Privacy policy

All Trades Digital is a one-person digital agency in Austin, Texas. We sell local search visibility, websites and quoting tools to service and trade businesses, and we run a free audit on this site that anyone can use.

This policy covers this website and that audit. It is written to be read rather than to be survived, and if something in it is unclear the address at the bottom is a person.

Four things, and the first three happen whether or not you ever type an address:

• A session — A cookie that keeps this browser recognisable from one page to the next, so a scan can find its own results. With it we record the pages opened, the scans run, the page you arrived on, the site that sent you and any campaign tags in the link.
• A connection, reduced — Your IP address is hashed with a secret we hold on the server the moment it arrives and the original is never written down. The hash is what enforces the rate limits that stop a script spending our scanning budget. We also record the browser string and the country and region our host reports.
• What you typed into the audit — A website address, or a business name and a town, and — where we had to ask which business you meant — which one you picked.
• An email address, if you give one — The full report is unlocked by an email address, and we send a copy of the report to it — or, where we could not load your website, we write to it once, the morning it loads. That address becomes a record of a person, separate from the record of a business, and we keep it.

We do not ask for a name, a phone number, or anything about you personally to run an audit. There is no account to create and no password to set.

The audit runs against whatever is typed into the box on the homepage, and often that is not the person’s own business. A competitor can audit a rival. We can audit a business to decide whether it is worth approaching. So we hold records about businesses that never contacted us, and rather than leave that to be discovered, here it is.

What we read is public. The Google Business Profile Google already publishes — name, category, rating, review count, hours, photo count — the map-pack position for a handful of search terms, what a phone would see loading the website, and Google’s own PageSpeed score for it, with the picture of the page its test took. Nothing behind a login, nothing confidential, nothing that twenty minutes and a browser would not find.

What we store is that public data, the findings our own checks produced from it, up to six sentences its homepage says about the business — how long it has traded, a licence, a guarantee — and our internal score for how well the business fits what we sell. Raw copies are kept for twelve months; the summarised columns outlive them. A business shown a homepage mockup also has the logo its site names and the typefaces it asks Google Fonts for fetched once and kept with the mockup, in private storage, beside that picture of its site — so the mockup is shown from our site and never loaded from theirs. The mockup may repeat one of those six sentences word for word.

A business shown a quote demo can price a job on its own rates. Rates typed there are used to price that demo and nothing else, are shown to nobody, and are deleted thirty days later with the line-by-line working of each quote; we keep the trade, whether the rates were the business’s own or our examples, and the total. Pressing “Send me the scheduling link” sends one email to the address the report went to, and to no one else.

What we do not store, deliberately: reviewer names, reviewer profiles, or a word of review text. A review is kept as a date, a rating, and whether the owner replied.

The one exception is a business that orders our replies to its reviews, or a website from us. Once we read its reviews, we keep each reviewer’s public name and what they wrote. Where we answer its reviews, a model drafts each reply, which the AI disclosure describes.

A business we build a website for may show a review on it, once it tells us the reviewer agreed. The site shows their first name and last initial, the stars, the month and their words. To have one of yours taken off, ask the business or write to privacy@alltradesdigital.com.

It may also carry over a testimonial from its old website, once it tells us the customer said it. While we build its new site we keep the words of its old site’s main pages, testimonials on them included; the new site shows one only with the business’s yes, as the old site had it, with the name it gave. To have yours taken off — off the site and out of what we keep — ask the business or write to privacy@alltradesdigital.com.

What we do with it: decide who to approach, and build the audit for whoever ran it. We do not sell it. We share none of it but the reviews and testimonials a business’s own website shows, each with its business’s word that its writer said it.

We respect a site’s robots.txt and we stop reading after three seconds. A site that refuses us is recorded as having refused us, which is itself a finding, and we do not go round it.

