Privacy Policy

Last updated: 17 August 2026

TradePad ("the Service", "TradePad", "we", "us") is operated by TradePad IE, based in County Limerick, Ireland. This policy explains how we handle personal data, in line with the EU GDPR and Irish data protection law. Contact: privacy@tradepad.ie.

1. Who is responsible

For your account and profile data, the data controller is TradePad IE. For the data you enter about your own clients (names, contacts, addresses, service history, photos), you are the controller and TradePad acts as your processor.

2. Data we collect

Account data: your name, email, business details and password (stored hashed).
Content you create: your clients' details, bookings, services, materials/consumption, expenses, invoices and photos you upload.
Location data: addresses you enter may be geocoded (converted to map coordinates), and, if you allow it, your device's approximate location may be used to place you on the map.
Technical data: IP address, device/browser information, logs and, in the mobile app, a push-notification token.

3. How and why we use it (legal bases)

To provide the Service (performance of a contract).
To secure and maintain the Service and prevent abuse (legitimate interests).
To send you service emails (necessary for the Service).
To send push notifications (with your consent, which you can withdraw in device settings).
To process payments if you subscribe to a paid plan (performance of a contract).
To comply with legal obligations.

4. Sharing and processors

We do not sell your data. We use trusted providers that process data on our behalf under contract:

Hetzner Online GmbH (Germany, EU) — hosting and backups.
Resend — transactional email.
Cloudflare — DNS, security and content delivery.
Apple — Sign in with Apple (authentication) and delivery of push notifications (APNs).
Stripe — payment processing (only if and when you subscribe to a paid plan).
OpenStreetMap / Nominatim (OpenStreetMap Foundation) — maps and converting addresses into coordinates (geocoding).
Google — sign-in (authentication), and Maps Platform / Geolocation API (location services and geocoding).

5. International transfers

Our primary hosting and backups are in the EU. Where a provider processes data outside the EU/EEA — for example Google's location services in the United States — we rely on adequacy decisions (such as the EU–US Data Privacy Framework) or EU Standard Contractual Clauses.

6. Retention

We keep your data while your account is active. When you delete your account, we permanently delete it from the live system. Encrypted backups follow a rolling schedule (currently up to 6 months) and are then overwritten.

7. Your rights

You may access, rectify, erase, restrict, port and object to processing, and withdraw consent. Exercise most of these in the app or via privacy@tradepad.ie. You can also complain to the Irish Data Protection Commission (dataprotection.ie).

8. Deleting your account

You can permanently delete your account and all associated data at any time in the app, under Company details → Delete account. This is immediate and irreversible.

9. Cookies

We use only essential cookies (login session and security/CSRF). No advertising or third-party tracking cookies.

10. Children & security

The Service is for businesses and is not directed at children under 18. We protect data with HTTPS, encrypted off-site backups and access controls.

11. Changes & contact

We may update this policy; material changes will be shown in the app. Contact: privacy@tradepad.ie.