Privacy Policy

This Privacy Policy describes how Trades OBD LLC ("TradesOBD," "we," "us," or "our") collects, uses, stores, protects, discloses, and handles information when you visit our website at tradesobd.io (the "Website") or engage our business development services (the "Services"). We are committed to protecting your privacy, being transparent about our data practices, and handling all information responsibly and in accordance with applicable law.

By using our Website or engaging our Services, you acknowledge that you have read and understood this Privacy Policy and consent to the practices described herein.

If you do not agree with this Privacy Policy, please do not use the Website or engage our Services.

1. Scope of This Policy

This Privacy Policy applies to:

• All visitors to tradesobd.io regardless of location.
• All individuals who submit a consultation request, complete an onboarding form, or otherwise provide information to TradesOBD.
• All clients and their authorized representatives who engage TradesOBD's Services.
• All personal data processed by TradesOBD in the course of delivering its Services on behalf of clients, including contact information for builders, GCs, developers, and other construction industry professionals reached during outreach activities.

This Policy does not apply to third-party websites, platforms, or services linked to or referenced on our Website. We encourage you to review the privacy policies of any third-party platforms you visit.

2. Information We Collect

2.1 Information You Provide Directly

When you interact with our Website, submit a consultation request, or engage our Services, we may collect:

• Identity and contact information: full name, company name, job title, email address, phone number, city and state.
• Consultation and booking form data: information submitted through our consultation scheduling form, including your trade, annual revenue range, current builder or GC relationships, website URL, and any notes or questions you choose to provide.
• Client onboarding data: detailed business information provided during the client onboarding process, including scope of work, service area, pricing approach, portfolio details, licensing and insurance information, existing relationships, capacity information, tone and representation preferences, LinkedIn credentials (Growth tier and above), and any other information necessary for TradesOBD to represent the client in the market.
• Payment information: billing details submitted through our payment processor, Stripe. TradesOBD does not store, access, or retain full payment card numbers, CVV codes, or bank account numbers on its own servers.
• Communications: any emails, messages, or other correspondence you send to us, including replies to our outreach and any feedback provided.

2.2 Information Collected Automatically

When you visit the Website, we may automatically collect:

• Device and browser information: browser type and version, operating system, device type (desktop/mobile/tablet).
• Usage and navigation data: pages viewed, time spent on each page, links clicked, scroll depth, referring URLs, and navigation paths through the Website.
• IP address and approximate geographic location derived from your IP address.
• Session data: timestamps of visits, session duration, and frequency of visits.
• Cookie and tracking data: as described in detail in Section 6 of this Policy.

2.3 Information Collected in the Course of Service Delivery

In delivering our Services on behalf of clients, TradesOBD's team members research, identify, and interact with construction industry professionals including builders, GCs, developers, estimators, purchasing agents, pre-construction managers, project managers, and other contacts. This process involves:

• Collecting publicly available professional information from LinkedIn, company websites, BuildingConnected, permit records, trade directories, and other professional databases.
• Recording interaction history, response data, relationship notes, and outreach logs in the TradesOBD CRM system.
• Accessing and operating client LinkedIn profiles, which involves processing connection data, message history, and profile information belonging to the client and their connections.

TradesOBD acts as a data processor for client data in the context of service delivery. Clients are the data controllers responsible for ensuring compliance with applicable privacy laws in their markets with respect to contacts reached on their behalf.

2.4 Information From Third Parties

We may receive information about you from:

• Calendly, when you book a consultation call through our scheduling link.
• LinkedIn, in the course of conducting outreach and account management on behalf of clients.
• BuildingConnected and similar construction industry platforms.
• Referral partners who recommend our Services.
• Publicly available professional databases and directories.

