Security

How we protect your customers’ details.

You are trusting TradePath HQ with your customer list, your crew and your money. Here is exactly how it is protected.

Your data is walled off from every other business

Every workspace’s records are separated inside the database itself with row-level security, not only in application code. Automated checks in our development workflow flag code that tries to reach workspace data outside that boundary.

People see what their role allows

Owners and admins, dispatchers, workers and read-only users get different levels of access. Sensitive actions, like issuing a refund, are limited to the people you choose.

Card numbers never touch our servers

Cards are entered on pages hosted by Stripe. Customer payments go straight to your own Stripe account, and we store only the card brand, last four digits and expiry date, plus Stripe’s reference for a saved card.

Files are private

Photos and documents are kept in private storage and are served only to signed-in members of your workspace.

Customer links show one thing

A link sent to a customer opens only the quote, invoice or visit it was made for. It asks search engines not to index it, and voiding an invoice withdraws its link.

Changes leave a record

Corrections to hours, payments and refunds are recorded with who made them and when, so nothing important changes silently.

Encrypted in transit and at rest

All traffic to TradePath HQ is encrypted with HTTPS, and our hosting and database providers encrypt stored data.

Sign-in by a dedicated provider

Accounts and sign-in are handled by Clerk, a specialist identity provider, so your password is never stored by TradePath HQ.

Who we rely on

TradePath HQ runs on established providers, each processing data under its own data-processing terms, limited to providing its service. Full detail is on the subprocessors page.

  • Vercel

    Application hosting and private file storage

  • Supabase

    Database hosting

  • Clerk

    Sign-in, accounts and organizations

  • Stripe

    Subscription billing; card payments to shops that connect their own Stripe account

  • Postmark

    Sending email: appointment emails, quotes, invoices, reminders

  • Mapbox

    Address lookup and maps

  • Google Analytics

    Visitor analytics on the public website only, never inside the app

Found a problem?

If you believe you have found a security issue, please email admin@tradepathhq.com. We will look into it promptly.

Read our Privacy Policy and Data Processing Addendum.

Get your next workday under control.

Bring the schedule, crew, customer follow-through, and billing into one clearer view.

Start your 14-day free trial

14 days free. No credit card required.