Tradesmin Inc. ("Company," "we," "us," or "our") operates the Tradesmin platform (the "Service"). This Data Policy explains how we handle personal data in compliance with the California Consumer Privacy Act (CCPA/CPRA) and the General Data Protection Regulation (GDPR). It supplements our Privacy Policy with specific details about your data rights and how to exercise them.
California Consumer Privacy Act (CCPA/CPRA)
Your Rights Under the CCPA
If you are a California resident, the CCPA grants you the following rights regarding your personal information:
- Right to Know. You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which that information is collected, the business or commercial purpose for collecting the information, and the categories of third parties with whom we share personal information.
- Right to Delete. You have the right to request deletion of your personal information that we have collected, subject to certain exceptions (e.g., legal obligations, ongoing contractual relationships, security purposes).
- Right to Correct. You have the right to request that we correct inaccurate personal information we maintain about you.
- Right to Opt-Out of Sale/Sharing. You have the right to opt out of the sale or sharing of your personal information. We do not sell or share your personal information as defined by the CCPA.
- Right to Non-Discrimination. We will not discriminate against you for exercising any of your CCPA rights. We will not deny you goods or services, charge you different prices, provide a different level of quality, or suggest that you may receive a different price or quality of goods or services.
- Right to Limit Use of Sensitive Personal Information. Where applicable, you may request that we limit our use of sensitive personal information to only those uses necessary to provide the Service.
Categories of Personal Information We Collect
| Category | Examples | Collected |
|---|
| Identifiers | Name, email, phone number, IP address | Yes |
| Commercial Information | Subscription and billing records | Yes |
| Internet / Network Activity | Browsing history, interactions with the Service | Yes |
| Geolocation Data | Approximate location from IP address | Yes |
| Professional / Employment Information | Job title, trade specialty, employer information | Yes |
| Sensitive Personal Information | SSN (for payroll), financial account details | Yes (where payroll features are enabled) |
How to Exercise Your CCPA Rights
To submit a verifiable consumer request, you may contact us at:
We will verify your identity before processing your request. We will respond to your request within 45 days. If we need additional time, we will inform you of the reason and extension period (up to an additional 45 days).
You may also designate an authorized agent to make a request on your behalf. We may require the authorized agent to provide proof of your written permission and verify their own identity.
General Data Protection Regulation (GDPR)
Your Rights Under the GDPR
If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, the GDPR grants you the following rights:
- Right of Access (Article 15). You have the right to obtain confirmation of whether we process your personal data, and if so, to access that data along with information about the processing.
- Right to Rectification (Article 16). You have the right to request correction of inaccurate personal data and completion of incomplete personal data.
- Right to Erasure (Article 17). You have the right to request deletion of your personal data when it is no longer necessary for the purpose for which it was collected, you withdraw consent, or the data has been unlawfully processed.
- Right to Restriction of Processing (Article 18). You have the right to request restriction of processing in certain circumstances, such as when you contest the accuracy of the data or object to its processing.
- Right to Data Portability (Article 20). You have the right to receive your personal data in a structured, commonly used, machine-readable format and to transmit that data to another controller.
- Right to Object (Article 21). You have the right to object to processing of your personal data based on legitimate interests or for direct marketing purposes.
- Right to Withdraw Consent. Where we rely on your consent for processing, you have the right to withdraw that consent at any time without affecting the lawfulness of processing that occurred before withdrawal.
- Right to Lodge a Complaint. You have the right to lodge a complaint with a supervisory authority in the EU member state of your habitual residence, place of work, or place of the alleged infringement.
Lawful Bases for Processing
We process personal data under the following lawful bases:
- Performance of a Contract. Processing necessary to provide the Service to you under our Terms of Service.
- Legitimate Interests. Processing necessary for our legitimate interests (e.g., fraud prevention, security, service improvement), provided those interests are not overridden by your rights.
- Legal Obligation. Processing necessary to comply with legal obligations (e.g., tax reporting, regulatory requirements).
- Consent. Processing based on your explicit consent (e.g., marketing communications, optional analytics).
International Data Transfers
Your data may be transferred to and processed in the United States. We ensure appropriate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission, to protect your data when transferred outside the EEA/UK.
Data Protection Officer
For GDPR-related inquiries, you may contact our Data Protection Officer at dpo@tradesmin.com.
How to Exercise Your GDPR Rights
To exercise any of your rights under the GDPR, please contact us at:
We will respond to your request within 30 days. If additional time is needed (up to an additional 60 days), we will inform you of the reason for the delay.
Data Deletion
We provide multiple ways for you to request deletion of your personal data:
Account Deletion
You may delete your account by contacting us at privacy@tradesmin.com. Upon receiving your request, we will:
- Verify your identity.
- Delete or anonymize your personal information within 30 days, except where retention is required by law (e.g., tax records, financial data).
- Send you a confirmation once the deletion process is complete.
Third-Party Login Data Deletion
If you signed up or logged in to Tradesmin using a third-party service (such as Facebook, Google, or Twitter/X), you can request deletion of the data we received from that provider. We support automated data deletion callbacks from these platforms:
- Facebook / Meta. When you remove Tradesmin from your Facebook apps, Meta sends us a data deletion request automatically. We process the deletion and provide you with a confirmation code and a status page URL where you can track the progress of your deletion.
- Other Providers. For Google and Twitter/X, you may request deletion by contacting us at privacy@tradesmin.com or by revoking access through the provider's account settings.
What We Delete
When we process a data deletion request, we remove the following associated with the requesting third-party account:
- OAuth provider link and provider-specific identifiers.
- If no other login methods remain (e.g., email/password, other OAuth providers), we also anonymize the user's personally identifiable information (name, avatar).
What We May Retain
Certain data may be retained even after a deletion request, where required or permitted by law:
- Records required for tax, legal, or regulatory compliance.
- Aggregated, anonymized data that can no longer be linked to you.
- Data necessary to detect fraud, enforce our terms, or protect our legal rights.
Deletion Status
If you submitted a deletion request through a third-party platform (such as Facebook), you can check the status of your request on our deletion status page using the confirmation code provided at the time of your request.
Data Retention
We retain your personal data only as long as necessary:
- Active accounts: Data is retained for the duration of your subscription.
- After cancellation: We retain your data for 30 days to allow for export and reactivation. After this period, data is permanently deleted.
- Legal obligations: Certain data may be retained longer to comply with tax, legal, or regulatory requirements.
- Anonymized data: Aggregated and anonymized data may be retained indefinitely for analytics and product improvement.
Contact Us
If you have questions about this Data Policy, wish to exercise your privacy rights, or need to submit a data deletion request, please contact us:
Tradesmin Inc.
Privacy: privacy@tradesmin.com
Data Protection Officer: dpo@tradesmin.com
Website: tradesmin.com