3. How We Use Your Information

We use the information we collect for the following purposes, relying on the legal bases noted:

• To provide, operate, manage, and improve our Services (contract performance / legitimate interest).
• To communicate with you about your consultation, onboarding, service account, billing, or any matter related to your engagement with TradesOBD (contract performance).
• To conduct market research, build prioritized target contact lists, and execute outreach campaigns on behalf of our clients (contract performance / legitimate interest).
• To operate client LinkedIn accounts, manage BuildingConnected profiles, and conduct outreach through designated platforms as part of the Services (contract performance).
• To generate bi-weekly pipeline reports, monthly analytics reports, lost bid debriefs, and other client deliverables (contract performance).
• To process payments, manage invoicing, and maintain financial records (contract performance / legal obligation).
• To send marketing communications about TradesOBD's services to prospective clients where we have a legitimate interest or where you have provided consent, with a clear opt-out mechanism provided in every communication (legitimate interest / consent).
• To analyze Website usage patterns and improve the Website experience (legitimate interest).
• To detect, investigate, and prevent fraud, security incidents, unauthorized access, and other harmful activities (legitimate interest / legal obligation).
• To comply with applicable legal obligations including tax law, data protection law, court orders, and regulatory requirements (legal obligation).
• To enforce our Terms and Conditions and any applicable Service Agreements (legitimate interest / contract performance).
• To train and improve our AI-assisted content generation tools using generalized patterns — never using specific client data to train tools used for other clients (legitimate interest).

We do not use your information for any purpose incompatible with the purposes described above without your prior consent.

4. Data Minimization

We collect only the personal information that is necessary and relevant to the purposes described in this Policy. We do not collect excessive data and we regularly review the data we hold to ensure it remains relevant and up to date. If you believe we hold information about you that is no longer necessary, you may contact us at tradesobd@gmail.com to request deletion.

5. How We Share Your Information

We do not sell, rent, trade, or otherwise transfer your personal information to third parties for their own commercial purposes. We may share information only in the following limited circumstances:

5.1 Service Providers and Processors

We share information with trusted third-party service providers who assist us in operating the Website and delivering Services. These providers include:

• Stripe (payment processing) — stripe.com/privacy
• Calendly (consultation scheduling) — calendly.com/privacy
• Google Workspace (email and business productivity) — workspace.google.com/privacy
• Lovable / Supabase (CRM hosting and database) — subject to their respective privacy policies
• LinkedIn (outreach and content platform) — linkedin.com/legal/privacy-policy
• BuildingConnected (construction industry platform) — autodesk.com/company/legal-notices-trademarks/privacy-statement
• Google Analytics (website analytics) — policies.google.com/privacy

All service providers are contractually required to protect your information, use it only as directed by TradesOBD, and comply with applicable data protection laws. We do not authorize any service provider to use your information for their own marketing or commercial purposes.

5.2 Within Client Engagements

TradesOBD team members access client account data, outreach records, and contact information to the extent necessary to perform their assigned service responsibilities. Access is granted on a need-to-know basis.

5.3 Legal Requirements

We may disclose your information if required to do so by applicable law, regulation, valid legal process (including subpoenas, court orders, or governmental requests), or if we believe in good faith that disclosure is necessary to: (a) protect TradesOBD's legal rights; (b) prevent fraud, abuse, or illegal activity; (c) protect the safety of any person; or (d) respond to emergency situations.

5.4 Business Transfers

In the event of a merger, acquisition, asset sale, corporate reorganization, or similar transaction, your information may be transferred to the successor entity. We will provide notice to affected clients and website users before such a transfer takes place and before your information becomes subject to a materially different privacy policy.

5.5 With Your Consent

We may share information with specific third parties if you have expressly consented to such sharing.

5.6 Aggregated or De-Identified Data

We may share aggregated, anonymized, or de-identified data that cannot reasonably be used to identify any individual, for purposes including industry research, service improvement, and marketing.

6. Cookies and Tracking Technologies

6.1 What We Use

Our Website uses cookies, pixel tags, web beacons, and similar tracking technologies to operate the Website, understand user behavior, and improve the user experience.

6.2 Categories of Cookies We Use

a) Strictly Necessary Cookies: Essential for the Website to function properly. These cannot be disabled without significantly impairing Website functionality. They do not collect personally identifiable information and are not subject to consent requirements.

b) Analytics Cookies: We use Google Analytics to understand how visitors interact with the Website. These cookies collect information such as pages visited, time on site, and traffic sources. Data is aggregated and anonymized. Google Analytics cookies typically last between 30 minutes (session cookie) and 2 years (_ga cookie). You can opt out of Google Analytics at: tools.google.com/dlpage/gaoptout.

c) Functional Cookies: Remember your preferences and settings (such as form fields) to improve your experience on return visits. These typically last for the duration of your session or up to 12 months.

d) Marketing and Remarketing Cookies: We may use tracking tools to serve relevant advertisements to visitors who have previously visited the Website. Currently our use of marketing cookies is limited. We will update this section if our practice changes. You can manage advertising preferences at your browser or device settings level.

6.3 Cookie Duration

Most cookies used on our Website expire within 30 days to 2 years depending on their purpose. Session cookies expire when you close your browser. We do not use tracking cookies that persist beyond 2 years.

6.4 Your Cookie Choices

You can control and manage cookies through your browser settings. Most browsers allow you to refuse all cookies, accept only certain types of cookies, or delete cookies that have already been set. Note that disabling certain cookies may affect Website functionality.

6.5 Do Not Track

As of the effective date of this Policy, our Website does not alter its data collection practices in response to "Do Not Track" browser signals. This is because there is no universally accepted standard for what websites should do in response to such signals. We will update this Policy if our practices change.

7. Data Security

7.1 We implement and maintain appropriate technical, administrative, and physical security measures designed to protect your personal information from unauthorized access, disclosure, alteration, destruction, or misuse. Our security measures include:

• Encrypted data transmission using HTTPS/TLS protocols for all data transferred to and from the Website.
• Access controls and role-based permissions limiting data access to authorized TradesOBD team members on a need-to-know basis.
• Secure password policies and multi-factor authentication requirements where applicable.
• Regular review of our data security practices and those of our third-party service providers.
• Secure storage of client credentials (such as LinkedIn login information) accessible only to authorized administrators.

7.2 No data transmission over the internet or method of electronic storage is completely secure. While we take reasonable and appropriate steps to protect your information, we cannot guarantee absolute security against all threats.

7.3 Data Breach Notification. In the event of a security breach that compromises your personal information, TradesOBD will notify affected individuals and, where required, applicable regulatory authorities in accordance with Arizona Revised Statutes Section 18-552 (Arizona's data breach notification law) and any other applicable state or federal notification requirements. Notice will be provided as promptly as reasonably possible, and in no event later than forty-five (45) days after discovery of the breach, or such shorter period as required by applicable law.

8. Data Retention

We retain personal information only as long as necessary to fulfill the purposes described in this Policy, to comply with legal obligations, and to resolve any disputes. Our general retention periods are:

• Active client account data: retained for the duration of the Service Agreement plus three (3) years following termination, to support potential legal claims and business continuity.
• Consultation and inquiry data: retained for two (2) years from the date of submission.
• Website analytics and cookie data: retained for thirteen (13) months on a rolling basis, consistent with Google Analytics default settings.
• Financial and billing records: retained for seven (7) years in compliance with standard accounting practices and Arizona tax record-keeping requirements.
• Legal correspondence and dispute-related records: retained for the period required by applicable law or until final resolution of the related matter, whichever is later.
• Outreach and CRM data collected on behalf of clients: retained and transferred to the client upon termination as described in the Terms and Conditions Section 5. After transfer and confirmation, TradesOBD deletes its retained copy within ninety (90) days.

Upon expiration of applicable retention periods, we securely delete or irreversibly anonymize your information.

