Privacy Policy

We collect the information needed to run your TradePilot account and provide the service:

• Account and registration information — your name, email address and sign-in details when you create an account, including when you sign in with Google.
• Business profile information — the business name, trade, contact details and other details you enter during onboarding or in Settings.
• Information you submit when using the platform — customer details, enquiries, messages, quotes, invoices, appointments and notes you create or sync into TradePilot.
• Connected email data — if you connect Gmail, we access incoming enquiry emails and send the replies, quotes and invoices you approve (see section 4).
• Payment and billing information — your subscription status and payment history. Card details are handled by Stripe; we never see or store your full card number (see section 5).
• Support communications — messages you send us when you contact us for help.

We use personal information to:

• provide and operate your TradePilot account and the features you use;
• sync incoming enquiries and draft replies, quotes, invoices and follow-ups for your review;
• process your subscription and any payments you collect through the platform;
• send you service-related messages, such as trial reminders, receipts and important account notices;
• respond to your support requests;
• keep the service secure, prevent misuse, and fix problems;
• improve TradePilot, using aggregated or de-identified information where possible.

Data we receive from Google, including Gmail data, is used only to provide and improve the TradePilot features you choose to use, as described in section 4. It is not used for any other purpose.

We do not sell your personal information, and we do not use your customer data to advertise to you or anyone else.

TradePilot uses artificial intelligence to draft replies, follow-ups, quotes and business insights. When you ask TradePilot to draft a reply to an enquiry, the relevant enquiry details (such as the customer's name, email address, subject and message) and your business details are sent to our AI service provider to generate that draft. Every AI-drafted message is shown to you for review — nothing is sent to your customers without your approval.

Data obtained through Google Workspace APIs, including Gmail, is processed by AI only to provide the feature you have requested. We do not use Google Workspace API data to develop, improve or train generalised or non-personalised AI or machine-learning models.

If you choose to connect your Gmail account, TradePilot asks for read-only permission to read your mail and permission to send mail on your behalf. We use the read-only access to retrieve and display relevant business emails and customer enquiries in your TradePilot inbox. TradePilot may update the status of an enquiry within its own application (for example, marking it handled), but it does not modify, delete, archive, move, or change the status of any message in your Gmail account. We use this access only to:

• pull new customer enquiries into your TradePilot inbox;
• send the replies, quotes, invoices and follow-ups you review and approve;
• keep your inbox in sync so nothing is missed.

Your Gmail connection is protected: your connection credentials are encrypted and stored on our servers, never in your browser. You can disconnect Gmail at any time in Settings, which revokes TradePilot's access. If you sign in with Google, we receive your name, email address and basic profile information from Google to create and secure your account.

We do not use Gmail data for advertising, do not sell it, and do not transfer it to others except as needed to provide the features described above (including AI drafting you request), to comply with the law, or as part of a business transfer.

TradePilot's use and transfer of information received from Google Workspace APIs will adhere to the Google API Services User Data Policy, including the Limited Use requirements.

TradePilot subscriptions and customer payments are processed by Stripe. When you pay for a subscription, or when your customers pay an invoice through a TradePilot payment link, the card details are entered directly into Stripe's secure checkout. TradePilot never sees, stores or has access to full card numbers. Stripe processes payment information under its own privacy policy.

TradePilot uses the cookies and browser storage needed to keep you signed in and to remember your preferences. We do not use advertising or cross-site tracking cookies.

To provide TradePilot we rely on a small number of service providers:

• Google — sign-in and the optional Gmail connection;
• Stripe — subscription billing and customer payments;
• Lovable Cloud — secure hosting, database and authentication infrastructure;
• Lovable AI Gateway (using Google Gemini models) — generating the AI drafts you request;
• Push notification services — if you enable notifications on your device.

These providers process information only as needed to deliver their service to us, and each handles data under its own privacy terms.

Your data is stored on secure, UK/EU-hosted cloud infrastructure. We use encryption in transit and at rest, row-level access controls so each business can only see its own data, and encrypted storage for sensitive connection credentials. Access to production systems is limited to what is needed to operate and support the service.

No method of transmission or storage is completely secure, but we work to protect your information and will tell you promptly if a breach affects your personal data, in line with UK GDPR.

We keep your account and business data for as long as your account is active. If you cancel, you can export or delete your customer data, and we will delete or anonymise your personal information within a reasonable period, except where we must keep records for legal, tax or accounting reasons.

We share personal information only:

• with the service providers listed in section 7, to operate TradePilot;
• when you choose to send something — for example, an email to your customer or a payment link;
• if the law requires it, or to protect the rights, safety and security of TradePilot, our users or others;
• in connection with a business transfer (such as a merger or sale), subject to this policy.

Under UK GDPR you have the right to:

• access the personal information we hold about you;
• ask us to correct inaccurate information;
• ask us to delete your information;
• export your data in a portable format;
• object to or restrict certain processing;
• withdraw consent where processing is based on consent (such as your Gmail connection).

To exercise any of these rights, email us at tradepilot101@gmail.com. You also have the right to complain to the Information Commissioner's Office (ICO), the UK data protection regulator.

Some of our service providers (such as Google and Stripe) process data outside the UK. Where this happens, transfers are protected by the safeguards those providers have in place, such as standard contractual clauses approved under UK GDPR.

If we change this Privacy Policy, we will update the "Last updated" date above and, for significant changes, let you know by email or in the app. The current version is always available at this address.

For any privacy-related question, request or concern, contact us at tradepilot101@gmail.com.