Privacy Policy

1. The short version

Trades Advisory is a one-person business run by Max Maschmeier in San Diego. We collect the information you give us when you check your score or contact us. We use it to generate your report, send you the report, follow up about your score, and run our business. We do not sell your personal data.

2. What we collect

When you use the health-score tool or any form on the site, we may collect:

• Business name
• City
• Email address
• Website URL (the one tied to your Google Business Profile)
• Public business data returned by the Google Places API (name, address, phone, rating, review count, photos, hours, business status)
• Automated audit results from your public website (page speed, presence of structured data, click-to-call links, and similar checks against your homepage and a small number of well-known paths like /robots.txt and /sitemap.xml)
• The IP address of the request, used for rate limiting and abuse prevention
• Standard server logs (timestamps, request method, user agent) generated by our hosting provider

We do not collect Social Security numbers, payment card numbers, government IDs, biometric data, or other categories of sensitive personal information.

3. How we use it

We use the information we collect to:

• Generate your health score and PDF report.
• Email you that report and answer any reply you send.
• Follow up about your score with relevant Trades Advisory services or educational content.
• Run our internal analytics so we can improve the score and the site.
• Detect and prevent abuse, fraud, and scraping.
• Comply with our legal obligations.

4. Who we share it with

We use a small set of third-party services to operate the site. We share the minimum data needed for them to function:

• Google Places API (Google LLC): we send your business name and city so Google can return public profile data. We do not send your email to Google.
• Resend (Resend Inc.): we send your email address, business name, and PDF report so Resend can deliver your report and any follow-up emails.
• Supabase (Supabase Inc.): we store the email, business name, overall score, and category scores from each score submission so we can follow up.
• Vercel (Vercel Inc.): hosts the site and the score API. Standard request logs pass through their infrastructure.

We do not sell your personal information. We do not share your email with marketing networks, data brokers, or any party not listed above. We may disclose information when required by law or to protect our legal rights.

5. Data retention

We retain the data you submit until you ask us to delete it or until it no longer serves a legitimate business purpose, whichever comes first. Backups and abuse-prevention records may persist for a short additional window before being purged.

6. Your rights

You can ask us to access, correct, export, or delete the data we hold about you at any time. Email max@tradesadvisory.com with the subject "Privacy request" and the email address you used. We will respond within a reasonable timeframe and at no cost.

You can also opt out of non-transactional email at any time by replying STOP or emailing the address above.

7. California residents (CCPA / CPRA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act and the California Privacy Rights Act, including:

• The right to know what personal information we collect and how we use it.
• The right to request a copy of your personal information.
• The right to request deletion of your personal information.
• The right to correct inaccurate personal information.
• The right not to be discriminated against for exercising these rights.
• The right to opt out of the sale or sharing of personal information. We do not sell personal information.

To exercise any of these rights, email max@tradesadvisory.com.

8. Cookies

The site uses the minimum cookies needed to function. We do not run third-party advertising cookies. If we add analytics in the future, we will use a privacy-respecting setup and update this policy.

9. Children

Trades Advisory is a B2B service for contractors. The site is not directed at children and we do not knowingly collect data from anyone under 16. If you believe a child has submitted information, email us and we will delete it.

10. Security

We use modern hosting, encryption in transit (HTTPS), and standard access controls. No system is perfectly secure. If we ever learn of a breach affecting your data, we will notify you as required by law.

11. Changes to this policy

We may update this policy from time to time. The Last updated date at the top of this page reflects the most recent change. Material changes will be flagged at the top of the page or sent by email when you have a relationship with us.

12. Contact

Privacy questions or requests? Email max@tradesadvisory.com.