9. Your Privacy Rights

Depending on your location and applicable law, you may have the following rights regarding your personal information. To exercise any of these rights, contact us at tradesobd@gmail.com with the subject line "Privacy Rights Request."

9.1 Right to Know / Access

You have the right to request confirmation of whether we process your personal information and to receive a copy of the personal information we hold about you, along with information about its sources, uses, and any third parties with whom it has been shared.

9.2 Right to Correction

You have the right to request correction of any inaccurate or incomplete personal information we hold about you.

9.3 Right to Deletion

You have the right to request deletion of your personal information, subject to exceptions where retention is required by law, necessary to complete a transaction, or otherwise permitted under applicable law.

9.4 Right to Restrict Processing

You have the right to request that we limit the processing of your personal information in certain circumstances, such as while we verify the accuracy of disputed information.

9.5 Right to Data Portability

Where technically feasible, you have the right to receive personal information you have provided to us in a structured, commonly used, machine-readable format.

9.6 Right to Object

You have the right to object to the processing of your personal information where we rely on legitimate interest as the legal basis, including for direct marketing purposes.

9.7 Right to Opt Out of Marketing Communications

You may opt out of receiving marketing communications from TradesOBD at any time by: (a) clicking the "unsubscribe" or "opt out" link included in every marketing email we send; or (b) contacting us directly at tradesobd@gmail.com with the subject line "Unsubscribe." We will process your request within ten (10) business days. Opting out of marketing communications does not affect our ability to send you transactional communications related to an active Service Agreement.

9.8 California Residents — CCPA/CPRA Rights

If you are a California resident, you have additional rights under the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA), including:

• Right to know what personal information is collected, used, shared, or sold.
• Right to delete personal information we hold about you.
• Right to correct inaccurate personal information.
• Right to opt out of the sale or sharing of personal information. We do not sell personal information.
• Right to limit the use of sensitive personal information.
• Right to non-discrimination for exercising your privacy rights.

California residents may submit a verifiable consumer request by contacting us at tradesobd@gmail.com with the subject line "California Privacy Request." We will respond within forty-five (45) calendar days, with the possibility of a single forty-five (45) day extension where necessary.

9.9 Verification

For the protection of your information, we may need to verify your identity before processing any privacy rights request. We will not fulfill requests where we cannot reasonably verify the requestor's identity.

9.10 Response Timeframe

We will respond to all privacy rights requests within thirty (30) calendar days unless a longer period is expressly permitted by applicable law.

10. CAN-SPAM Act Compliance

TradesOBD complies with the CAN-SPAM Act of 2003 and all applicable federal and state email marketing laws. With respect to commercial emails sent by TradesOBD:

• We will never use false or misleading header information.
• We will never use deceptive subject lines.
• Every commercial email we send will include a clear and conspicuous way to opt out of future emails.
• We will honor all opt-out requests within ten (10) business days.
• We will include our valid physical mailing address in every commercial email.
• We will monitor third-party email marketing conducted on our behalf for compliance.

With respect to outreach emails sent on behalf of clients by TradesOBD's team members acting as a client's Business Development Manager: such emails are professional B2B communications conducted in compliance with applicable commercial email laws. Recipient contacts may opt out of further contact by responding to the designated BD email address, and TradesOBD honors all such requests promptly and logs them in the client's CRM.

11. Automated Decision-Making and Profiling

TradesOBD does not make any fully automated decisions about individuals that produce legal or similarly significant effects without human oversight. Our use of AI tools, including LinkedIn content generation and CRM intelligence features, is always supervised by human team members who review and approve outputs before they are used or delivered to clients. No automated profiling of individuals occurs that could result in legal, financial, or similarly consequential outcomes.

12. Payment Information

All payment processing is handled by Stripe, Inc., a third-party payment processor certified to PCI-DSS Level 1 standards (the highest level of payment security certification). TradesOBD does not store, access, or transmit full credit card numbers, CVV codes, or bank account numbers on its own servers or systems. All payment data is encrypted and stored by Stripe in accordance with PCI-DSS requirements. For information about how Stripe handles your payment data, please review Stripe's Privacy Policy at stripe.com/privacy.

