Legal

Privacy Policy

Effective: September 5, 2026  ·  Last updated: September 5, 2026

Applies to: the TradeDesk Pro iPhone app, the TradeDesk web app, and tradedeskpro.app.

1. Who we are

TradeDesk Pro ("TradeDesk," "we," "us") is business-management software for trade contractors. This policy explains what we collect, why we collect it, who we share it with, how long we keep it, and how you get rid of it.

Operator: TradeDesk, 2015 SW Randolph Avenue, Topeka, Kansas 66604.
Privacy contact: [email protected]
Support: [email protected]

2. Two kinds of data, two different roles

This distinction matters, so we are stating it up front.

Your account data. Information about you and your business. We are the controller of this data and this policy governs it directly.

Data you enter about other people. Your customers, your crew, your subcontractors. You decide what to collect and why; we only process it to run the app for you. You are the controller and we act as your processor. If one of your customers or employees asks us to delete their information, we will direct them to you and support you in handling it.

3. What we collect and why

Account and identity

Your email address, business name, and business contact details. Passwords are handled by our authentication provider and stored only as a salted hash, so we never see or store your actual password and cannot recover it for you. Why: to create and secure your account, to sync your data between your phone and the web app, and to contact you about your account.

Your business records

Clients, leads, job addresses, estimates, proposals, change orders, invoices, payments, expenses, mileage, time entries, equipment, crew records, and the notes and photos you attach. Why: this is the product. It is the record of your business, and we store it so you can use it, sync it, and export it.

Property information from an address

When you enter a job address, we may look up public property record details such as year built, square footage, and bedroom and bathroom counts. Why: to pre-fill your estimate, and specifically to detect pre-1978 homes so the app can flag EPA Renovation, Repair and Painting (RRP) lead-paint requirements before work starts.

Signatures and signed agreements

Drawn or typed signatures, signer name, and the date, time and document version signed. Why: to produce a valid electronic signature record under the federal E-SIGN Act and state UETA law, and to preserve the paper trail you may need to enforce a contract or a mechanic's lien.

Location, including background location

Device location, trip start and end points, routes travelled, distance, and arrival and departure times at job sites. On iPhone we also read the motion coprocessor to detect when a drive began and ended. Why: to log deductible business mileage automatically, to record time on site for job costing and payroll, and to show the day's route. Reading motion lets us timestamp drives without running GPS all day, which uses far less battery and collects less data.

If you are crew, here is exactly what your employer sees. Your position while you are clocked in during the working hours the business has set, including the route of your work drives; when you arrived at a job site and when you left, and the hours that produces; your phone's battery level and whether location permission is on; and the jobs, notes, photos and time entries you record in the app. What your employer does not get: your position outside the set working hours, your position when you are not clocked in, anything from your personal apps, your messages, your contacts, or your microphone. Tracking on a personal phone takes two separate yeses: the business has to grant it for your account, and you have to accept it on your own phone. If you decline, tracking stays off on that device. You can switch it off inside TradeDesk at any time without deleting anything, or revoke it in iOS Settings, Privacy and Security, Location Services.

How we limit it: tracking does not start until you enable it and grant permission; it runs only inside the business-hours window you configure; you can revoke it at any time in the app or in iOS Settings; and location breadcrumbs older than 90 days are pruned automatically. We do not track you outside your configured hours, and we do not sell or share location data with advertisers or data brokers.

Crew location, if you use it

If you add employees, their devices can report location for dispatch, time on site, and mileage. Why: so a job's labor hours and drive time are recorded accurately without paper timesheets.

This requires the employee's consent, captured in the employment agreement in the app, and is limited to the configured business-hours window. An employee may revoke consent at any time; if they do, no coordinates are collected and the owner cannot see their location. As the employer, you are responsible for complying with the employee-monitoring and notice laws of your state.

Camera, LiDAR and photos

Photos you take or choose, and depth scans of rooms on supported devices. Why: to attach job-site photos and receipt images to your records, to set your business logo, and to scan rooms into rough floor plans and measurements for estimating. We access your photo library only for the items you pick.

Microphone

Speech you dictate while a voice-note field is open. Why: to turn what you say into job notes so you can record details without stopping work. We do not listen in the background and we do not record ambient audio.

Face ID and passcode

We ask iOS to verify you; we never receive or store your biometric data. Why: to lock the app to the signing screen while a client is holding your phone, so the rest of your business stays private.

Receipt scanning with AI

When you scan a receipt, the image is sent to Anthropic's Claude API through our server, which returns the vendor, total, date, and a suggested IRS Schedule C expense category. Why: so logging an expense is one photo instead of typing four fields. The image is sent only for that extraction and only when you scan; we do not send your receipts anywhere else. Do not scan documents containing information you do not want processed this way.

Notifications

A device push token, if you allow notifications. Why: to alert you about signed proposals, payments received, overdue invoices, lien deadlines, and live job status. You can turn notifications off at any time in iOS Settings.

