Privacy & Cookie Policy

Last updated: August 2026

    TradeManager is a property maintenance management platform. This policy explains what personal data we collect, why we collect it, how it is stored, and your rights under the General Data Protection Regulation (GDPR).
  

1. Who we are

TradeManager is operated as a business management tool for property agencies. If you have questions about how your data is handled, please contact us at: privacy@trademanager.ie

2. What personal data we collect

Account data: your full name and email address, collected when you register.
Job and property records: property addresses, job descriptions, tenant contact names and phone numbers entered by managers.
Tradesperson data: names, WhatsApp numbers, base addresses and specialties of tradespeople registered by agency managers.
Invoice data: invoice files and amounts uploaded or processed through the platform.
Authentication session: a Firebase authentication token stored in your browser's local storage to keep you signed in.
Server logs: IP addresses and request metadata retained incidentally by our hosting infrastructure.

3. Legal basis for processing

Data	Legal basis
Account registration (name, email)	Contract performance — necessary to provide access to the service (Art. 6(1)(b))
Job, property and tradesperson records	Contract performance — core functionality of the platform (Art. 6(1)(b))
WhatsApp messaging to tradespeople	Legitimate interests of the agency — operational communication (Art. 6(1)(f))
Authentication session storage	Strictly necessary for the service to function — no consent required under ePrivacy Directive Art. 5(3)

4. Who we share data with

We use the following third-party processors. Each has a Data Processing Agreement in place with us or via their standard terms:

Google Firebase / Firestore — data storage, authentication, and file storage. Our Firestore database is hosted in the EU (eur3 multi-region); some other Google services may process data in the United States. Governed by Google's Data Processing Terms.
Google Cloud Run — application hosting, in the europe-west1 region.
Twilio — WhatsApp message delivery to tradespeople. Only phone numbers and message content are shared. Governed by Twilio's Privacy Policy.
Meta (WhatsApp) — WhatsApp is operated by Meta. Every message we send to or receive from a tradesperson is carried over WhatsApp, so its content, the sender and recipient phone numbers, and delivery information all pass through Meta's systems and are subject to Meta's own terms and retention practices as well as ours. In the EEA the service is provided by WhatsApp Ireland Ltd. See the WhatsApp Business Policy and the WhatsApp Privacy Policy (EEA).
Google Gemini AI — used by the AI assistant and automated agent to generate responses. Queries and relevant context are sent to this service.

We do not sell, rent, or share personal data with third parties for marketing purposes.

If you are a tradesperson: the messages you exchange with an agency through TradeManager are stored by us as a record of what was agreed on each job, and are visible to that agency and to TradeManager. They are also carried by WhatsApp, which is run by Meta, as described above. No other numbers or conversations of yours are affected. You can ask us to stop messaging you at any time — reply to any message to say so, or contact privacy@trademanager.ie.

5. International transfers of your data

Our own records are held in the EU: the Firestore database is in the eur3 multi-region and the application runs in europe-west1. Some of the processors listed above are established in the United States, or transfer data there, so personal data processed through TradeManager may be transferred outside the European Economic Area.

This is unavoidable for WhatsApp messaging in particular. WhatsApp is operated by Meta, and messages are carried over Meta's infrastructure regardless of where we store our own copy — so if you exchange WhatsApp messages with an agency through TradeManager, the content of those messages may be processed outside the EEA.

Where such transfers happen, they rely on the following safeguards under Chapter V GDPR:

Recipient	Transfer safeguard
Meta Platforms, Inc. / WhatsApp LLC	EU-U.S. Data Privacy Framework (adequacy decision, Art. 45)
Twilio Inc.	EU-U.S. Data Privacy Framework (adequacy decision, Art. 45)
Google LLC (Firebase, Cloud Run, Gemini)	EU-U.S. Data Privacy Framework (adequacy decision, Art. 45)

Where the Data Privacy Framework does not apply to a particular transfer, we rely on the European Commission's Standard Contractual Clauses as incorporated into each processor's data processing terms. You can verify a processor's current certification on the Data Privacy Framework List.

6. Cookies and local storage

    TradeManager does not use tracking cookies, advertising cookies, or analytics scripts. We do not use Google Analytics or any similar tool.
  

We store one item in your browser's local storage:

Name	Purpose	Duration	Type
Firebase auth token (localStorage)	Keeps you signed in to TradeManager between sessions	Until you sign out or the token expires (~1 hour, auto-refreshed)	Strictly necessary

Because this storage is strictly necessary for authentication, it does not require your prior consent. You can clear it at any time by signing out or clearing your browser's local storage.

7. Data retention

Account data: retained for as long as your account is active. Deleted within 30 days of an account deletion request.
Job and operational records: retained for the duration of the agency's active use of the platform, and for a reasonable period thereafter for business continuity.
Server logs: retained for up to 90 days by our hosting infrastructure.

8. Your rights under GDPR

If you are based in the EU or UK, you have the following rights:

Right of access — request a copy of the personal data we hold about you.
Right to rectification — request correction of inaccurate personal data.
Right to erasure — request deletion of your account and associated personal data. You can do this directly in the app via Settings → Delete Account, or by contacting us.
Right to data portability — request your data in a machine-readable format.
Right to restriction of processing — ask us to limit how we use your data in certain circumstances.
Right to object — object to processing based on legitimate interests.

To exercise any of these rights, contact us at privacy@trademanager.ie. We will respond within 30 days.

You also have the right to lodge a complaint with your national data protection authority (in Ireland: the Data Protection Commission).

9. Security

Data is stored in Google Firebase, which provides encryption at rest and in transit, role-based access controls, and infrastructure security. Access to your data is restricted to members of your agency.

10. Changes to this policy

We may update this policy from time to time. The "Last updated" date at the top of this page will reflect any changes. Continued use of the platform after a change constitutes acceptance of the updated policy.

11. Contact

For any privacy-related questions or data requests, please contact: privacy@trademanager.ie