpenAI

• AI document processing
• AI assistant responses

Data may be processed or stored on infrastructure located outside of your country depending on these providers.

We take reasonable steps to ensure that data handling meets modern security standards.

5. Data Access and Multi-Tenant Security

TradesStack operates as a multi-tenant platform.

Users are organized into organizations, and data is separated by:

• organization membership
• project access permissions
• row-level security controls

Security measures include:

• authenticated access controls
• organization-scoped project permissions
• database row-level security policies
• server-side authorization checks

Users should only be able to access data associated with organizations and projects they are authorized to access.

6. Data Retention

TradesStack retains data only as long as necessary to operate the platform.

This may include:

• user account information
• uploaded documents
• generated outputs
• project data
• AI run history
• usage logs

Retention periods may vary depending on:

• active account status
• platform functionality requirements
• legal or operational needs

Users may request deletion of their data as described below.

7. User Control and Data Deletion

Users may request:

• access to their personal data
• correction of inaccurate data
• deletion of their account and associated information

Account deletion may result in removal of:

• user profile information
• project membership data
• uploaded documents
• stored AI outputs

Some operational logs may be retained for security or compliance purposes.

Requests can be submitted by contacting us at the email listed below.

8. Data Security

TradesStack implements industry-standard security measures to protect user data.

These measures include:

• authenticated access controls
• encrypted network communications (HTTPS)
• server-side API access controls
• rate limiting and abuse protection
• database row-level security policies

While we take reasonable steps to protect information, no internet service can guarantee absolute security.

9. Acceptable Use of Uploaded Documents

Users may upload project documents to TradesStack for analysis.

Users are responsible for ensuring that:

• they have permission to upload and process the documents
• documents do not violate confidentiality obligations
• documents do not contain unlawful content

TradesStack does not claim ownership of user-uploaded documents.

10. AI Output Disclaimer

TradesStack provides AI-assisted construction guidance and document analysis.

AI outputs:

• are generated automatically
• may contain inaccuracies
• should not replace professional judgment

Users should review all outputs against:

• project drawings
• specifications
• applicable building codes and standards
• contractual requirements

TradesStack is not responsible for decisions made based solely on AI outputs.

11. Children's Privacy

TradesStack is intended for professional use by construction industry participants.

The platform is not intended for individuals under the age of 18.

12. Changes to This Privacy Policy

We may update this Privacy Policy periodically to reflect changes in the platform, technology, or legal requirements.

When updates occur we will revise the "Last Updated" date.

Continued use of the platform after changes indicates acceptance of the updated policy.

13. Contact Information

If you have questions about this Privacy Policy or your data, you can contact:

TradesStack

Email: hi@tradesstack.com

Website: https://tradesstack.com