A business that buys from us gives us more than an audit ever reads, and here is all of it:

• Who you are, and how you paid — The email address you bought with, which is also how you sign in to your portal — by a link we email you, never a password. Your business’s legal name if you give it. Stripe takes the payment on its own page; we never see a card number, and what we keep is what you bought, what you paid and when.
• Changing the address you sign in with — You can move your account to a new email address on your Settings page, or we can for you when you ask. Nothing changes until the new address presses a link we email it — until then your current address signs in and gets everything — and we tell your current address when the change is asked for, and again when it is done. From that press the new address signs in, gets every email, and is the address Stripe has for you; the old one no longer signs in, and we delete it from the service that signs you in. We keep a record of each change: both addresses, who asked, and when.
• What you tell us when you start — Your services, service area, hours and phone number as you confirm them, your three most profitable services, a competitor if you name one, how you want reviews answered and posts handled — and the name and role of whoever answers your phone, so asking customers for reviews goes through the right person. That last one is about somebody other than you, so tell them.
• The photos and logo you upload — Kept exactly as your phone or computer sent them. We do not resize them, convert them or strip anything out — which means a photo can still carry what your phone wrote into it, often including where and when it was taken. We also keep each file’s name, so you can tell your uploads apart. They sit in private storage that only we can open, each is reached by a link that stops working after ten minutes, and we use them for your Google profile or your website and nothing else. For a website we also keep two smaller copies of each photo and one of your logo, made for the site itself — turned upright, cropped or fitted, and without anything your phone wrote into it; your own file stays as it was, and removing it removes its copies too. You can remove any of them yourself, from the same page you uploaded them on, and a removed file is deleted from storage, not hidden.
• What you choose to be emailed, and one more address — How often you want to hear that replies are waiting for your yes. And, if you name one, one more email address that gets a copy of our emails about your reviews, your posts and your monthly report — with when you named it, when its holder said yes, and when and why it stopped. That address is somebody else’s, so tell them: we send it one question first, and nothing more until its holder says yes.
• Your Google profile, as a Manager — You add us as a Manager on your Google Business Profile, and we use that access to do the work you bought. We never ask for your Google password. When you leave, we remove our access the same day.
• Buying a website: two answers and a box — Before you pay for a website we ask whether you sell products online and whether you can log in to where your domain is registered, and you tick that you own the business or may buy for it — and, where it applies, that you have read why a website will not fix your reviews. We keep your answers and each box you ticked, with the exact words you were shown and when, as we keep your acceptance of the agreement.
• Your domain, for a website — To tell you on the order page what a new website changes and what it leaves alone, we read your domain’s public records — who runs your email, where the records are kept, and who registered the domain — and keep what we read for a week. At setup we ask you to invite us to manage your domain’s records, where your provider allows it, or to add one record, which we look up each morning until it is there. An invitation lets us change the records that send your website’s address to us, and nothing else; the record lets us change nothing. We never ask for a password.
• Your website, while we build it — When you buy a website we read your current site once — the addresses of its pages, and the words of its main pages, at most ten — so your old links can lead to your new pages, each new page is written from its old one, and you can keep your own words if you prefer them. A model reads how those pages sound, to offer your site in your own voice. We keep those words — any testimonials on them included — and that reading with your website, and what you choose for it: what it may say about you and your licence numbers, each testimonial you carry over — your customer’s words and the name your site gave them, shown while you keep it and deleted, from your old pages’ words too, when it comes off — a voice, a design, your words or ours, what its buttons do, and anything you ask us to avoid or change. Its preview has an address of its own that opens for whoever holds the link, is kept out of search engines, and sets no cookie; approving it happens only in your portal.
• Messages from your website’s contact form — A message someone sends through your website’s contact form is emailed to you, and we keep no copy of it — only a count of how many were sent, so the form cannot be used to flood you. On the preview, a message goes only to you, marked as a test. Our email provider keeps its own copy for 30 days, below.
• Your rates, for a quoting tool — What you charge is yours, and we show it to nobody: a customer sees a total or a range, and the people who work here cannot see your rate card unless you press the button in your portal that asks us to look — which we record, and which you can take back. If you photograph or upload your price list, the file sits in private storage until you confirm your rates, and is then deleted; a model reads it once, as the AI disclosure describes. A list you paste is never kept. We do keep, and can see, your three test quotes — the job, what you charged and what the tool said. Thirty days after your quoting tool ends, your rate card, your own jobs and your test quotes are deleted.
• Your customers, through a quoting tool — What a customer of yours tells your quoting tool — a name, a number, an address, the job — is yours, and we hold it for you. It is emailed to the addresses you name and listed in your portal, where you can delete any customer’s details or download them all. We count it in your month’s numbers and use it for nothing else, and our own screens show us counts, not your customers’ names. If one of your customers asks us to delete their details, we do, and we tell you. Thirty days after your quoting tool ends, their details are deleted with your rate card.
• What we write for you — Replies to your reviews and posts on your profile, which the AI disclosure describes, and what you approved or declined — and a report each month on how your profile did, which we keep, and whether you opened it.
• Asking your customers for reviews — We give you a short link, a page for your technicians and a card to print. When someone presses Text it on that page, or opens the link, we count it — the business, which of the two it was, and the time. Nothing about the customer: no phone number, no name, no address, no cookie and nothing about their device. Your technician picks who to text in their own phone, and we never see it.
• When you leave — We email you one page with your final report and everything we made for you, and the files you gave us. The page works for ninety days, for whoever has its link.

