Last updated: May 19, 2026

Privacy Policy

This Privacy Policy explains how ProTradesMax ("ProTradesMax," "we," "us," or "our") collects, uses, shares, and safeguards information when trade-contractor businesses and their employees use our web application, mobile app, and related services (collectively, the "Service").

1. Overview & scope

ProTradesMax is a multi-tenant business-to-business software platform that helps trade contractors manage bids, jobs, work orders, invoicing, scheduling, and field operations. Our direct customer is the contractor business (the "Customer"). Most individuals who interact with the Service do so as employees, contractors, or agents of a Customer (each, a "User").

This Policy applies to information we process when you visit our marketing site, sign up for an account, use the Service, or communicate with us. When a Customer uploads information about its own end customers or properties, the Customer is the controller of that information and is responsible for how it is handled; we process it on the Customer's behalf under our agreement with them.

2. Information we collect

Account information

When a User creates or is invited to an account, we collect identifiers such as name, business email address, phone number, role within the Customer's organization, and authentication credentials. Authentication is handled by Supabase (email/password and supported OAuth providers).

Business data uploaded by Customers

The Service stores content that Customers and their Users create or upload, including customer and property records, bids, proposals, jobs, work orders, invoices, schedule events, inventory and equipment records, notes, attachments, and photos attached to work orders. This content is controlled by the Customer.

Payment information

Subscription payments are processed by Stripe. We do not store full payment card numbers on our systems. We receive limited billing metadata from Stripe (e.g., last four digits, card brand, billing zip, subscription status) to administer your subscription.

Device & log data

We automatically collect technical information when you use the Service, including IP address, browser or mobile OS, device identifiers, referring pages, timestamps, feature usage events, and error diagnostics. We use Sentry for error monitoring and Vercel for hosting and request logs, and Upstash for rate-limiting telemetry.

Location data (including background geolocation)

The ProTradesMax mobile app for field technicians collects precise location data so that dispatchers can see crew locations on the schedule map and route to job sites. Where permitted by your device and operating system, the app collects location data in the foreground and in the background while the user is on the clock.

Background location is only collected after the User grants the relevant OS-level permission. Users can revoke location access at any time through their device settings, and Customer administrators can disable tracking for specific users or roles. Disabling location may limit dispatch features that rely on it.

3. How we use information

We use information to:

• Deliver, operate, secure, and maintain the Service.
• Authenticate Users and enforce role-based access controls within each Customer tenant.
• Process subscription billing through Stripe and send related receipts and notices.
• Provide customer support, respond to requests, and communicate service announcements.
• Detect, prevent, and respond to fraud, abuse, and security incidents.
• Improve the Service, including diagnosing errors and understanding how features are used in aggregate.
• Comply with legal obligations and enforce our Terms of Service.

4. How we share information

We do not sell personal information. We share information with the following categories of recipients:

Sub-processors and integrations

• Supabase — database hosting and authentication.
• Stripe — payment processing and subscription billing.
• Resend — transactional email delivery (e.g., invitations, password resets, invoice emails).
• QuickBooks — accounting sync, only when a Customer authorizes the integration.
• Google Maps Platform — geocoding, address autocomplete, and routing.
• Sentry — application error monitoring and crash diagnostics.
• Vercel — application hosting and edge delivery.
• Upstash — rate limiting and abuse prevention.

Within the Customer's organization

Information entered into the Service is visible to other authorized Users within the same Customer tenant according to their assigned roles and permissions.

Legal disclosures

We may disclose information when we believe in good faith that disclosure is required to comply with applicable law, valid legal process, or government requests, or to protect the rights, property, or safety of ProTradesMax, our Customers, or others.

Business transfers

If ProTradesMax is involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, information may be transferred as part of that transaction. We will notify Customers of any such change in ownership or control of personal information.

5. Cookies & similar technologies

We and our service providers use cookies and similar technologies (such as local storage and session identifiers) to keep Users signed in, remember preferences, secure the Service against abuse, and measure aggregate usage. You can control cookies through your browser settings; disabling them may impair parts of the Service that require authentication.

6. Data security

We use commercially reasonable administrative, technical, and physical safeguards designed to protect information, including:

• Encryption in transit (TLS) and at rest.
• Row-Level Security (RLS) enforced at the database layer to isolate each Customer's tenant data.
• Role-based and capability-based access controls within the application.
• Restricted access for ProTradesMax personnel on a need-to-know basis, with logged administrative actions.

No method of transmission or storage is perfectly secure. We cannot guarantee absolute security, and Users are responsible for safeguarding their credentials.

7. Data retention & deletion

We retain Customer data for as long as the Customer's account is active. Upon termination of the account, Customer data is retained for 30 days to allow recovery and final export, after which it is deleted from production systems in the ordinary course. Backups containing residual copies are rotated out on standard retention schedules.

Customers may request a data export of their tenant's records by contacting us at the address below. We may retain limited records as required to comply with legal obligations, resolve disputes, or enforce agreements.

8. Your rights

Depending on where you live, you may have rights to access, correct, delete, or port the personal information we hold about you, and to object to or restrict certain processing.

• California (CCPA/CPRA):California residents may request access, deletion, correction, and information about disclosures, and may opt out of any "sale" or "sharing" of personal information (we do not engage in such sales or sharing as commonly defined).
• EEA / UK (GDPR): Where GDPR applies, you have the rights of access, rectification, erasure, restriction, portability, and objection, and the right to lodge a complaint with your local data protection authority.

Because most personal information in the Service is controlled by the Customer that employs you, we will generally refer User-level requests to the Customer and assist them in responding. To exercise your rights with us directly, contact us at the address below; we will verify your request before acting.

9. Children's data

The Service is intended for business use by adults and is not directed to children under 16. We do not knowingly collect personal information from children. If we learn that we have collected such information, we will delete it.

10. International data transfers

ProTradesMax is based in the United States, and our service providers may process information in the United States and other countries. If you access the Service from outside the United States, you understand that your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your jurisdiction.

11. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will revise the "Last updated" date above and, for material changes, provide additional notice (such as an in-app notice or email to the Customer's account owner). Your continued use of the Service after the changes take effect constitutes acceptance of the updated Policy.

12. Contact

For questions about this Privacy Policy or our privacy practices:

• Email: privacy@protradesmax.com
• Mail: 11349 Barnes Rd Catlett Virginia, US 20119
• Entity: Pro Trades Max LLC