13. LinkedIn Data and Platform Compliance

In the course of providing Services to applicable clients, TradesOBD accesses and operates client LinkedIn accounts under the role of Business Development Manager. This involves:

• Sending connection requests and direct messages to construction industry professionals.
• Posting content on behalf of the client.
• Reviewing and responding to messages and connection requests.

All LinkedIn activities conducted by TradesOBD are performed in compliance with LinkedIn's current User Agreement and Privacy Policy. TradesOBD does not scrape, extract, sell, or misuse any data obtained from LinkedIn. Contacts reached through LinkedIn outreach on behalf of clients are subject to LinkedIn's own privacy framework.

LinkedIn periodically updates its policies and TradesOBD monitors these updates to ensure continued compliance.

14. Children's Privacy

Our Website and Services are intended solely for use by business owners, operators, and professionals in the construction and trades industry, all of whom are expected to be adults aged 18 or older. We do not knowingly collect, solicit, or process personal information from children under the age of 18. If we become aware that we have inadvertently collected personal information from a minor under 18, we will take immediate steps to delete such information from our systems. If you believe we may have collected information from a child under 18, please contact us immediately at tradesobd@gmail.com.

15. International Visitors

The TradesOBD website and services are operated from the United States and are primarily intended for users located in the United States. If you are accessing the Website from outside the United States, please be aware that your information may be transferred to, stored in, and processed in the United States, where data protection laws may differ from those in your home country. By using the Website or engaging our Services from outside the United States, you consent to such transfer, storage, and processing.

If you are located in the European Union, European Economic Area, or United Kingdom, and believe that our processing of your personal data is governed by the GDPR or UK GDPR, please contact us at tradesobd@gmail.com to discuss your rights and our obligations under those frameworks.

16. Data Processor Obligations

Where TradesOBD processes personal data on behalf of clients in the course of delivering Services (such as managing outreach contact lists, operating LinkedIn accounts, and maintaining CRM records), TradesOBD acts as a data processor under applicable privacy law and the client acts as the data controller. In such capacity:

• TradesOBD processes personal data only in accordance with the client's documented instructions and as described in the applicable Service Agreement.
• TradesOBD implements appropriate technical and organizational measures to protect the personal data it processes.
• TradesOBD does not engage sub-processors for client data without disclosure to the client.
• TradesOBD assists clients in responding to data subject rights requests that pertain to data processed on the client's behalf.
• Clients are responsible for ensuring they have a lawful basis for the collection and processing of contact data for the targets they instruct TradesOBD to reach out to on their behalf.

17. Changes to This Privacy Policy

We may update, modify, or revise this Privacy Policy from time to time to reflect changes in our data practices, technology, legal or regulatory requirements, or business operations. When we make changes, we will update the "Last Updated" date at the top of this Policy and post the revised version on the Website at tradesobd.io/privacy.

For material changes that affect how we use or share information about active clients, we will provide direct notice via email to the address on file at least thirty (30) days before the changes take effect.

Your continued use of the Website or Services after any changes to this Policy constitutes your acceptance of the updated terms. If you do not agree with a material change, you may terminate your Service Agreement as provided in the Terms and Conditions.

18. Contact Us — Privacy Inquiries

For all privacy-related questions, concerns, requests, or to exercise your privacy rights, please contact us:

Trades OBD LLC
Phoenix, Arizona
Website: tradesobd.io
Email: tradesobd@gmail.com
Subject line for privacy requests: "Privacy Request" or "Privacy Rights Request"

We are committed to responding to all privacy inquiries within thirty (30) calendar days.

Note: Once a dedicated company email is established at the tradesobd.io domain, all privacy contact information will be updated accordingly, and active clients will be notified.

© 2026 Trades OBD LLC. All rights reserved. — tradesobd.io