We keep all of it while you are a client, and until you ask us to delete it. A quoting tool’s rates, and what its customers told it, are the exception: they go thirty days after it ends, without your asking. Write to privacy@alltradesdigital.com and we will send you what we hold, or delete it — except the record of what you paid, which we keep.

Some businesses give quotes through a tool we make and run for them — on their own website, or on a page we host with their name on it. If you asked one of them for a price, this section is about you. What you tell that tool is the business’s, not ours. We hold it for them, and do with it what this section says and nothing else.

• When you ask for a price — The job you describe is sent to our server and priced on that business’s own rates. It is not kept. We count that a price was shown — not what it was for, and not who asked.
• A check that you are a person — Cloudflare runs it before your first price, and it usually asks nothing of you. Passing it is remembered for 24 hours in that page’s own storage in your browser — not a cookie — and only for that one business’s tool.
• Your connection, reduced — As everywhere on this site, your IP address is turned into a code with a secret we hold and the address itself is never written down. The code is how the tool limits how many prices one visitor is shown in a day; past that it asks for your details instead, and the business calls you with a price. A visitor who goes past a limit is recorded: the time, which limit, and that code.
• If you leave your details — We keep your name, and whichever of a phone number, an email address and the address of the job you give; the job; the estimate you were shown; and what you asked for — a call back, a time, or a copy of the estimate. The business gets it, by email within about a minute and in their account with us, and nobody else does. We do not use it to sell you anything, we do not sell it, and we do not share it. Our own screens show us that a request arrived, what it asked for and whether the business’s email was delivered — not your name or your number.
• What you may be sent — A copy of your estimate, if you ask for one; and, if you asked for a time, one email when the business confirms it, with the visit as a calendar file. Each is sent once, in the business’s name, and a reply goes to them. Nothing else is sent to you, and you are added to no list.

How long it is kept: for as long as the business uses the tool, and 30 days after they stop. The business can delete your details whenever they choose.

The tool sets no cookie, loads no advertising and no analytics, and is told which website it is on and reads nothing else from the page around it. A price it shows is an estimate from what you entered, and a time you ask for is a request until the business confirms it.

A business we work for can name one more email address that should hear about its reviews and posts — an office manager’s, a partner’s. If one of them named yours, this section is about you. We were given your email address and nothing else about you, typed in by whoever signs in to that business’s account.

• Before you say yes — You are sent one email: who named you, what you would be sent, and a link to a page with one button. Nothing but that question is sent to you until that button is pressed — opening the email, or the page, says yes for nobody. The business can have the question sent again; we send it for one business three times in any twenty-four hours at most.
• Once you say yes — You get a copy of what we email that business about its reviews, its posts and its monthly report — as often as the business has chosen to hear. They can quote a customer’s review, with the name on it. They sign you in to nothing: you cannot approve, change or see anything in that business’s account.
• Stopping — Every email we send you — the question too — ends with a link to a page with one button that stops them, and your mail app’s own unsubscribe does the same where it shows one. There is no sign-in and nothing to confirm, and it takes effect at once. We also stop if an email to your address bounces for good or is reported as spam. The business is shown that your address stopped, when, and which of those it was. The business can ask us to ask you again — one question, and nothing more unless you say yes — unless an email to your address was reported as spam: then we never write to it again, for any business.
• What we keep — Your address, on that business’s account, with when it was named, when you said yes and when it stopped — until the business removes it or names another. A record of each of those changes stays after that, and it holds your address: it is the only proof that you asked for these emails, or asked for them to stop. Each email we sent you is recorded with a code made from your address, not the address. And when you press either button we record the time and your connection, reduced to a code as it is everywhere on this site.

