Privacy Policy

1. Introduction

TradeCraft ("we", "us", "our") is operated by Oleksandr Miliutin, a sole trader based in the United Kingdom. We are committed to protecting your personal data and respecting your privacy. This Privacy Policy explains what information we collect, how we use it, and your rights under UK GDPR and the Data Protection Act 2018.

For any privacy-related queries, contact us at: tradecraftapp.uk@gmail.com

2. Information We Collect

We collect the following categories of personal data:

• ✓Account information: Full name, email address, and password (hashed — never stored in plain text).
• ✓Business details: Company name, trading name, phone number, business address, UTR number, VAT number, and VAT registration status.
• ✓Quote and invoice data: Client names, addresses, emails, service items, quantities, prices, and totals you enter when creating quotes.
• ✓Bank details: Bank name, sort code, account number, and account holder name — stored to auto-fill your invoice PDFs.
• ✓Payment information: Subscription payments are processed by Stripe. We do not store your card number, CVC, or full payment details — Stripe handles all payment data in compliance with PCI DSS.
• ✓Usage data: Basic app usage information such as login activity and feature usage, to improve our service.

3. How We Use Your Information

We use your personal data for the following purposes:

• ✓To create and manage your TradeCraft account.
• ✓To generate professional PDF quotes and invoices on your behalf.
• ✓To process your subscription payments via Stripe.
• ✓To send you transactional emails related to your account (e.g. password reset).
• ✓To improve the app based on usage patterns.
• ✓To comply with legal obligations under UK law.

We will never sell, rent, or trade your personal data to third parties for marketing purposes.

4. Data Storage and Security

Your data is stored securely using Supabase, a managed database platform hosted on servers within the United Kingdom and European Union. Supabase applies industry-standard encryption at rest and in transit (TLS/SSL). Access to your data is restricted and protected by row-level security policies.

While we take all reasonable steps to protect your data, no method of transmission over the internet is 100% secure. You are responsible for keeping your account credentials confidential.

5. Cookies

TradeCraft uses essential cookies only — specifically to maintain your authentication session after login. We do not use tracking cookies, advertising cookies, or third-party analytics cookies. You can disable cookies in your browser settings, but this will prevent you from staying logged in.

6. Third-Party Services

We use the following third-party services to operate TradeCraft:

• ✓Supabase — database, authentication, and file storage.
• ✓Stripe — subscription billing and payment processing.

These providers are bound by their own privacy policies and data processing agreements. We do not share your data with any other third parties.

7. Your Rights Under UK GDPR

Under UK GDPR, you have the following rights:

• ✓Right of access — request a copy of the personal data we hold about you.
• ✓Right to rectification — request correction of inaccurate or incomplete data.
• ✓Right to erasure — request deletion of your personal data ("right to be forgotten").
• ✓Right to data portability — receive your data in a structured, machine-readable format.
• ✓Right to object — object to processing of your data in certain circumstances.
• ✓Right to restrict processing — request that we limit how we use your data.

To exercise any of these rights, email us at tradecraftapp.uk@gmail.com. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

8. Data Retention

We retain your personal data for as long as your account is active. If you request account deletion, we will remove your personal data within 30 days, except where we are required to retain certain records for legal or tax purposes (typically 6 years under UK tax law).

9. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or an in-app notice. Continued use of TradeCraft after changes constitutes acceptance of the updated policy.