Privacy Policy

Tradesfront ("Tradesfront," "we," "us") provides done-for-you marketing services to local trades businesses. This policy explains what data we collect, why we collect it, and what control you have over it.

Data we collect

From you (the business owner who hires us): business name, contact email, billing address, payment method (via Stripe — we never see card numbers), and the business information needed to build your marketing site (services, hours, photos, etc.).

From your site visitors (your customers): when someone submits a form on your Tradesfront-built site, we receive the form fields and immediately relay them to your configured destination (your CRM, your email, or Zapier). We also store the submission — including the contact details and message — so it appears in the Leads section of your portal and so a failed delivery can be retried. Submissions are automatically deleted after 365 days. Delivery metadata (timestamp, destination, success or failure) is kept for audit over the same period.

From call tracking (Growth plans): when someone calls a Tradesfront-issued tracking number, we receive the caller's phone number, the call duration, and — where you have opted in — a recording and a transcript. Call metadata is relayed to your configured destination and stored so calls appear in your portal. Recordings are held in Cloudflare R2 with access scoped to your account and are deleted automatically after 365 days.

How we use it

• To provide the marketing services you've signed up for (site build, hosting, lead relay, phone and form tracking, reporting).
• To send you account communications (billing, service updates, support).
• To improve our service in aggregate. We do not sell your data or your customers' data to third parties.

Subprocessors

We use the following infrastructure providers to deliver the service:

• Cloudflare — hosting, DNS, storage, and email delivery for your site and our platform.
• Stripe — payment processing. Stripe's own privacy policy applies to card data.
• Telnyx — call tracking number provisioning + call routing (Growth plans).
• Google — Google Analytics 4 property (in YOUR Google account) and Google Business Profile integration.
• Anthropic — generative AI for content drafts during site builds and operator workflows. No customer PII is sent.

What you own

Your Google Analytics 4 property, your Google Business Profile, your domain registration, the source content of your site, every byte of lead data ever relayed to your CRM — all yours. On termination, we delete or return data within 30 days; billing records are retained for 3 years for audit purposes.

Cookies

Tradesfront.com uses no analytics cookies and no advertising cookies. Sites we build for our clients deploy Google Analytics 4 (which uses cookies for analytics); cookie consent on those sites is configured per the client's jurisdiction.

Your rights

You can request access to, correction of, or deletion of your data at any time by emailing privacy@tradesfront.com. We respond within 30 days.

Security

We use industry-standard security practices: TLS everywhere, encrypted-at-rest storage, scoped access tokens, secrets in Cloudflare Secrets Store, MFA on all infrastructure accounts. No system is 100% secure, but we treat your data and your customers' data with the care they deserve.

Changes to this policy

We'll post material changes to this policy here and email you when there's a substantive update. The "last updated" date above always reflects the current version.

Contact

Questions about this policy: privacy@tradesfront.com.

Working draft — under legal review prior to public launch.