Privacy Policy

This Policy applies to personal information that Trade Flow Planner handles through the Service, our website, support communications, marketing communications, and related business operations. It does not apply to third-party websites, services, or integrations that have their own privacy practices.

For Customer Content submitted to a workspace, the subscribing customer generally determines what information is entered and how it is used. Trade Flow Planner processes that information to provide the Service and may act as a service provider or processor where applicable. For account administration, billing records, marketing communications, security, website measurement, and our own business operations, Trade Flow Planner may determine the purposes and means of processing.

Information you provide

• Account and contact information: We collect information such as name, email address, password-related authentication data, company or trade name, role, workspace membership, and communication preferences.
• Customer Content: Customers and authorized users may submit job names and addresses, schedules, activities, milestones, manpower information, employee or crew-member names, notes, photos, PDFs, attachments, and other information they choose to place in the Service.
• Support and communications: We collect messages, attachments, feedback, and other information provided when a person contacts support, responds to a survey, participates in a promotion, or otherwise communicates with us.
• Billing and transaction information: We collect subscription, plan, seat, renewal, payment-status, tax, and transaction records. Stripe processes payment-card details. Trade Flow Planner does not store complete payment-card numbers.

Information collected automatically

When a person visits or uses the Service, we and our essential infrastructure providers automatically collect limited network and technical information needed to deliver and secure the Service, such as IP address, browser and device type, operating system, request dates and times, authentication and session identifiers, and necessary performance, error, and security records.

At launch, we use only strictly necessary cookies, local storage, and similar technologies for authentication, session continuity, security, consent records if legally needed, and core functionality. We do not use pixels or other technologies for advertising, behavioral tracking, or session recording.

We also use Plausible Analytics, a cookie-free website analytics provider, to measure aggregate use of public marketing pages and specified conversion events. Plausible does not set cookies or use local storage or other persistent identifiers on a visitor's device. Plausible generates a daily rotating hash from IP address and browser user-agent solely to count unique visitors for that day, then discards the raw IP address and user-agent. Stored analytics data is aggregated and may include page path (query parameters stripped except campaign parameters such as utm and ref), referring site, browser, operating system, device type, and approximate country, region, and city derived from IP address. We do not send customer names, email addresses, user or workspace identifiers, job names, employee or crew information, or other Customer Content to Plausible.

Information from other sources

We may receive information from an Account Owner or workspace administrator who invites a user, from service providers supporting our operations, from payment and fraud-prevention providers, and from publicly available business sources. Authorized customer administrators may view and manage information associated with invited users in their workspace.

California statutory categories

In the preceding 12 months, Trade Flow Planner has collected the following CCPA/CPRA categories. To the extent the Service has not yet launched, this list also describes the categories expected at launch:

• Identifiers: names, email addresses, account login and authentication data, company or trade name, role and workspace membership, IP addresses, and device or online identifiers.
• Commercial information: subscription plan, seats, billing, payment status, renewal, tax, and transaction records.
• Internet or other electronic network activity: IP address, browser and device information, operating system, request timestamps, authentication and session identifiers, limited performance, error, and security records generated by essential hosting, authentication, database, and security infrastructure, and aggregate website-measurement records generated by cookie-free analytics, including page path, referring site, browser and device type, operating system, and approximate location derived from IP address (country, region, city), without storage of raw IP address by the analytics provider.

Sources include consumers, authorized customer administrators, browsers and devices, and essential service providers. We collect and use these categories to administer accounts; provide and secure the Service; process payments; provide support; measure aggregate website use; improve core functionality; and comply with legal obligations.

We use personal information to provide, operate, maintain, and secure the Service; create and administer accounts and workspaces; process subscriptions and payments; deliver customer support; send service notices; personalize settings; diagnose technical issues; maintain core functionality; measure aggregate website use; prevent fraud, abuse, and security incidents; enforce agreements; comply with law; establish or defend legal claims; and conduct ordinary business operations.

We may send marketing emails through Brevo where permitted. Marketing enrollment will use a separate, unchecked opt-in where required. A recipient may unsubscribe using the link in a marketing email. Unsubscribing from marketing does not stop necessary account, security, billing, or service communications.

We may create and use aggregated or de-identified information that cannot reasonably identify a person only to operate, secure, support, and improve core Service functionality and conduct ordinary business planning. We may retain such information indefinitely when it cannot reasonably be used to identify a person.

At launch, Trade Flow Planner uses cookie-free Plausible Analytics for aggregate website measurement as described in this Privacy Policy. Trade Flow Planner does not use advertising trackers, session recording or replay, artificial-intelligence services or features, or Sentry. Trade Flow Planner will not introduce any of those excluded technologies, and will not expand analytics beyond the cookie-free Plausible configuration described in this Privacy Policy, without legal, privacy, security, and technical review; updated policies and vendor disclosures; and any legally required notice, consent, or opt-out controls.

We disclose personal information only as needed to essential launch service providers and contractors, including Supabase for database hosting, authentication, and storage; Vercel for hosting; Stripe for billing and payment processing; and Brevo for transactional email and separately opted-in marketing email. Their access is limited to the information reasonably needed for their functions, subject to applicable contractual obligations.

We also use Plausible Analytics (Plausible Insights OÜ, Estonia) to process aggregate website-measurement data. Visitor analytics data is processed in the European Union. Plausible is used for Trade Flow Planner's own website measurement and is not used to process Customer Content. If Plausible is later configured to process Customer Personal Data, it will be added to the Subprocessor List and handled under the Data Processing Addendum.

We may also disclose information: to an Account Owner or authorized workspace administrator; at a customer's direction; to protect the rights, safety, security, or property of Trade Flow Planner, our users, or others; to comply with law, legal process, or lawful government requests; to investigate fraud or violations; in connection with a merger, financing, acquisition, reorganization, bankruptcy, or sale of assets; or with consent.