A business we work for — or we, at its request — can ask to move its account with us to a new email address. If that address is yours, this section is about you. We were given your email address and nothing else about you.

• Before you press — You are sent one email: who asked, what would move, and a link to a page with one button. Nothing else is sent to you, and nothing changes, unless that button is pressed — opening the email, or the page, does nothing — or the move is asked for again, which sends one new email the same way. The link works for seven days.
• If you press — Your address becomes the account’s: it signs in to it, gets every email about it, and is given to Stripe for its receipts — and what If your business pays us says of a business’s address is then about yours. If your address is already the address of an account with us, the press changes nothing.
• If nobody presses — We delete your address once the change stops waiting — the day it is withdrawn or replaced by another, or the morning after its seven days run out. What stays is a code made from your address, never the address: on the record of the one email we sent, and on the record that the change was asked for.

Running an audit means asking other companies questions, and those questions carry what you typed. Every one of them is a supplier working on our instructions, not a partner we trade data with:

• Google — The Places API identifies the business and returns its public profile; the PageSpeed Insights API scores the website; and, when we make a homepage mockup, Google Fonts serves the typefaces the business’s site names. All three receive the business being audited, never your email address.
• DataForSEO — Measures where a business ranks in the map pack and reads the public reviews on its profile. Receives the business, never your email address.
• Anthropic — Runs the model. It classifies what a website says and writes the 90-day plan and the words of the homepage mockup some businesses are shown, and receives the public text of the business being audited — never your email address, and nothing about you. For a business that pays us to answer its Google reviews it also drafts the replies, so it receives those reviews and the reviewers’ public names. For a business that pays us it writes the monthly posts too, from the same public facts a plan is written from, and a second, smaller model reads each post before anybody else does. For a business that buys a website it writes the site’s pages, from the details and services you confirm, your current site’s headline, and anything you ask us to avoid or change. For a business that buys our quoting tool and sends its price list as a photograph or a file, it reads that list — the business’s own prices — once, to fill in a form the business then confirms. It never receives a job photo or a logo you upload, or the name of whoever answers your phone.
• Stripe — Takes payment from a business that buys from us, on its own page, and receives what you enter there. We receive the result, never the card.
• Public DNS, and the registry that holds a domain — When a business is offered a website, we ask Cloudflare’s and Google’s public DNS services about its domain’s email and records, and the registry for its ending — found through IANA’s public directory — who registered it; and we ask the same DNS services each morning for the record a website client adds. Where a website client invites us to manage their domain, we read the records it has when we change the ones that point it at their new website, and keep nothing of them but what those two addresses answered at our latest check. They receive the domain name, never your email address.
• Cloudflare — The bot check in front of the audit, and in front of a business’s quoting tool. It is the privacy-preserving one of the available choices by design, and it runs for everybody.
• Resend — Sends the report email, and the few emails described below, and tells us whether each arrived. Receives your email address and what each email says — and, for a website client, the messages their contact form sends them; and, for a quoting tool, the request it emails the business and the one or two emails its customer asked for. It keeps a copy of every email it sends for 30 days, then deletes it. Nothing in them tracks whether you opened it. Our own emails show our logo, which your mail app loads from this site when it shows you the email. It is one picture at one address, the same in every email to everyone, so its address says nothing about which email was opened or who opened it. The request reaches our host the way any visit to this site does — from your mail provider’s servers where they fetch pictures on your behalf, and otherwise from your own device, with its IP address. Our own software keeps no record of those requests, and we do not use them to work out whether an email was read. An email we send in a business’s name shows no picture.
• Vercel, Supabase, Upstash and Inngest — Respectively the host, the database, the cache and the queue that runs the slow steps of a scan. They hold what this site holds because they are where it lives — and Supabase also stores the photos and logos clients upload, a price list a client sends until its rates are confirmed, and what a homepage mockup is made from, in private storage.

None of them is paid in data and none of them is an advertiser. We do not sell personal information, we do not share it for cross-context behavioural advertising, and there is no advertising pixel on this site.

