Privacy policy

Who we are

CONSTRUCTOR LABS LTD operates TradeSpring, and is the controller of the personal information described here.

• Company number: 08389656
• Registered office: 60 The Drive, Hove, England, BN3 3PD
• Contact for privacy questions and requests: privacy@tradespring.app

For the content of a customer's own website, the customer is the controller and we are their processor. The terms say how.

What we process, and why

Everything below is processed to build, host and update the owner's own website, and to post to their own Instagram the posts they approve.

• From Instagram, when the owner connects it: the profile and the media they have posted.
• From Facebook, when the owner connects a Page: the Page's photos and details.
• From Google, when the owner connects their Business Profile: the profile's data.
• What the owner gives us directly: photos, including the location stored in a photo when it was taken, their email address, how they sign in, and their business name, phone number and other details.
• Before an account is created: the business and accounts picked on our onboarding page, and the accounts connected there, kept under a sign-in that has no name or email address.

We only use an account the owner has connected, and only what they have allowed. We use it to make their site and the posts they approve, and for nothing else.

We can draft posts for the owner's Instagram: photos of their work and a caption. The owner can review, edit and approve each one, and nothing is posted until they approve it.

AI processing

We use AI services on this information, for four things:

• scoring the quality of photos, so the best are used on the site;
• drafting the text of the owner's site, which the owner can change;
• drafting Instagram posts, which the owner reviews, edits and approves;
• editing the owner's photos for their site: lighting, angles and clean-up.

Photo scoring is done by Google's AI models and drafting by Anthropic's, both reached through Cloudflare's AI Gateway. Photo editing is done by Google's Gemini models. We send a provider the photo or text being worked on and the instruction for the task.

None of this information is used to train AI models. An edited copy of a photo is stored beside the original and is deleted when the original is.

Who else receives it

• Cloudflare hosts and stores the service and the websites we build, and carries our requests to the AI services above.
• Google and Anthropic provide the AI models above; Google's also edit photos.
• Resend sends our emails, such as sign-in links.
• Sentry receives error reports. We keep photos, names, contact details and sign-in tokens out of them.
• Meta and Google are where the owner's connected accounts live; we exchange data with them only to use what the owner has connected.

We do not sell personal information.

Our lawful bases

• Contract: to build and run the website the owner has asked us for.
• Legitimate interests: to keep the service secure and to find and fix faults.
• Legal obligation: where the law requires us to keep or give out a record.

How long we keep it

We keep it while the account is open. Disconnecting an account deletes the information we took from it. Deleting the account deletes the website, photos, domain and connections, including edited copies of photos. How to do either is on the data deletion page.

What is picked and connected on our onboarding page before an account is created is kept for 30 days. If no account is created in that time, we delete it, with the information we took from the accounts connected there.

When an account is closed, we delete its data within 30 days, and it is gone from our backups within 90 days. We keep longer only what the law requires us to.

Your rights

Under UK GDPR you can ask us for a copy of your information, to correct it, to delete it, to restrict or stop how we use it, and to receive it in a form you can move. Contact us at privacy@tradespring.app. We reply within one month.

If you are not happy with how we have handled your information, you can complain to the Information Commissioner's Office at ico.org.uk.

This website

This website does not set cookies and has no analytics. The TradeSpring app keeps you signed in with a session token stored on your phone.