Privacy Policy

1. Who we are

TradeSpark AI, Inc. is a Delaware corporation. When we act as the controller of your personal information (or equivalent under your law), we are the data controller. When we process personal information on behalf of a professional user or business, we may act as a processor under their instructions.

Registered office: TradeSpark AI, Inc., 8 The Green, STE R, Dover, DE 19901, USA.
Contact: hello@tradespark.ai.
Data Protection Officer / EU & UK representative: If required under Article 27 GDPR, we will appoint and publish representative contact details here.

2. Information we collect

Information you provide

• Account data: name, email address, phone number, password (hashed), profile details, role (property owner/DIYer or Pro).
• Project data: descriptions of work you want performed, photos, floor plans, sketches, locations, timelines, budgets, and other details you submit to scope a project.
• Professional data (Pros): business name, license numbers, insurance information, service areas, trade categories, work history, portfolio images, responses to background check questions, and information required to verify your eligibility to perform work.
• Communications: messages you exchange with us or with other users through the platform, support tickets, and survey responses.
• Payment data: billing details for subscription plans. Payment card details are collected and stored by our third-party payment processor; we receive limited token and transaction metadata.

Information we collect automatically

• Device & usage data: IP address, browser type, operating system, device identifiers, referrer URLs, pages viewed, clicks, session duration, crash data, and approximate location derived from IP.
• Cookies & similar technologies: see Cookies & similar technologies.

Information from third parties

• Background check and license verification providers (for Pros) return verification results, disclosures, and disposition information that you have consented to share.
• Analytics and advertising partners may share aggregated audience data.
• Single sign-on providers (e.g., Google) share the profile fields you authorize.
• Public records and business directories may be used to verify professional credentials.

3. How we use information

We use personal information for the purposes below. Where GDPR or a similar law applies, the lawful basis for each purpose is shown in brackets.

• Provide and operate the platform, create and maintain your account, match property owners with Pros, calculate estimates, generate scopes, deliver bids, process payments. [Contract performance; legitimate interests]
• Verify professionals, run license checks, background checks, and identity verification. [Contract performance; legal obligation; legitimate interests in safety and trust]
• Customer support, respond to questions and troubleshoot issues. [Contract performance; legitimate interests]
• Improve and develop the service, analyze usage, fix bugs, test features, measure performance. [Legitimate interests; consent where required]
• Train and improve AI models, see AI model training. [Legitimate interests; consent where required]
• Communicate with you, transactional messages, service updates, and (where permitted) marketing. You can opt out of marketing at any time. [Contract; consent; legitimate interests]
• Safety, fraud prevention, and security, detect abuse, prevent fraud, enforce our terms and Acceptable Use Policy. [Legitimate interests; legal obligation]
• Legal compliance, respond to valid legal process, comply with tax/accounting rules, satisfy regulators. [Legal obligation]
• Corporate transactions, evaluate or consummate a merger, financing, or sale of all or part of our business. [Legitimate interests]

4. AI model training & automated decisions

TradeSpark is building a domain-specific Small Language Model (SLM) for the construction trades using real data from working professionals. We use information you provide, including project scopes, professional descriptions of work, estimate data, and similar inputs, to train, evaluate, and improve our models. We take the following measures:

• Wherever reasonably possible, we de-identify or aggregate data before using it for model training.
• We apply technical and organizational controls to reduce the risk that models memorize or reveal personal information.
• You can opt out of having your content used to train our models by emailing hello@tradespark.ai or by using the in-app control where available. Opting out does not delete historical outputs of previously trained models, but future training runs will exclude your content.
• We use automated scoring and matching (for example, to route a project to suitable Pros and to estimate costs). We do not use solely-automated decision-making that produces legal or similarly significant effects without meaningful human involvement. Where applicable under GDPR Article 22 or similar laws, you may request human review of an automated decision, express your point of view, and contest it by emailing hello@tradespark.ai.

5. When and with whom we share information

We share personal information in the following circumstances and with the following categories of recipients:

• Other users of the platform, information necessary to complete a connection (e.g., a Pro sees your scoped project and location; a property owner sees Pro identity and bid details).
• Service providers / processors, hosting, storage, analytics, error monitoring, customer support, email delivery, payment processing, background check, identity verification, fraud prevention, and AI infrastructure providers. We bind them by written contracts consistent with applicable law.
• Professional advisors, lawyers, accountants, auditors, and insurers.
• Authorities and other parties, where required by law, legal process, or to protect rights, property, safety, or to enforce our terms.
• In a corporate transaction, in connection with a merger, acquisition, financing, reorganization, bankruptcy, or sale of assets, subject to confidentiality protections.

We do not sell personal information for money. In some jurisdictions, certain data sharing for advertising measurement may be considered a "sale" or "sharing" under CCPA/CPRA; see US state privacy rights.

6. Cookies & similar technologies

We use cookies and similar technologies (pixels, SDKs, local storage) to operate the site, remember your preferences, analyze traffic, and, where you consent, measure marketing. You can manage non-essential cookies through the cookie banner (where presented) and through your browser settings. Essential cookies are always set because they are strictly necessary to provide the service.

