TradesMate Privacy Policy

TradesMate is operated by Fullstack Dev KZ, Almaty, Kazakhstan. Privacy questions may be sent to info@fullstackdev.kz.

Account and business information

• Name, email address, account role, and business profile
• Hashed password, authentication session, and account-status information
• Team-member names, email addresses, roles, and job assignments added by authorised users

Customer and job information

• Customer names, phone numbers, email addresses, and addresses entered by the business
• Job titles, addresses, schedules, status, assigned team member, reminder settings, notes, and before-or-after photos when uploaded

Financial and document information

• Quotes and invoices, line items, tax, totals, currency, notes, due dates, and document status
• Payments, expenses, expense categories, and job associations
• Calculated revenue, outstanding balance, overdue amount, expenses, and profit summaries

Device, notification, and subscription information

• Push notification token and notification permission status when reminders are enabled
• App version, operating system, IP address, request time, and limited security or diagnostic logs
• Subscription product, entitlement, purchase status, and pseudonymous app-user identifier

TradesMate does not require access to the device contact list. Customer contact information is entered by an authorised business user. Payment-card details are handled by Google Play and are not received by Fullstack Dev KZ.

• Create, authenticate, and support TradesMate accounts
• Store and synchronise business, customer, job, document, payment, expense, and team records
• Calculate business dashboard and multi-currency financial summaries
• Send job reminders and other operational notifications selected by the user
• Manage subscription access and restore eligible purchases
• Provide support, prevent abuse, secure the service, and diagnose failures

TradesMate does not sell personal information and does not use customer, job, or financial records for third-party advertising.

Businesses using TradesMate determine which customer and team information they enter and are responsible for having a lawful reason to keep and use it. They should limit records to what is needed for the working relationship, protect account access, and respond appropriately to requests from their own customers or staff.

Information may be processed by providers needed to operate TradesMate:

• Secure server and database infrastructure used to host the TradesMate API and business records
• Expo and Firebase infrastructure for Android push notifications
• Google Play for app distribution, purchases, and platform services
• RevenueCat for subscription entitlement management
• Resend when a user submits a support or deletion request through Fullstack Dev KZ

Providers may process data in countries other than the user's country. Information may also be disclosed when required by law, to protect users or the service, or during a business transfer subject to appropriate safeguards.

Account and operational business records are retained while the account is active and as needed to provide document history, subscription access, support, security, accounting, and legal compliance.

After a verified deletion request, we delete or anonymise the account and associated business, customer, job, document, payment, expense, team, photo, and notification-token data from active systems, except where limited retention is required for legal obligations, fraud prevention, accounting, security, or dispute resolution.

We aim to complete verified requests within 30 days. Residual copies may remain in encrypted or access-controlled backups for up to 90 days before routine deletion.

Users may edit business records through the app, disable Android notifications in device settings, and cancel subscriptions through Google Play. Depending on applicable law, users may request access, correction, deletion, restriction, portability, or objection regarding their personal information. Identity verification may be required.

TradesMate uses HTTPS in transit, hashed passwords, protected credential storage on the device, role-aware access, and restricted service infrastructure. No online service can guarantee absolute security. Users should protect their credentials and lock devices that can access customer or financial records.

TradesMate is a business tool and is not directed to children under 16.

We may update this policy when TradesMate, its providers, or data practices change. The current version will remain available at this URL with a revised date.

Send privacy questions to info@fullstackdev.kz, or use the TradesMate deletion-request page.