Privacy notice
TradeFlow.studio · updated 26 September 2026
Who is responsible
TradeFlow.studio is operated under the name TradeFlow and is responsible for account, security, website and subscription information. The operator’s full legal identity is being confirmed. Trade businesses control the customer and job information they enter; we process it to provide the service. For privacy requests, email help@tradeflow.studio. A postal contact address has not yet been published.
Information we use
We use your name, verified email, business details, the enquiries and records you add, and security records such as sign-up and session times, IP address and browser information. The Pro guided assistant uses the answers you enter to create an editable draft during your session; it does not store a conversation. Audit IP and browser fields are encrypted; keyed hashes help us investigate repeated activity. We check subscription status with Clerk to control Pro access and do not store card numbers.
Why we use it
We use account and workspace information to provide the service (contract). We use subscription information to manage paid Pro access (contract). We use security information to protect accounts and investigate misuse (legitimate interests), and retain information when the law requires it (legal obligation). Each trade business is responsible for its own lawful basis for customer records entered into TradeFlow.
Service providers
Clerk provides sign-in, account management and subscriptions; its payment gateway uses Stripe to process payments. Render hosts the application in Frankfurt, Germany, and Neon stores PostgreSQL records in its Frankfurt region. When a signed-in workspace starts, the browser sends a connection check to Appwrite’s Frankfurt endpoint; we do not send customer or job records to Appwrite. The Pro guided assistant uses built-in scripts on TradeFlow’s server, with no external AI provider. These providers may process account, device or service information outside the UK. We are reviewing the applicable transfer safeguards and provider agreements.
Retention and security
Account and workspace records remain while the account is active and until a valid deletion request is completed, subject to legal retention duties. The Pro guided assistant does not save drafts or answers to the workspace database. A daily task removes security audit events after 90 days. Audit IP addresses and browser information are encrypted with AES-256-GCM; our database host encrypts storage at rest.
Your rights
You may request access, correction, deletion, restriction or portability of eligible information, or object to processing based on legitimate interests. Email help@tradeflow.studio. We may need to verify your identity. TradeFlow does not use solely automated decisions that have legal or similarly significant effects. You can also complain to the UK Information Commissioner’s Office.
Cookies
See our cookie notice. We use essential sign-in storage and a theme preference. We do not currently use analytics or advertising cookies.