1. Introduction

Welcome to Trados ("we," "us," "our"). Trados is operated by Trados LLC, a company registered in the State of California, United States. Our platform is accessible at trados.app and trados.co.

This Privacy Policy describes how we collect, use, disclose, and protect your personal information when you use the Trados platform, including our website, application, and related services (collectively, the "Service").

By accessing or using the Service, you agree to the collection and use of information as described in this Privacy Policy. If you do not agree with this policy, please do not use the Service.

2. Information We Collect

2.1 Information You Provide Directly

Account Information:

• Full name, email address, phone number, WhatsApp number
• Password (stored in encrypted form)
• Account type (Buyer, Seller, Buyer/Seller, or Broker)
• Profile photo
• Preferred language and timezone

Business Information (Silver Tier Verification):

• Job title
• Company legal name, company type, country of incorporation
• Company address and website

Identity Verification Documents (Gold Tier Verification):

• Nationality and Tax ID number
• Government-issued identification document
• Selfie with identification document
• Company registration document
• Tax identification document
• Proof of business address
• Additional supporting documentation

Trade Documents:

• Letters of Intent (LOI) uploaded for verification
• Contracts, certificates, and supporting trade documents uploaded during the quote process
• Non-Disclosure Agreements, Sales and Purchase Agreements, and related documentation

Communication Data:

• Support tickets and messages
• Notes and comments within the quote process
• Invitation messages sent through the platform

Payment Information:

• Billing details for subscription payments (processed exclusively by Stripe; we do not store credit card numbers)

2.2 Information Collected Automatically

Usage Data:

• IP address and approximate geolocation
• Browser type, version, and user agent
• Device type and operating system
• Pages visited, features used, and actions taken on the platform
• Timestamps of access and activity
• Referral source

Activity Logs:

• Login events and session information
• Profile changes and document uploads
• Tier verification submissions
• Quote process interactions
• Administrative actions (for admin users)

Cookies and Similar Technologies:

• Authentication tokens (JWT) stored as cookies
• Session management cookies
• Language and preference cookies

2.3 Information from Third Parties

• Google account information (if you use Google Sign-In)
• Payment confirmation data from Stripe
• AI analysis results from our AI service providers (for LOI verification)

3. How We Use Your Information

We use the information we collect for the following purposes:

Service Operation:

• Creating and managing your account
• Processing tier verification (KYC/KYB) at Bronze, Silver, and Gold levels
• Facilitating the quote process and deal workflows
• Operating the deals marketplace
• Processing LOI verification and generating analysis reports

Communication:

• Sending transactional emails (account verification, password reset, tier approval/rejection, quote status updates)
• Delivering support ticket responses
• Sending platform announcements and notifications
• Processing and delivering email invitations

Security and Fraud Prevention:

• Verifying user identity and business legitimacy
• Detecting and preventing fraudulent activity
• Maintaining activity logs for audit purposes
• Enforcing platform rules and acceptable use policies

Platform Improvement:

• Analyzing usage patterns to improve features and user experience
• Monitoring platform performance and reliability
• Developing new features and services

Legal Compliance:

• Meeting regulatory requirements
• Responding to legal requests and government inquiries
• Enforcing our Terms of Service

4. How We Share Your Information

We do not sell your personal information to third parties. We share your information only in the following circumstances:

With Your Company Admin:

If you register under a company on Trados, the company admin can view your profile information, tier verification submissions, quote requests, and activity within that company's instance. This is necessary for the operation of the white-label platform.

With Deal Counterparties:

When you engage in a quote process, relevant information (such as your company name, contact details, and submitted documents) may be shared with the other parties involved in the transaction, as necessary to facilitate the deal.

With Service Providers:

We share information with third-party service providers who assist in operating our platform:

With Law Enforcement:

We may disclose your information if required by law, legal process, or government request, or if we believe in good faith that disclosure is necessary to protect our rights, your safety, or the safety of others.

In Business Transfers:

If Trados is involved in a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

5. Data Storage and Security

5.1 Where Your Data Is Stored

Your data is stored on secure servers provided by DigitalOcean, located in the United States. Uploaded documents are stored on DigitalOcean Spaces (S3-compatible encrypted cloud storage).

