YOUR DATA AND PRIVACY
Privacy policy
How TradePocket collects, uses, shares, stores and protects personal data.
Last updated 20 September 2026
1. Who is responsible
TradePocket is operated by Emile Eksteen Lubbe, trading as TradePocket. We are the controller of the account, website, support and service-administration data described in this policy.
Privacy questions and rights requests can be sent to hello@tradepocket.pro.
2. Data we collect
We collect information you provide, including your name, email address, business details, account settings, services, availability, customer records, job details, estimates, invoices, payment status, support messages and content you upload or create.
Depending on the features you use, this may include customer contact details, addresses, appointment requests, service history, job notes, photos, parts and materials, review invitations and responses, promotions, newsletter recipients, website content, brand assets and TradePocket AI Business Assistant requests. If you use employee tools, it may also include employee contact and role information, hours, leave, pay frequency, owner-entered rates and deductions, pay-period totals and payslip records.
If you use TradePocket Office, we may process business-number details, number-selection or transfer records, caller and recipient numbers, call and message timestamps, duration, routing status, voicemail, message content, usage allowances, top-ups, receptionist settings and connections to customer or Core records. Where recording or transcription is enabled and lawful, this may also include call audio, transcripts, summaries and the notices or consent records associated with them.
We also receive technical and security information such as IP address, browser, device, request, error and diagnostic data. Where a purchase uses FastSpring checkout, FastSpring processes checkout, payment method, billing address, tax, invoice, fraud, refund and dispute information. TradePocket receives transaction identifiers, subscription status, plan, amount, currency and related billing status, but does not store full payment-card details.
3. Why we use it
We process data to create and secure accounts; organize bookings, jobs and customer records; prepare estimates and invoices; support optional employee recordkeeping and payslip preparation; provision and operate requested business communications; route calls and messages; measure allowances and prepaid usage; provide optional receptionist cover; connect agreed next steps to Core; support payments and subscription status; provide requested communications, reviews, growth reporting and website features; provide support; prevent abuse; maintain and improve the service; comply with legal duties; and establish or defend legal claims.
Our legal bases may include performance of our contract, compliance with legal obligations, our legitimate interests in operating and securing the service, and consent for optional analytics, advertising, recording, transcription or communications where required. You may withdraw consent without affecting earlier lawful processing.
4. Providers and recipients
Core providers may include Supabase for authentication and database services, Vercel for website and application delivery, Bunny for public and private file delivery, and Railway for application services and background processing. TradePocket Office may use approved telecommunications, messaging, number-provisioning, transcription and speech-service providers to deliver the communications features you enable. Optional Google measurement technologies load only after the relevant consent when configured.
FastSpring is the Merchant of Record and an independent controller for buyer, payment, tax, fraud-prevention, refund and transaction-compliance data when it is identified as the seller or authorized reseller at checkout.
We may disclose information to approved service providers, professional advisers, authorities where legally required, or a successor in a merger, financing, reorganization or sale subject to appropriate confidentiality. We do not sell personal data.
5. Customer data and instructions
A TradePocket business customer is normally the controller of the customer, employee, job, communication, review, campaign and website data it enters into or connects with the service. TradePocket processes that data to provide the requested product under the customer’s instructions.
Business customers are responsible for their own privacy and employee notices, lawful basis, communication choices, recording and transcription notices, required consent, review invitations, uploaded content, pay-record accuracy and instructions to TradePocket. Recording and transcription must remain off where the customer cannot lawfully provide the required notice, purpose and choice. Requests relating to data controlled by a TradePocket customer should normally be directed to that customer, and we will assist as required.
6. Retention and transfers
We keep account and customer content while the account is active and for a limited period afterward where needed for restoration, security, disputes or legal compliance. Communications metadata, messages, voicemail, recordings and transcripts are retained according to the enabled feature, customer settings, operational need and legal requirements. Billing and transaction records may be retained for statutory tax and accounting periods. Diagnostic and consent records are kept according to operational need and configured retention periods. Data is deleted or anonymized when it is no longer required.
Providers may process data in multiple countries. Where required, we rely on an adequacy decision, approved standard contractual clauses or another lawful transfer mechanism.
7. Your rights and security
Depending on your location, you may ask to access, correct, erase, restrict, object to or receive a copy of your personal data. You may withdraw consent and complain to your local data-protection authority. We may verify your identity and retain information where law permits or requires it.
We use access controls, encrypted transport, restricted credentials, monitoring, backups and other safeguards proportionate to the risk. No internet service can guarantee absolute security. TradePocket is a business service and is not directed to children.
8. Policy updates
We may update this policy to reflect legal, provider or product changes. The date above identifies the current version, and material changes will receive additional notice where required.