Diagnostics and usage analytics

Two separate streams:

• Error reports: error message, stack trace, screen, app version, and browser or device user-agent string, linked to your account ID. Why: so we can find and fix crashes, including the one that hit your account.
• Feature-usage counts: which features were used, how many times, in a session, with the app version. These are stored against a one-way anonymized code derived from your account ID, not the ID itself, and are aggregated as counts. Why: to see which parts of the app are actually used and which are broken or ignored.

We do not use third-party advertising SDKs, and we do not track you across other companies' apps or websites.

Aggregated benchmarks that help every contractor

We combine information across accounts to produce aggregated, de-identified statistics: for example, typical labor hours for a scope of work, regional material and pricing ranges, and how long a stage of a job usually takes. Why: so the app can show you what the trade is actually doing when you price a job or schedule a crew, instead of leaving you to guess, and so we can see which parts of the product need work.

Before anything enters that pool it is stripped of identifiers. No names, no addresses, no phone numbers, no client details, no account IDs. It is combined with enough other accounts that it cannot reasonably be traced back to you, your business, or your customers. We may publish or share these aggregated statistics, including with third parties.

To be exact about the line we will not cross: we do not sell your personal information, your client list, your contracts, or your individual business records. If you would rather your records not contribute to benchmarks at all, email [email protected] and we will exclude your account. You keep access to the benchmarks either way.

Payment information

When your customer pays you through the app, card details are collected and processed by Stripe. We never receive or store full card numbers. We store the payment amount, status, timestamp, and Stripe's reference IDs so your invoice and books stay accurate. To accept payments you connect your own Stripe account, and Stripe pays you directly. Stripe's handling of that data is governed by Stripe's own privacy policy and terms.

If you subscribe through the App Store, Apple processes your subscription payment and we do not receive your card details.

4. Who we share data with

We share only what a service needs to do its job, and only with the providers below. We do not sell personal information, and we do not share it for cross-context behavioral advertising. The only information we may share more broadly is the aggregated, de-identified statistics described above, which cannot be traced back to you.

We may also disclose information if we are legally required to, or to protect our rights, safety, or the integrity of the service. If TradeDesk is ever acquired or merged, your data may transfer as part of that transaction, and this policy will continue to apply until you are notified otherwise.

5. Where your data lives

TradeDesk is offline-first. Your working data is stored on your device so you can build an estimate or capture a signature with no signal, then syncs to our servers when you reconnect. Our servers and the providers above are located in the United States. If you use TradeDesk from outside the US, you are sending your data to the US for processing.

6. How long we keep it

• Business records: kept while your account is open, because tax and lien records need to survive for years. You control deletion.
• Location breadcrumbs: pruned automatically after 90 days. The mileage and time totals derived from them are kept as part of your books.
• Receipt images: the app offers to delete images older than seven years while keeping the expense records, matching IRS record-keeping expectations.
• Error reports and usage counts: kept for a limited period for debugging and product decisions, then deleted or retained only in aggregate.
• After account deletion: removed from our live systems promptly and from routine backups within 30 days, except where we must keep something to comply with law or resolve a dispute.

7. Deleting your account and your data

You can delete your account and its data from inside the app: open Settings, Danger zone, Delete account and confirm. No email, no phone call, no waiting on us. Deletion is permanent, so export anything you need first. You can also email [email protected] and we will handle it.

Deleting your TradeDesk account does not cancel an App Store subscription. Cancel that in your Apple ID subscription settings.

8. Your rights

Depending on where you live, you may have the right to access, correct, delete, or receive a copy of your personal information, to opt out of its sale or sharing, and not to be discriminated against for exercising those rights. We do not sell or share personal information for advertising, so there is nothing to opt out of, but the rest are available to you.

Exercise them in-app, or email [email protected]. We will respond within the time your law requires and may need to verify your identity first. If you are in the EEA or UK, our lawful bases are performance of our contract with you, your consent for device permissions such as location and microphone, and our legitimate interests in keeping the app secure and working.

9. Security

Traffic is encrypted in transit with TLS, and data at rest is encrypted by our hosting providers. Access is scoped so an account reaches only its own records, our analytics and error tables are closed to client access, and API keys for payments, email and AI are held server-side and never shipped in the app. No system is perfectly secure, so use a strong, unique password, keep your device passcode on, and tell us immediately at [email protected] if you think your account has been accessed.

10. Children

TradeDesk is a business tool for adults and is not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us information, email [email protected] and we will delete it.

11. Changes to this policy

If we change this policy we will update the date at the top, and for material changes we will notify you in the app or by email before they take effect. Continuing to use TradeDesk after that means you accept the updated policy.

12. Contact us

Privacy questions: [email protected]
Support: [email protected]
Mail: TradeDesk, 2015 SW Randolph Avenue, Topeka, Kansas 66604

See also our Terms of Service.