5.2 Security Measures

We implement the following security measures to protect your information:

• Authentication: JWT (JSON Web Token) with HS256 algorithm and 7-day expiration
• Password Protection: All passwords are hashed using bcrypt; we cannot see or reverse your password
• Data Isolation: Multi-tenant architecture with strict company-scoped database queries; users of one company cannot access data from another company
• File Security: Uploaded files are stored with UUID-based unique filenames, preventing unauthorized access or guessing
• Transport Security: All data transmitted between your browser and our servers is encrypted using HTTPS/TLS
• CORS Protection: API access is restricted to approved domains (*.trados.app)
• Input Validation: All user inputs are validated against strict schemas using Pydantic models
• Activity Logging: Comprehensive audit trail of user actions for security monitoring
• Webhook Verification: Stripe webhook signatures are validated to prevent tampering

5.3 Security Limitations

While we take reasonable measures to protect your data, no method of electronic transmission or storage is 100% secure. We cannot guarantee absolute security. If you become aware of a security vulnerability, please contact us immediately at [email protected].

6. Data Retention

• Active Account Data: We retain your account information for as long as your account is active and the Service is in use.
• Verification Documents: Identity and business verification documents are retained for compliance and regulatory purposes for the duration of your account and for a period of 5 years after account closure.
• Trade Documents: Documents uploaded during the quote process are retained for the duration of the deal and for 5 years after deal completion for audit purposes.
• LOI Verification Data: Verification results and reports are retained for as long as your account is active. Verification history is available to authenticated users.
• Activity Logs: Activity logs are retained for 24 months for security and audit purposes.
• Deleted Accounts: When an account is deleted, personal information is removed according to our data deletion procedures. Some data may be retained in anonymized form for analytics, or as required by law.
• Payment Records: Transaction history is retained as required by financial regulations and tax law.

7. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

7.1 All Users

• Access: Request a copy of the personal information we hold about you.
• Correction: Request correction of inaccurate or incomplete personal information.
• Deletion: Request deletion of your personal information, subject to legal retention requirements.
• Data Portability: Request a copy of your data in a structured, machine-readable format.
• Withdraw Consent: Withdraw your consent to data processing at any time (this does not affect the lawfulness of prior processing).
• Objection: Object to the processing of your personal information for certain purposes.

7.2 European Economic Area (EEA) Residents — GDPR

If you are located in the EEA, you have additional rights under the General Data Protection Regulation (GDPR):

• Right to be informed about data processing
• Right to restrict processing
• Right to lodge a complaint with your local data protection authority
• Right not to be subject to automated decision-making

Our legal basis for processing your data includes: performance of a contract (providing the Service), legitimate interests (security, fraud prevention, platform improvement), consent (where explicitly obtained), and legal obligations.

7.3 California Residents — CCPA/CPRA

If you are a California resident, you have rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

• Right to know what personal information we collect, use, and disclose
• Right to delete your personal information
• Right to opt-out of the sale of personal information (we do not sell personal information)
• Right to non-discrimination for exercising your privacy rights
• Right to correct inaccurate personal information
• Right to limit the use of sensitive personal information

To exercise any of these rights, contact us at [email protected]. We will respond to verified requests within 30 days (45 days for CCPA requests, with possible extension).

8. Cookies

8.1 Cookies We Use

8.2 Cookies We Do Not Use

• We do not use third-party advertising cookies
• We do not use tracking cookies for behavioral advertising
• We do not share cookie data with advertisers

8.3 Managing Cookies

You can control cookies through your browser settings. Disabling authentication cookies will prevent you from logging into the platform.

9. International Data Transfers

Your information may be transferred to and processed in the United States, where our servers are located. If you are accessing the Service from outside the United States, your information will be transferred to the U.S. upon your use of the Service.

We ensure that appropriate safeguards are in place for international data transfers, including standard contractual clauses where required by applicable law.

10. Children's Privacy

The Trados platform is not intended for use by individuals under the age of 18. We do not knowingly collect personal information from children under 18. If you believe we have inadvertently collected information from a child under 18, please contact us at [email protected] and we will promptly delete the information.

11. Third-Party Links

The Trados platform may contain links to third-party websites or services. We are not responsible for the privacy practices of these third parties. We encourage you to review the privacy policies of any third-party services you access through our platform.

12. AI Processing Disclosure

Trados uses artificial intelligence services to analyze LOI documents and provide verification results. When you upload a document for LOI verification:

• The document content is sent to AI service providers (Anthropic, OpenAI, or Google) for analysis
• AI providers process the content to generate verification results, fraud detection scores, and recommendations
• We do not use your documents to train AI models
• AI analysis results are stored on our servers and associated with your account (for authenticated users)
• The AI analysis is a tool to assist your due diligence — it does not constitute legal, financial, or professional advice

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes:

• We will update the "Last Updated" date at the top of this policy
• We will notify registered users via email or platform notification
• Continued use of the Service after changes constitutes acceptance of the updated policy

We encourage you to review this policy periodically.

14. Contact Us

If you have questions about this Privacy Policy, wish to exercise your privacy rights, or have concerns about our data practices, contact us: