Privacy Policy

Last updated: May 21, 2026

Introduction

TradeWorks AI Inc. ("we," "us," "our") operates tradeworksai.com. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website or use our services.

Information We Collect

  • Personal information: name, email address, phone number, business name, and industry submitted via our contact form
  • Automatically collected information: IP address, browser type, device information, pages visited, time spent on pages, and referring URL
  • Cookies: Google Analytics 4 (GA4), Google Tag Manager (GTM), and session data
  • Third-party data: Google Business Profile interactions and social media engagement
  • Call data: call recordings and transcripts. In accordance with Florida law, we operate under two-party consent—all parties are notified that calls may be recorded

How We Use Your Information

  • Respond to inquiries and service requests
  • Send automated response emails to confirm receipt of your submission
  • Manage contacts and leads through our CRM (Zoho)
  • Improve our website, services, and user experience
  • Send marketing communications with your consent, in compliance with CAN-SPAM
  • Comply with legal obligations and enforce our terms

Cookies and Tracking Technologies

  • Google Analytics 4 (GA4): anonymized website analytics to understand traffic and usage patterns
  • Google Tag Manager (GTM): manages tracking scripts and event tags
  • Essential cookies: session management and CSRF protection
  • We do not use third-party advertising cookies
  • A cookie consent banner is displayed on your first visit, allowing you to manage your preferences

Third-Party Services

We use the following third-party services to operate our business:

  • Zoho CRM for contact and lead management
  • Google Workspace for business communications
  • Google Cloud Platform (GCP) for website hosting
  • Cloudflare for DNS management and CDN
  • AI agent platform providers for service delivery

We do not sell, trade, or rent your personal information to third parties.

Google User Data and API Access

When you connect a Google account to TradeWorks AI — for example, to view Google Analytics reports inside your dashboard or to enable AI scheduling through Google Calendar — we access specific data from your Google account through Google APIs. We want to be transparent about what we access, how we use it, and how we protect it.

Google API services we access

  • Google Analytics Data API: to read website analytics reports (sessions, users, traffic sources, key events) from Google Analytics 4 properties you choose to connect, so we can display them inside your TradeWorks AI dashboard.
  • Google Analytics Admin API: to list the GA4 properties you have access to so you can choose which one to connect.
  • Google Calendar API: to read and create calendar events on calendars you connect, so AI agents can schedule appointments on your behalf.

How we use Google user data

We use data from Google APIs solely to provide the features you connect them for — displaying analytics reports, scheduling appointments, and other features you explicitly enable. We do not use Google user data to train AI models, build advertising profiles, or for any purpose beyond what is necessary to deliver the requested feature.

Limited Use compliance

TradeWorks AI's use and transfer of information received from Google APIs to any other app will adhere to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

  • We do not sell Google user data.
  • We do not use Google user data for serving advertisements, including retargeted, personalized, or interest-based advertising.
  • We do not allow humans to read Google user data, except (a) with your explicit consent for specific cases such as user support, (b) for security purposes such as investigating abuse, (c) to comply with applicable law, or (d) for internal operations on aggregated or anonymized data.
  • We do not transfer Google user data to third parties except as necessary to provide or improve the features you have connected, to comply with applicable law, or as part of a merger, acquisition, or sale of assets with your knowledge.

Storage and protection

OAuth refresh tokens are encrypted at rest using AES-256-GCM before being stored in our database (Google Cloud Firestore). The encryption key is held separately from the encrypted data and is not accessible to client-side code or third parties. Access tokens are short-lived (typically one hour) and are refreshed automatically in the background. Tokens are never exposed to your browser or to any third party.

Revoking access

You can disconnect any Google integration at any time from inside your TradeWorks AI dashboard. You can also revoke TradeWorks AI's access entirely from your Google Account at myaccount.google.com/permissions. Upon disconnection, we immediately delete the associated tokens and stored configuration from our database.

Data retention for Google API data

We do not store a persistent copy of the underlying Google data (analytics reports, calendar events) on our servers. Reports are fetched live from Google APIs each time you view your dashboard. Any cached data is retained for no more than 24 hours to improve performance and is automatically refreshed afterward.

Changes that affect Google user data

If we ever change how we use Google user data in a material way, we will notify connected users by email at least 30 days before the change takes effect.

Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this policy. If you would like to request deletion of your data, please contact us at [email protected].

Your Rights

  • Access: request a copy of the personal data we hold about you
  • Correction: request correction of inaccurate or incomplete data
  • Deletion: request deletion of your personal data
  • Opt-out: unsubscribe from marketing communications at any time
  • California residents (CCPA): you have the right to know what personal information is collected, request deletion, and opt out of the sale of personal information. We do not sell your personal data

Children's Privacy

Our website and services are not directed to individuals under the age of 18. We do not knowingly collect personal information from minors. If we become aware that we have collected data from a child under 18, we will take steps to delete that information promptly.

Call Recording Disclosure

In compliance with Florida's two-party consent law, all parties are notified before any call is recorded. Call recordings and transcripts are stored securely and accessed only by authorized personnel for quality assurance and service improvement purposes.

Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. Your continued use of our website after changes are posted constitutes your acceptance of the revised policy.

Contact Us

If you have questions about this Privacy Policy or your personal data, please contact us:

For privacy-related questions, contact: trevor@tradeworksai.com