Privacy Policy

Last updated: 17 October 2026

1. Who we are

TradeScheduler is operated by Gheorghe Stefanita Cosmin. We are the data controller for the personal data described in this policy. Contact: tradescheduler.support@gmail.com.

2. What data we collect

Account data: username, email address, password (stored hashed), chosen plan, trial dates.
Business data you enter: client names, addresses, phone numbers, job details, quotes, invoices, payments, expenses, time entries, notes.
Billing data: handled by Stripe. We store only the Stripe customer/subscription identifiers, never card numbers.
Usage data: pages visited, features used, collected by Google Analytics 4 and Microsoft Clarity (only with your consent).
Technical data: IP address, browser, device type, collected in server logs for security and debugging.
Email: transactional emails (welcome, trial reminders, overdue invoice reminders) sent via our email provider.

3. Why we use it

To provide and operate the service, to send transactional emails about your account and invoices, to process payments through Stripe, to improve the product and to protect against abuse. We do not sell your data.

4. Legal basis (UK GDPR)

Contract (providing the service you signed up for), legal obligation (tax/retention rules), and legitimate interests (security, product improvement). Consent is used for analytics and advertising cookies.

5. Retention

Account and business data is kept while your account is active. If a trial ends without a subscription, the account and its data are deleted 60 days after the trial ends. You can export your data at any time from the app. Backups may retain a copy for a short period after deletion.

6. Your rights

Under UK GDPR you can request access, correction, deletion, portability, restriction or objection to processing of your personal data. Email tradescheduler.support@gmail.com. You also have the right to complain to the ICO (ico.org.uk).

7. Cookies

See our Cookie Policy. Essential cookies keep you signed in. Analytics and advertising cookies are only set with your consent.

8. Sub-processors and where data goes

We use a small number of third-party processors to run the service. Each receives only what it needs:

Stripe (payments): billing details, payment status and subscription identifiers. We never store card numbers.
Railway (hosting and database): stores the application and all data you enter.
Resend (transactional email): recipient address, subject and body of welcome, invoice, reminder and backup emails.
SMTP provider (job reminders, via the configured MAIL_SERVER): recipient address and reminder text. By default this is SendGrid.
Google (Analytics and Ads, only with your consent): page views, device and browser info, and ad conversion events.
Microsoft (Clarity, only with your consent): session recordings and heatmaps.

Some of these processors may process data outside the UK. Where they do, they apply their own safeguards. We do not name a specific legal mechanism for any single provider.

8a. AI features

The quote generator, receipt scanner and message reader send content to an AI provider (OpenAI) only when you use one of those features:

Quote generation: the job description you type (up to 1,500 characters) plus short excerpts of your own recent job descriptions and prices, used only as a pricing hint.
Receipt scanning: the receipt photo you upload, as an image.
Message reading: the client message you paste.

AI is only invoked when you ask for it. We do not send your data to the provider in the background. The provider's own data-use and training policy applies to what is sent; we cannot confirm from the app whether submitted content is used to train models, so check the provider's current policy before relying on it. AI usage is metered per account (see the pricing page).

9. Changes

We will update this page if our practices change. Material changes will be announced in the app or by email.