Privacy Policy
Last updated: 11 March 2026
Who we are
TradeCraft is made by Alex James AI. This policy explains how we handle your data when you download and use TradeCraft.
What data we collect
| Data | Where it's stored | Why we collect it |
|---|---|---|
| Email address | Our server (Cloudflare D1) | To deliver your download and send update notifications |
| Trade type | Our server (Cloudflare D1) | To configure TradeCraft for your specific trade |
| Marketing preference | Our server (Cloudflare D1) | To respect your communication choices |
| Anonymous usage stats | Our server (Cloudflare D1) | To improve TradeCraft (which features are used, by which trade types) |
| IP address | In memory only (not stored) | Rate limiting to prevent abuse — not logged or retained |
| Skill version | Our server (Cloudflare D1) | To notify you of available updates |
What data we do NOT collect
Your business data is stored securely on our server. Quotes, invoices, customer details, and business profile data are stored in a Cloudflare D1 database, isolated by your unique account token. Your data is never shared with other users, never used for training, and never accessed by us for any purpose other than providing the TradeCraft service. You can delete all your data at any time by asking TradeCraft to “delete my account.”
Lawful basis (UK GDPR)
- Email (for download delivery + update notifications): Legitimate interest — we need your email to deliver the download you requested and to notify you when important updates are available.
- Email (for marketing): Consent — only if you tick the opt-in checkbox. Not pre-ticked. You can unsubscribe at any time.
- Trade type: Legitimate interest — provided by you at download to enable trade-specific tool configuration.
- Usage analytics: Legitimate interest — anonymised, no user ID attached. Used solely to improve the tool.
- IP address: Legitimate interest — used only for real-time rate limiting to prevent abuse. Not stored or logged.
- Skill version: Legitimate interest — recorded at download time to enable update notifications.
How long we keep your data
- Email and trade type: Until you request deletion, or 2 years after your last download (whichever comes first).
- Usage analytics: Retained indefinitely in anonymised form (no way to link back to you).
- After deletion: When you delete your account, all data is removed from our active database immediately. Encrypted backups maintained by our infrastructure provider (Cloudflare) may retain deleted data for up to 30 days before automatic expiry.
Your rights
Under UK GDPR, you have the right to:
- Access — request a copy of all data we hold about you
- Rectification — correct inaccurate data
- Erasure — request deletion of your data ("right to be forgotten")
- Portability — receive your data in a structured, machine-readable format
- Object — object to processing based on legitimate interest
- Withdraw consent — unsubscribe from marketing emails at any time
To exercise any of these rights, email privacy@alexjamesai.com. We will respond within 30 days.
Third-party services
- Cloudflare (Workers, D1 database, R2 storage) — hosts our server and stores download records. Data processed in the EU/UK. Cloudflare Privacy Policy.
- Resend (email delivery) — sends download confirmations and update notifications. Resend Privacy Policy.
Cookies
This website does not use cookies or tracking scripts. No analytics, no pixels, no third-party trackers.
Children
TradeCraft is designed for business use. We do not knowingly collect data from anyone under 16.
Changes to this policy
If we make material changes, we will update the date at the top and notify users via email (if opted in).
Contact
Alex James AI
Email: privacy@alexjamesai.com