Everything above happens because the audit cannot run otherwise. Two things are not like that, and neither loads until you accept them:

• Product analytics — A third-party analytics service, run by somebody other than us. When it is on it is configured to keep nothing in your browser and no identifier that follows you to another site.
• A booking calendar — A third-party embed, which loads when you open it rather than when a page loads.

Our own record of what happens here is not one of them. It sits in our database, it is never sold and never shared, and there is no switch for it on this site. Calling it strictly necessary would not be true, so we are telling you about it instead.

We also do not fingerprint devices. A session cookie, a hashed IP and what you actually did are enough.

This site sets two cookies. The session cookie described above, and a second one holding the answer you give the banner so you are not asked on every page. Neither can be switched off, and neither is used to advertise to you. The banner lists both, alongside the bot check, with the reason each exists.

Your answer is remembered for 180 days, and a decline is remembered exactly as long as an accept. You can change it whenever you like from Privacy choices in the footer of every page.

We honour Global Privacy Control. If your browser sends that signal we treat it as a standing opt-out, nothing optional loads, the banner does not appear, and we will not ask you to turn it off. A stored acceptance is ignored while the signal is set.

When this policy changes, the recorded answer is treated as no answer and you are asked again — rather than inheriting your consent to a document that no longer exists. The date at the top of this page is the version your answer is recorded against.

Unlocking a report sends you that report, once. It carries the report and the link to it and nothing that sells. That is deliberate: the day such a message gains an offer it becomes marketing, and marketing is a different thing with different rules.

If we could not load your website, there is no report to send, and the field offers something else: leave your address and we try the website again each morning for two weeks, and write to you once, the morning it loads. That email says so and gives you the way back to the check, and nothing that sells. If the site never loads, you hear nothing about it.

If your business looks like one we can help, we may send you more. We say so beside the field where you type your address, before you give it. Today that is four, over about three weeks, each about one thing your audit found and how to fix it yourself, and the last offers a 15-minute call. They come from a different address from the report, they carry our postal address, and every one has an unsubscribe link that works on one click — no sign-in and nothing to confirm. We send them only to businesses in the United States.

An address given before we said this is never sent them. This paragraph replaced one promising no list at all, and we record which version of the notice beside the field each address was given under.

A permanently bounced address stops us mailing it. A spam complaint stops us mailing it permanently. That is true of a report and of the emails that follow one. An address a business named to hear from us is taken off by either, and after a spam complaint is never asked again. It is not true of the address a paying client signs in with: that is how they are told about their own account, so we keep writing to it, and get in touch another way.

• Raw scan data — Twelve months, after which the full copy is dropped and only the summarised columns survive.
• Your consent answer — 180 days in the cookie. The record that you answered is kept, because a record of consent that expires cannot evidence the consent.
• Email addresses and the reports behind them — Until you ask us to delete them. A report link stops working after 30 days either way.
• An address a client named to hear from us — On the client’s account until they remove it or name another. The record that it was named, said yes or stopped is kept, with the address, until its holder asks us to delete it.
• An address asked for, before it is pressed — Until it is pressed, or for seven days at most — then deleted by the next morning, leaving only a code made from it. Once pressed, it is the account’s address, and the record of the change is kept with the account.
• A client’s rates, for a quoting tool — While the quoting tool runs, and 30 days after it ends. The file a price list was read from: until its rates are confirmed.
• What a quoting tool’s customers told it — While the business uses the tool, and 30 days after it ends — or until the business, or the customer, has it deleted. A price that was asked for and never followed by a name is counted, and not kept at all.
• Rate-limit counters — Hours or days. They exist to count the last hour and the last day, and they expire on their own. The hashed IP stored against a session lives as long as the session record does.

We are a very small business and the state privacy statutes that grant formal access and deletion rights apply to companies far larger than this one. We are not going to pretend otherwise by publishing a rights section that quotes a law we are not subject to.

We re-check whether those statutes have started to apply to us every year. If they do, this section changes and you will be asked to read the policy again.

This site sells business services to business owners. It is not directed at children and we do not knowingly collect anything from one.

The notice at collection is the one-screen version of this page, and it is the one worth reading if you are about to type something in. The AI disclosure covers what a model does in an audit, the plan it writes, and the review replies we publish for the businesses that pay us. The acceptable use policy covers what the audit may be used for.

Questions, corrections and deletion requests all go to the same place: privacy@alltradesdigital.com.