Privacy Policy

Last updated: May 28, 2026

Information We Collect

We collect information you provide directly: account registration data (name, email, company), claim-related data (photos, documents, estimates), communications within the platform, and usage analytics.

How We Use Your Information

To provide and improve TradeVision services, process claims workflows, send notifications, generate analytics, and communicate with you about your account.

Data Security

We use encryption at rest and in transit, blockchain anchoring for evidence integrity, role-based access controls, and regular security audits. Your data is stored on infrastructure hosted in the United States.

Data Sharing

We do not sell your personal data. We share data only with your consent or as required by law. Within the platform, data is shared only with users who have explicit access to the relevant claim or project.

Your Rights

You may access, correct, or delete your personal data at any time by contacting us at [email protected]. You may also export your data in standard formats.

Contact

Privacy questions: [email protected]

AI Use and Disclosure (AI Compliance Standard v1.0)

TradeVision uses artificial intelligence ("AI") to power several features, including: (a) AI-assisted estimate generation from photos, documents, and field notes; (b) AI-assisted document analysis (contracts, scope sheets, supplements); (c) AI-driven suggestions inside the CRM (next-best-action, follow-up timing); (d) AI chat assistant that can answer questions about your claims, contacts, and pipeline.

AI Models and Subprocessors

We use the following AI model providers, each acting as a subprocessor of your data:

Each provider is configured to opt out of training and zero data retention via contractual terms and API headers. A current list of subprocessors is always available at trade-vision.io/legal/subprocessors.

What We Send to AI Models

When you use an AI feature, TradeVision sends the minimum data necessary to complete your request. This may include: claim notes you wrote, document text you uploaded, contact names and roles, project metadata, and your prompt. We do not send your password, payment details, or other users' private data. You can review the exact data sent in Settings → AI Activity.

AI Output Labeling

Every response generated by AI in TradeVision is labeled with an "AI-generated" tag. We do not represent AI outputs as human-generated, and we encourage you to review all AI suggestions before acting on them. AI outputs may be inaccurate, incomplete, or biased. You are responsible for any decisions you make based on AI outputs.

Your AI Controls and Consent

You can disable AI features at any time in Settings → Privacy → AI Features. When AI features are disabled, all non-AI features of TradeVision continue to work normally. Your consent to our AI disclosure was recorded at signup with a timestamp, IP address, and policy version. You can view your consent history in Settings → Privacy → Consent Log.

AI Activity Logging (Audit Trail)

For compliance and security, we log every AI call with: timestamp, user ID, tenant ID, model used, token counts, cost, latency, and a SHA-256 hash of the prompt and response. We do not store your raw prompts or responses in plain text. Logs are retained for 7 years per EU AI Act and contractual obligations, and are accessible to you in Settings → Privacy → AI Activity.

Regulatory Classification

TradeVision is classified as a limited-risk AI system under the EU AI Act. It is not a high-risk system under the EU AI Act, Colorado AI Act (SB 24-205), California AB 2013, or NYC Local Law 144, because we do not make automated decisions in employment, credit, education, healthcare, housing, insurance, legal services, or law enforcement. We do not use biometric identification, emotion recognition, or social scoring. We are not subject to GPAI obligations because we do not train or fine-tune general-purpose AI models; we only consume them via API.

International Data Transfers

If you are in the EU, UK, or Switzerland, AI subprocessors may process your data in the United States. We rely on Standard Contractual Clauses (SCCs) and equivalent transfer mechanisms for any cross-border data flow.

Children's Privacy

TradeVision is a B2B service for licensed contractors and adjusters. It is not intended for children under 18. We do not knowingly collect data from children.

Changes to This Policy

We will notify you by email and in-product notice at least 30 days before material changes take effect. Your continued use after the effective date constitutes acceptance; you can object by disabling AI features or closing your account.