Your data is your business.
Your quotes hold your prices and your clients' details. They're business records, and we treat them that way. Here's the plain-English version of how they're kept safe. (The full legal detail is in our Privacy Policy.)
Kept in the UK
Your data is stored with Supabase in the UK (London region), encrypted in transit (HTTPS) and at rest (AES-256).
Locked to your account
Only you can see your quotes. Your internal pricing (overheads, markup and margin) is yours alone; your client only ever sees the finished quote.
Your card stays yours
Card payments are handled entirely by Stripe. We never see or store your card number, only a reference and your subscription status.
Export or delete, any time
Download all your data as a file, delete any single quote, or delete your account from Settings — personal details, drafts, files and company profile go immediately. Records of accepted quotes and paid invoices are kept 6 years as legal evidence.
You own your quotes
Everything you build is yours. You can export your whole account to a file whenever you like, and Delete my account in Settings removes your personal details, company profile and logo, drafts, saved quotes, files and photos immediately, and cancels any subscription. If you cancel without deleting, we keep your quotes for 90 days so you don't lose your history if you come back; then they're removed. Quotes a customer has formally accepted, and invoices that were paid, are kept for 6 years as a record of the agreement — whether you cancel or delete your account — then permanently deleted; they're unlinked from your account and used only to settle a dispute. That export also means you're never locked in. Your records are yours, on your own machine, whenever you want them.
We never sell your data
Not to advertisers, not to anyone. There's no ad tracking and no third-party tracking cookies, just one essential cookie to keep you signed in, and privacy-friendly, cookieless website analytics so we can improve the product.
Your clients' details
In plain terms: your clients' details belong to you. We just store them so you can use them, and never for anything else. (Legally, when you store a client's name and contact details in a quote, you are the "data controller" and TradeDraft acts as your "processor". The formal terms are in the "Data processing" section of our Terms.)
Your rights
Under UK GDPR you can access, correct, export or erase your data at any time. Do it yourself from Settings, or email hello@tradedraft.co.uk. You can also raise concerns with the Information Commissioner's Office at ico.org.uk.
For the full detail, see our Privacy Policy. Last updated: 2 July 2026.