Legal · Privacy
TradesKit — Field Service Management Software
Cascade Software Solutions LLC ("Company," "we," "us," or "our") publishes this Privacy Policy to explain how we collect, use, disclose, and protect personal information when you use TradesKit (the "Service"), visit our websites (including tradeskit.io), or otherwise interact with us.
This Privacy Policy applies when we act as the controller of your personal information. When our customers use the Service to process information about their employees, contractors, or end customers, those customers are the controllers of that information and we act as their processor under the Data Processing Addendum. If you are an end customer of a TradesKit customer, please direct privacy questions to that customer in the first instance. See Section 11 for more about this distinction.
Please read this Privacy Policy carefully. By using the Service, you agree to the practices described in this Privacy Policy. If you do not agree, do not use the Service.
When you sign up for or use the Service, you may provide us with:
| Category | Examples |
|---|---|
| Identifiers | Name, business name, email address, phone number, postal address |
| Login credentials | Username, password, two-factor codes |
| Employment information | Job title, role, employer, license numbers (where collected) |
| Payment information | Billing contact, billing address, last four digits of payment method (full payment details are collected by our payment processor on our behalf and not stored by us) |
| Communications | Support tickets, in-app chat messages, recorded calls and transcripts (when you use call recording or AI transcription features) |
| Photos and files | Job photos, signatures, attachments, and other files you upload |
| AI inputs | Text prompts, voice recordings, and images you submit to AI Features |
When you use the Service, we and our service providers automatically collect:
We may receive information about you from:
You may upload information about your end customers to the Service (such as names, addresses, phone numbers, service history, and photos). We process that information as your service provider / processor under the Data Processing Addendum. You are the controller of that information. See Section 11.
We use personal information to:
| Purpose | Legal Basis (where required by law) |
|---|---|
| Provide, operate, and maintain the Service | Performance of contract |
| Authenticate and secure Accounts; prevent fraud | Performance of contract; legitimate interest |
| Process payments and manage billing | Performance of contract |
| Communicate with you about your Account, support requests, security alerts, and changes to the Service | Performance of contract; legal obligation |
| Send marketing communications (subject to your opt-in or opt-out rights) | Consent; legitimate interest |
| Personalize and improve the Service, including by analyzing usage patterns | Legitimate interest |
| Develop new features and products, including AI Features (subject to the limits in Section 4) | Legitimate interest |
| Comply with law, regulatory requirements, and legal process | Legal obligation |
| Defend, exercise, or establish legal rights | Legitimate interest |
We do not "sell" personal information and we do not "share" personal information for cross-context behavioral advertising, as those terms are defined by the CCPA and similar state privacy laws.
The Service includes AI Features (as defined in our AI Acceptable Use Addendum). When you use AI Features, the AI inputs you submit and the AI outputs the Service generates may be processed by us and by our third-party AI providers (currently OpenAI, with Anthropic available as a fallback provider).
We do not use Customer Data to train any AI model unless you affirmatively opt in. We access AI providers through their business APIs, whose terms provide that API inputs and outputs are not used to train the providers' general-purpose models, and we do not opt in to any provider data-sharing or training programs.
AI outputs are advisory. You are responsible for reviewing AI outputs before relying on them. See the AI Acceptable Use Addendum for full terms.
Voice and photo features. Some AI Features use your device's microphone and camera, with your permission. When you dictate a note, command, or description, your speech is transcribed — on your device where supported, or by sending the audio recording to our AI provider for transcription. Audio recordings are processed to produce the transcript and are not stored by the Service after processing; the resulting transcript is retained as part of your Customer Data. When you use photo-based features (such as drafting a quote from job-site photos), the photos you select are sent to our AI provider for analysis. If you use a voice assistant integration (such as Siri), your device's operating system processes your speech under its own terms before passing the resulting text to the Service. Voice and photo inputs are used only to provide the requested feature, are subject to the no-training commitments above, and are never used for advertising. You can revoke microphone and camera access at any time in your device settings.
We disclose personal information to:
We do not "sell" personal information and we do not "share" personal information for cross-context behavioral advertising, as those terms are defined by the CCPA and similar state privacy laws. We do not share your mobile telephone number or SMS/text-messaging opt-in information with third parties or affiliates for their own marketing or promotional purposes.
We and our service providers use cookies and similar technologies (such as pixel tags, web beacons, and SDKs) to operate the Service, remember preferences, perform analytics, and (where you consent) personalize content.
Because we do not "sell" personal information or "share" it for cross-context behavioral advertising, there is no sale or sharing for a Global Privacy Control ("GPC") signal to opt out of. If our practices ever change, we will honor GPC signals as required by applicable state privacy laws. We currently do not respond to "Do Not Track" browser signals as no industry standard for them exists.
We engage the sub-processors below to operate the Service. A current detailed list (including names, purposes, and processing locations) is available on request by emailing privacy@tradeskit.io, and the categories of sub-processors are updated as described in our Data Processing Addendum.
| Category | Provider |
|---|---|
| Cloud hosting and database | Supabase, Inc. |
| Web hosting and edge compute | Vercel, Inc. |
| Payment processing | Stripe, Inc. |
| AI providers | OpenAI, LLC (active provider); Anthropic, PBC (fallback provider) |
| SMS and voice messaging | Twilio Inc. |
| Mobile app updates and push notification delivery | 650 Industries, Inc. (Expo), with delivery via Apple Push Notification service and Firebase Cloud Messaging |
| Transactional email | Resend (Plus Five Five, Inc.) |
| Error and crash monitoring | Functional Software, Inc. (Sentry) |
| Product analytics | PostHog, Inc. |
| Maps and geocoding | Google LLC (Google Maps Platform) |
| Accounting integration (only when you enable it) | Intuit Inc. (QuickBooks Online) |
We are based in the United States and process personal information in the United States. If you access the Service from outside the United States, you understand that your personal information will be transferred to and processed in the United States.
For transfers from the European Economic Area, the United Kingdom, or Switzerland, we rely on appropriate safeguards including, where applicable, Standard Contractual Clauses approved by the European Commission and the UK Addendum.
We retain personal information for as long as needed to provide the Service and as required for our legitimate business purposes and applicable law.
| Data category | Retention window |
|---|---|
| Customer-facing account data (contractor profiles, contact information, business records) | Duration of the Account plus seven (7) years after termination |
| Customer Data (work orders, customer records, invoices, photos uploaded by you) | Duration of the Account; 60-day post-termination retention window per the Terms of Service; thereafter purged in the ordinary course subject to backup cycles |
| Soft-deleted records | Thirty (30) days from soft delete before purge, unless under legal hold |
| Telemetry, error logs, security logs | Up to thirteen (13) months in identifiable form |
| Marketing engagement data | Up to twenty-four (24) months from last interaction |
| Support correspondence | Up to three (3) years |
| Payment and tax records | As required by U.S. federal and state tax law (commonly seven (7) years) |
These windows may be extended where required by legal hold, dispute, regulatory request, or applicable law.
Depending on where you live and the law that applies, you may have one or more of the following rights regarding your personal information:
To exercise these rights, contact us at privacy@tradeskit.io or use the in-Service privacy controls. We may need to verify your identity before responding. If you are an Authorized User of a TradesKit customer, direct your requests to that customer in the first instance; we will assist as the processor under the Data Processing Addendum.
If you are a California resident, you have the rights described above and:
Categories of personal information collected (CCPA framework): identifiers; commercial information; internet or other electronic network activity; geolocation data (approximate; precise only with permission); audio, electronic, or visual information (call recordings, photos, transcripts); professional or employment-related information; inferences drawn from the foregoing.
California "Shine the Light" (Civ. Code § 1798.83): We do not disclose personal information to third parties for those third parties' direct marketing purposes.
If you are a Virginia resident, in addition to the general rights, you have the rights to confirm processing, access, correct, delete, obtain a copy in a portable format, and opt out of (a) targeted advertising, (b) the sale of personal data, and (c) profiling in furtherance of decisions producing legal or similarly significant effects. You have the right to appeal a denied request. To appeal, email privacy@tradeskit.io with subject "VCDPA Appeal."
If you are a Colorado resident, in addition to the general rights, you have the rights to access, correct, delete, obtain a portable copy, and opt out of targeted advertising, the sale of personal data, and certain profiling. You have a right to appeal a denied request.
If you are a Connecticut resident, in addition to the general rights, you have the rights to access, correct, delete, obtain a portable copy, and opt out of targeted advertising, the sale of personal data, and certain profiling. You have a right to appeal a denied request.
If you are a Utah resident, in addition to the general rights, you have the rights to access, delete, obtain a portable copy, and opt out of targeted advertising and the sale of personal data.
If you are an Oregon resident, in addition to the general rights, you have the rights to confirm processing, access, correct, delete, obtain a portable copy, opt out of targeted advertising, the sale of personal data, and certain profiling. You also have the right to a list of the specific third parties (other than natural persons) to which we have disclosed your personal data.
We honor analogous rights for residents of Delaware, Iowa, Indiana, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Rhode Island, Tennessee, Texas, and other states with comprehensive privacy laws to the extent those laws apply to our processing.
If you are in the EEA, UK, or Switzerland, in addition to the general rights you have the right to restrict or object to certain processing, to withdraw consent at any time (without affecting the lawfulness of prior processing), and to lodge a complaint with a supervisory authority. The data controller for your information is Cascade Software Solutions LLC at the address in Section 14.
Legal bases for processing are as set out in the table in Section 3.
If your information is processed through the Service because a TradesKit customer (such as a contractor whose services you have engaged) is using the Service to manage their business, that customer is the data controller of your information and we are the data processor. Please direct privacy inquiries — including requests to access, correct, delete, or restrict use of your information — to that customer in the first instance.
We will provide reasonable assistance to TradesKit customers in responding to end customer requests under our Data Processing Addendum.
We implement administrative, technical, physical, and organizational measures designed to protect personal information against accidental or unlawful destruction, loss, alteration, unauthorized disclosure, or access. These measures include encryption in transit, encryption at rest for sensitive data, access controls, review of the vendors we engage, and incident-response procedures.
No system is perfectly secure. You are responsible for keeping your account credentials confidential and for using available security features (such as two-factor authentication).
If we become aware of a security breach that has compromised your personal information, we will notify you and any affected parties, and cooperate with regulators, as and to the extent required by applicable law.
The Service is not directed to or intended for use by children. We do not knowingly collect personal information directly from children under the age of 16. If you are a TradesKit customer and you upload information about end customers who are minors (for example, when recording a parent or guardian as a contact for a residential service call where a minor is also present), you are responsible for complying with applicable children's privacy laws (including the U.S. Children's Online Privacy Protection Act where applicable).
If you believe a child under 16 has provided us with personal information, contact us at privacy@tradeskit.io and we will take steps to delete it.
For privacy questions, requests, or complaints, contact us:
Cascade Software Solutions LLC, Attn: Privacy, 5441 S Macadam Ave, Ste N, Portland, OR 97239, USA, Email: privacy@tradeskit.io
You also have the right to lodge a complaint with your local data protection authority.
We may update this Privacy Policy from time to time. We will notify you of material changes by posting the revised Privacy Policy on our website and updating the "Last Updated" date, and where required by law by sending you a direct notice. Your continued use of the Service after a change becomes effective constitutes acceptance.
By using TradesKit, you acknowledge that you have read and understood this Privacy Policy.