California disclosures for the preceding 12 months

In the preceding 12 months, Trade Flow Planner has not sold or shared any category of personal information, including for cross-context behavioral advertising. We do not use personal information for targeted advertising at launch.

Disclosed for a business purpose. In the preceding 12 months, we have disclosed Identifiers to hosting, authentication, database, email, support, security, and website-measurement providers; Commercial Information to payment-processing and billing providers; and Internet or other electronic network activity to hosting, authentication, security infrastructure, and cookie-free website-measurement providers. We do not have actual knowledge that we sell or share personal information of consumers under 16.

At launch, the Service uses only strictly necessary cookies and similar technologies needed for authentication, session continuity, security, and core functionality. No optional cookie categories are active. Plausible Analytics does not use cookies or similar storage, so it is not an optional cookie category and does not, by itself, require a nonessential-cookie consent banner or Cookie Settings control.

Because the verified launch configuration uses only strictly necessary technologies, does not sell or share personal information, and does not use sensitive personal information to infer characteristics, we do not provide a nonessential-cookie consent banner or Cookie Settings control at launch. Browser settings may permit users to block or delete necessary technologies, although doing so may affect Service functionality.

The Service does not sell or share personal information, so there is no sale or sharing activity for a Global Privacy Control or similar opt-out preference signal to stop. The Service does not currently respond to browser-based Do Not Track signals.

Unless a longer period is required by law, contract, litigation hold, fraud or security investigation, or to resolve a dispute, we use the following retention schedule:

• Identifiers and account/contact information: for the life of the account or subscription and up to 1 year after closure or cancellation; identifiers contained in billing, tax, security, or legal records follow the related record's period.
• Commercial information: for 7 years after the applicable transaction or end of the subscription.
• Internet or other electronic network activity: for up to 24 months after collection; security or incident evidence may be retained until the investigation and any related legal obligations are complete.
• Customer Content, including professional or employment-related information: during the subscription and for up to 1 year after cancellation. Export access is intended to remain available for 30 days after cancellation.
• Support and communications records: for up to 3 years after the matter is closed.
• Privacy-request and consent records: for at least 24 months after completion of the request or the most recent consent choice, and longer only when needed to demonstrate compliance.
• Backup copies: for up to 90 days after deletion from production systems, unless a legal hold or security need requires longer retention.

Aggregated or de-identified information may be retained indefinitely when it cannot reasonably be used to identify a person. We delete, anonymize, or securely destroy information when the applicable period ends.

We use administrative, technical, and organizational measures designed to protect personal information against unauthorized access, loss, misuse, alteration, or disclosure. No system is completely secure, and we cannot guarantee absolute security. Customers are responsible for maintaining account credentials, controlling workspace access, and promptly notifying us of suspected unauthorized use.

Users may update certain account information through available account settings. To request access, correction, export, or deletion of personal information, or to ask a privacy question, email support@tradeflowplanner.com. We may need to verify identity and authority before completing a request. Some information may be retained or excluded from a request where permitted by law, including information needed for security, billing, legal compliance, dispute resolution, or the rights of others.

If information is controlled by a customer workspace, we may direct the requester to the applicable Account Owner or customer organization and assist that customer as appropriate. Authorized administrators may access or manage invited-user information within their workspace.

California residents may have rights under applicable law to know or access personal information, correct inaccurate personal information, request deletion, obtain information about categories of collection and disclosure, opt out of sale or sharing, limit certain uses of sensitive personal information, and receive equal service without unlawful discrimination for exercising privacy rights.

To exercise an applicable right, email support@tradeflowplanner.com and describe the request. We will verify the request as required by law. An authorized agent may submit a request where legally permitted, but we may require proof of authorization and identity. A person may appeal a denied request by replying to our decision and stating that an appeal is requested.

Trade Flow Planner does not use sensitive personal information to infer characteristics about individuals and does not sell or share personal information at launch. Based on those practices, the Service does not display a "Do Not Sell or Share My Personal Information" link. California residents may submit questions or applicable privacy requests to support@tradeflowplanner.com.

Customers may enter information about employees, crew members, subcontractors, clients, and other people. The customer represents that it has authority to provide that information, will use it lawfully, and will provide any notices and obtain any permissions required by privacy, employment, labor, contract, or other applicable law. Customers must not use the Service to store Social Security numbers, complete payment-card details, medical records, payroll banking credentials, protected health information, or other highly sensitive information unless Trade Flow Planner has expressly agreed in writing that the Service supports that use.

The Service is intended for users who are at least 18 years old and is not directed to children. We do not knowingly collect personal information directly from children under 13. If you believe a child has provided personal information to us, contact support@tradeflowplanner.com so we can review and take appropriate action.

Trade Flow Planner is operated from the United States and initially targets customers in the United States. If a person accesses the Service from another country, personal information may be transferred to, stored in, and processed in the United States and other locations where our providers operate, subject to applicable law. Website-measurement data processed by Plausible Analytics is processed in the European Union. We do not represent that the Service is designed to satisfy every jurisdiction's privacy requirements.

The Service may contain links to or interoperate with third-party services. Those third parties control their own privacy practices, and this Policy does not govern information a person provides directly to them. Review the applicable third-party privacy notices before using those services.

We may update this Policy to reflect changes in the Service, technology, law, or our practices. We will post the updated Policy and revise the Last Updated date. If a change is material, we will provide additional notice or obtain consent where required by law.

Trade Flow Planner LLC
Riverside, California
Email: support@tradeflowplanner.com
Website: tradeflowplanner.com

Legal and administrative communications may also be sent to admin@tradeflowplanner.com.