Privacy

Last updated 21 August 2026.

TradeClear holds business compliance records, not personal profiles. This page says exactly what it stores and who can see it.

Two kinds of people use TradeClear

General contractors sign in and see their own roster. Trade contractors never sign in at all. They receive a link, supply two things through it, and that is the whole of their interaction.

What is stored about a general contractor

• Company legal name, contact email, and an accounts payable email if you give one.
• A Stripe customer identifier and the current state of your subscription. Card numbers are handled by Stripe and are never sent to TradeClear.
• The billing postal code Stripe returns, used to apply the right tax rate.
• A log of actions taken on your account: checks run, texts sent, documents uploaded, audit packs exported.

What is stored about a trade contractor

• Business legal name, trade, and the mobile number the general contractor entered so that a text can be sent.
• Their WSIB account number and, if supplied, their CRA business number.
• Every WSIB clearance result, including the complete page the WSIB portal served at the time of the check.
• The certificates of insurance they upload, and the insurer, policy number, liability limit and expiry date read off them.

These are business records about a business. TradeClear does not ask for or store personal identifiers such as dates of birth, social insurance numbers or banking details, from anybody.

Where it is stored

In Cloudflare D1 and Cloudflare R2, on Cloudflare's network. Uploaded documents are held in a private bucket with no public address, and are served only to a signed-in session on the deployment that owns them. Cloudflare's global network means data may be processed outside Canada. If your contracts require Canadian residency for these records, tell me before you sign up.

Who it is shared with

Nobody, other than the four services that make the product work:

• Cloudflare hosts the application and stores the data.
• Twilio is given a mobile number and the text of a message in order to send it.
• OpenRouter is sent the certificate of insurance in order to read the four fields off it, and forwards it to the model provider named in your deployment's settings.
• Stripe handles subscriptions and is given your billing details directly by you.

Nothing is sold, and there is no advertising, no analytics and no tracking of any kind on the application. The dashboard sends no requests to any third party while you are reading it.

A trade contractor's documents

A certificate of insurance uploaded through a link is visible to the general contractor who sent that link, and to nobody else. Where the same trade business works for more than one general contractor, each of them sees the shared WSIB clearance history for that business, which is a public fact the province will confirm to anyone who asks, and each keeps their own separate record of what they have decided about it.

How long it is kept

Clearance records and certificates are kept for as long as the deployment exists, because their purpose is to answer a question an auditor may ask years later. Removing a trade contractor from a roster stops the checks but does not delete the history. To delete a deployment and everything in it, email me and say so explicitly.

Cookies

One, and it is the sign-in session. It carries no identifier that can be traced anywhere else, and it is set with HttpOnly, Secure and SameSite. There are no analytics or advertising cookies.

Getting in touch