Privacy Policy

Who we are

TradeServe™ is the AI office manager for tradespeople. We help UK gas engineers, plumbers, and electricians handle their admin — from the moment a job enquiry arrives to the moment they get paid. TradeServe™ is a trademark of Mavero Limited.

Privacy contact: privacy@tradeserve.io

What this policy covers

This policy explains what personal data we collect, why we collect it, how we use it, who we share it with, how long we keep it, and what rights you have. It applies to:

• Traders — tradespeople who use the TradeServe app to manage their business
• Customers — homeowners or end customers who interact with TradeServe through clarification links, quote pages, or other customer-facing features

What data we collect and why

Data we collect from traders

Data we collect from customers

Data we collect automatically

Gmail access — how it works

When a trader connects their Gmail account, we use a third-party service called Nylas to access their inbox via Google's OAuth. Here is exactly what happens:

• What we read: Only emails from lead platforms the trader has explicitly whitelisted (e.g. Checkatrade, Bark, MyBuilder). We read the sender address, subject line, job description, and postcode — the fields needed to create a job card.
• What we never access: Personal emails, financial correspondence, or any email from a sender not on the trader's whitelist. These emails are never read, processed, stored, or logged by TradeServe.
• We never send on autopilot: TradeServe will never send an email to a customer without the trader reviewing and explicitly confirming it first.
• How to disconnect: Traders can disconnect their Gmail account at any time from Settings → Connected Accounts. Job history is preserved. All Gmail access is revoked immediately.

TradeServe's use of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements.

AI processing

TradeServe™ uses AI to help handle your admin:

• Extracting structured information from job enquiries (job type, location, fault description)
• Analysing photos submitted by customers (e.g. identifying a boiler make or fault indicator)
• Generating professional quote descriptions based on your rate card
• Producing a plain-English job briefing so you know what you're walking into

The trader always decides. The AI produces recommendations and drafts. Nothing is sent to a customer without the trader reviewing and confirming it first.

Our AI provider does not use your data to train its models. All AI processing takes place within the EU and data is not retained by the provider beyond the request lifecycle.

Who we share data with

We share personal data only with the service providers needed to operate TradeServe™. We do not sell personal data. We do not share data with advertisers.

Our service providers fall into the following categories:

If you exercise your right of access, we will provide the full list of named processors handling your data as part of our response.

How long we keep data

When a trader deletes their account, we delete their personal data and all associated job cards, quotes, and customer data within 30 days. Anonymised, aggregated data (e.g. average response times across all traders) may be retained indefinitely for product improvement.

Your rights

Under UK GDPR, you have the right to:

• Access — request a copy of the personal data we hold about you
• Rectification — ask us to correct inaccurate or incomplete data
• Erasure — ask us to delete your data ("right to be forgotten")
• Restrict processing — ask us to limit how we use your data
• Data portability — receive your data in a machine-readable format
• Object — object to processing carried out under legitimate interest
• Withdraw consent — where we rely on consent (e.g. Gmail connection, analytics cookies), you can withdraw at any time without affecting the lawfulness of prior processing

To exercise any of these rights, email privacy@tradeserve.io. We will respond within 30 days.

If you are not satisfied with our response, you can complain to the Information Commissioner's Office (ICO): ico.org.uk · 0303 123 1113

Security

We protect your data with:

• Encryption in transit (HTTPS/TLS) and at rest (Google Cloud encryption)
• Multi-tenant data isolation — each trader's data is separated at the database level with security rules that prevent any cross-tenant access
• Encrypted credential storage — service credentials are never stored in application code or environment files
• No raw personal data in application logs — logs store job IDs and event types, not names or contact details
• Session cookies are HttpOnly, Secure, and SameSite=Strict

Cookies

TradeServe uses two types of cookies:

• Essential cookies — a single session cookie required to keep you logged in. This cookie is set when you sign in and expires after 5 days or on logout. You cannot opt out of this cookie while using the app.
• Analytics cookies (Google Analytics 4) — set only with your consent via the cookie banner. Used to understand how the site and app are used so we can improve them. You can withdraw consent at any time by clearing your cookies or declining via the cookie banner.

We do not use advertising cookies or tracking cookies that follow you across other websites.

Children

TradeServe is a business tool for tradespeople. We do not knowingly collect personal data from anyone under 18. If we discover we have done so, we will delete it promptly.

Changes to this policy

We may update this policy from time to time. If we make significant changes, we will notify traders via the app or by email. The "last updated" date at the top of this page always reflects the most recent version.