Privacy policy

Last updated 1 November 2026

Who we are

Tradask is run from the United Kingdom. You can contact us at hello@tradask.co.uk.

Two kinds of information

Tradask is software that trade businesses use to run their work. We handle personal information in two different ways:

• About people who use Tradask (business owners, their staff, and people trying the beta). For this we decide how it's used, so we are the “controller” under UK data protection law.
• About a business's own customers (the people they quote, visit and invoice). The business decides what goes in and how it's used, so the business is the controller and we are their “processor”: we only store and handle it to provide Tradask to them, following their instructions and our terms. If a trade business holds your details in Tradask and you have a question about them, please contact that business first.

What we collect about people who use Tradask

• Account details: your name, email address, phone number if you add it, and your password (stored only as a secure one-way hash, never readable).
• Business details: trading name, address, contact details, VAT number and the settings you choose.
• Sign-in and security information: when you signed in, and the IP address and browser type of each signed-in session, so you and we can spot unusual access.
• An activity record of changes made in a business's account (who did what, and when), which owners and admins can see.
• Feedback you send us through the app, with the page you were on and your browser type. Please don't include customers' details in feedback.
• Copies of emails Tradask sends for you (for example quotes, invoices and visit reminders), so you can see what was sent and when.

What a business may store about its customers

Names, addresses, phone numbers and email addresses; property details and access notes (such as key-safe codes, which we store encrypted); appliance details; job records, notes, photos and signatures; diary visits; quotes, invoices and payments. Card payments, if a business turns them on, are taken by Stripe: card numbers never reach Tradask.

Why we use it, and our lawful basis

• To provide Tradask to you under our agreement with you (contract).
• To keep accounts secure, prevent misuse and fix problems (our legitimate interests).
• To improve Tradask using feedback and how features are used (our legitimate interests).
• To keep records the law requires (legal obligation).

We don't sell personal information, show adverts, or use it to build marketing profiles.

Who we share it with

Only the service providers we need to run Tradask, each bound by data protection terms:

• Fly.io: hosts the app, database and uploaded files on servers in London.
• Resend: sends the app's emails, from its EU (Ireland) region.
• Cloudflare: runs our domain name.
• Stripe: only if a business connects it, to take card payments from its customers.
• Intuit QuickBooks: only if a business connects it, to send its customers, invoices and payments to its own QuickBooks account.

Some of these companies are based in the United States. Where information is handled outside the UK, we rely on the safeguards UK law requires, such as the UK International Data Transfer Addendum. We may also share information if the law requires it.

Cookies and storage on your device

We use one essential cookie to keep you signed in, and a short-lived one while you connect QuickBooks. On phones, the app keeps work you did without signal on your device until it can be sent. We don't use advertising or tracking cookies, so there's nothing to opt out of.

How long we keep it

• While your business's account is open, we keep its information so the app works.
• If an account is closed, we delete its information within 90 days. Backups are overwritten within a further 30 days.
• Demo businesses created from the “Explore the demo” buttons are deleted after 24 hours.
• Businesses can download their jobs, invoices, payments and expenses at any time from Reports.

How we protect it

Everything is sent over encrypted connections. Passwords are hashed, and the most sensitive details (such as access codes and connections to other services) are encrypted. Each business can only see its own information, and owners decide what each member of staff can see and do.

Your rights

You can ask for a copy of your information, or ask us to correct it, delete it, limit how we use it, or send it to you in a portable format. You can also object to how we use it. Email hello@tradask.co.uk and we'll reply within one month.

If you're unhappy with how we've handled your information, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We'd appreciate the chance to put it right first.

Changes

If we change this policy in a way that matters, we'll tell account owners by email or in the app before it takes effect.