7. International data transfers

We are based in the United States and use service providers that may be located outside your country. Where we transfer personal information from the European Economic Area (EEA), the United Kingdom, or Switzerland to a country not recognized as providing an adequate level of protection, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, and/or equivalent mechanisms, together with supplementary measures where appropriate. You can request a copy of the relevant safeguards by contacting hello@tradespark.ai.

8. Data retention

We keep personal information only as long as necessary for the purposes described in this policy, including to provide the service, comply with legal obligations, resolve disputes, and enforce our agreements. Specific retention periods depend on the type of data, our legal obligations, and the purposes for which we collected it. When personal information is no longer required, we delete, anonymize, or aggregate it.

9. Security

We use technical and organizational measures designed to protect personal information, including encryption in transit, access controls, least-privilege principles, logging and monitoring, and vendor security reviews. No method of transmission or storage is 100% secure; we cannot guarantee absolute security, but we work continuously to improve.

10. Your rights & choices

Depending on where you live, you may have the following rights in respect of your personal information:

• Access, obtain a copy of the personal information we hold about you.
• Correction / rectification, fix inaccurate or incomplete data.
• Deletion / erasure, ask us to delete your personal information.
• Portability, receive a machine-readable copy of data you provided to us.
• Restriction / objection, limit or object to certain processing, including direct marketing and profiling.
• Withdraw consent, where processing is based on consent, withdraw it at any time (without affecting processing already carried out).
• Opt out of AI training, see AI model training.
• Lodge a complaint, with your local data protection authority.

To exercise any right, email hello@tradespark.ai. We may need to verify your identity. We respond within the timelines required by applicable law (typically 30 days, extendable where permitted). We do not discriminate against you for exercising your rights.

11. Children's privacy

TradeSpark is not directed to children. We do not knowingly collect personal information from children under 16, or under 13 in the United States. If you believe a child has provided personal information, contact us at hello@tradespark.ai and we will take reasonable steps to delete it.

12. Additional information for EEA, UK & Swiss residents

If you are in the EEA, United Kingdom, or Switzerland, the GDPR (or UK GDPR / Swiss FADP) applies. TradeSpark is the controller for processing described in this policy except where we act as a processor on behalf of a business customer.

Lawful bases for processing are listed in How we use information. You have the right to lodge a complaint with a supervisory authority, a list of EEA authorities is available from the European Data Protection Board, and the UK authority is the Information Commissioner's Office (ICO).

EU/UK Representative. Where Article 27 GDPR applies, contact details for our appointed representative will be published in this section.

13. US state privacy rights (California, Colorado, Connecticut, Virginia, Utah, Texas, and others)

Residents of US states with comprehensive privacy laws (including California under the CCPA/CPRA, Colorado under the CPA, Connecticut under the CTDPA, Virginia under the VCDPA, Utah under the UCPA, Texas under the TDPSA, and others as they come into effect) may have the rights listed in Your rights & choices, including:

• The right to know what personal information we collect, use, disclose, and (in California) sell or share.
• The right to delete and correct personal information.
• The right to opt out of the sale or sharing of personal information, and the right to limit the use of sensitive personal information.
• The right to opt out of targeted advertising and certain profiling.
• The right to non-discrimination for exercising these rights.

To submit a request, email hello@tradespark.ai with the subject "US Privacy Rights Request" and include the state you reside in. California residents may designate an authorized agent. We honor Global Privacy Control (GPC) signals for opt-out-of-sale/sharing where required. In the past 12 months, we have collected the categories of personal information described in Information we collect for the purposes described in How we use information. We have not sold personal information for money. If we "share" personal information for cross-context behavioral advertising, you can opt out as described above.

14. Other jurisdictions

We design our practices to be consistent with applicable privacy laws globally, including Canada's PIPEDA, Brazil's LGPD, Australia's Privacy Act and APPs, Japan's APPI, South Africa's POPIA, and Singapore's PDPA. If your local law grants rights in addition to those described above, contact hello@tradespark.ai and we will honor them as required.

15. Changes to this policy

We may update this policy to reflect changes in our practices or in the law. When we do, we will revise the "Last updated" date above and, for material changes, provide additional notice (for example by email or an in-product notification). Your continued use of the platform after the effective date constitutes acceptance of the updated policy.

16. Governing law

This Privacy Policy is governed by the laws of the State of Delaware, United States of America, without regard to conflict-of-law principles. The state and federal courts located in Delaware will have exclusive jurisdiction over any disputes arising out of or relating to this Privacy Policy, except where mandatory local law provides otherwise (for example, the right of a consumer in the EEA or UK to bring proceedings in the courts of their country of residence).

17. Contact us

Questions, requests, or complaints:

• Email: hello@tradespark.ai
• Postal mail: TradeSpark AI, Inc., 8 The Green, STE R, Dover, DE 19901, USA