Limited October offer

Professional. Just £10 a month.

Get the Professional package for £10 a month for your first 12 months. Available to the first 50 eligible subscribers.

Then £29.99/month. Cancel anytime. Ends 31 October 2026 or when all 50 places are claimed.

View offer terms50 of 50 places still available

You will be asked to create an account or sign in, and the offer is carried through to checkout.

Privacy Policy

Last updated: 9 September 2026

This Privacy Policy explains how Topdec Trade Assist ("we", "us"), operated by AutoWorks Systems, collects, uses, and protects personal information when you use our Service. It also explains our role when processing information on behalf of decorating businesses and how controlled support access works.

1. Information We Collect

Account Information

When you register, we collect your name, email address, and password (stored securely as a hash). If you sign up with Google, we receive the name and email associated with that account.

Business Information

To provide the Service, you may enter client names, addresses, phone numbers, email addresses, job details, photos, quotes, invoices, and financial records. This data is stored securely and is only visible to you (and your team members, if you invite them).

Usage & Device Information

We collect technical data such as your device type, browser, approximate location (for weather features), and how you interact with the Service, to improve performance and reliability.

Payment Information

Subscription payments are processed by Stripe. We do not store your full card details — Stripe handles all payment data securely. We retain only your subscription status and billing email.

2. How We Use Your Information

  • To create and manage your account and provide the Service
  • To generate quotes, invoices, and estimates you request
  • To process subscription payments and send billing notices
  • To provide local weather data relevant to painting conditions
  • To send service updates, security alerts, and support responses
  • To analyse and improve the Service's features and performance
  • To prevent fraud, abuse, and violations of our Terms

3. Our Role in Processing Personal Data

Topdec Trade Assist may act in different data-protection roles depending on the information being processed.

When we process information about registered users — including account details, subscription information, login activity, communications and platform usage — Topdec Trade Assist acts as the data controller. This means we determine why and how this information is processed to provide, secure, administer and improve the service.

When a decorating business enters or imports information about its own customers, prospective customers, employees, subcontractors or suppliers, the decorating business normally acts as the data controller and Topdec Trade Assist acts as its data processor.

We process this information on the decorating business's behalf and according to its instructions, except where we are required to process information to meet our own legal or security obligations.

4. Information Processed on Behalf of Decorating Businesses

Information entered or imported by a decorating business may include:

  • Customer names
  • Business names
  • Addresses and job locations
  • Email addresses
  • Telephone numbers
  • Quotes and estimates
  • Invoices and payment records
  • Job descriptions
  • Job notes and progress updates
  • Photographs and uploaded documents
  • Colour and product information
  • Appointment and scheduling information
  • Expense and mileage records
  • Communications and customer history
  • Other information added by the decorating business

The decorating business is responsible for ensuring that it has an appropriate lawful basis for collecting and using this information and for providing any necessary privacy information to its customers, employees, subcontractors and other contacts.

Topdec Trade Assist does not use a decorating business's customer information for its own direct marketing.

5. Customer Data Ownership and Separation

Each decorating business retains control of the information it enters or imports into Topdec Trade Assist.

Account data is separated so that users can only access information belonging to businesses they are authorised to use.

Other Trade Assist customers cannot access another business's customer records, quotes, invoices, jobs, photographs or documents.

Platform administrators do not routinely browse the detailed customer or job information held within user accounts.

6. Controlled Support Access

In limited circumstances, an authorised Topdec Trade Assist administrator may need temporary access to information within a user's account to:

  • Investigate a reported technical problem
  • Provide support requested by the account owner
  • Recover or correct account information
  • Investigate suspected misuse or fraud
  • Protect the security and availability of the platform
  • Respond to a legal or regulatory obligation

Where practical, support access will only take place after the account owner has requested assistance or enabled temporary support access.

Support access will be:

  • Limited to the information necessary to investigate the issue
  • Restricted to authorised personnel
  • Time-limited where technically possible
  • Recorded in an audit log
  • Used only for the stated support, security or legal purpose
  • Removed when it is no longer required

Support personnel must not use customer information for personal purposes, unrelated business purposes or marketing.

Emergency access may be used without prior authorisation only where reasonably necessary to investigate or prevent a serious security incident, protect the platform or its users, restore access to information, or meet a legal obligation. Emergency access must be restricted, documented and reviewed.

7. Account Owner Controls

Where the feature is available, business account owners can:

  • Enable temporary support access
  • Select how long support access remains active
  • Revoke support access
  • Review previous support-access activity
  • Request assistance with exporting or deleting their information

Revoking support access does not prevent Topdec Trade Assist from processing limited information where required for platform security, fraud prevention, legal compliance or the defence of legal claims.

8. Legal Basis (UK GDPR)

We process your personal data under the following lawful bases: performance of a contract (providing the Service), legitimate interests (improving and securing the Service), and consent (where you opt in, such as marketing communications). You can withdraw consent at any time.

9. Data-Subject Requests

If an individual wishes to access, correct or delete information held about them by a decorating business using Topdec Trade Assist, they should normally contact that decorating business directly.

Because the decorating business is normally the data controller for this information, it is responsible for responding to the request.

Where appropriate and legally required, Topdec Trade Assist will provide reasonable assistance to the decorating business in responding to data-subject requests.

10. Sharing Your Information

We do not sell your personal data. We share it only in these limited circumstances:

  • Service Providers: Stripe (payments), and the accounting integrations you actively connect (QuickBooks, Xero, Sage, FreshBooks, Moneybird, Wave) — only when you initiate a sync.
  • Product Catalogues: When you order materials, relevant details are passed to topdecbrush.com to fulfil your order.
  • Legal Obligations: If required by law, court order, or to protect our rights and safety.

11. Data Retention

We keep your data for as long as your account is active. If you close your account, we will delete or anonymise your personal data within 90 days, except where we are legally required to retain it longer (such as billing records for tax purposes).

12. Your Rights

Under UK GDPR you have the right to:

  • Access the personal data we hold about you
  • Correct inaccurate or incomplete data
  • Request deletion of your data ("right to be forgotten")
  • Restrict or object to certain processing
  • Data portability — receive your data in a structured, machine-readable format
  • Withdraw consent at any time (where processing relies on consent)

To exercise any of these rights, contact us through the in-app support. We respond within 30 days.

13. Data Security

Topdec Trade Assist uses appropriate technical and organisational measures designed to protect personal information against unauthorised access, alteration, disclosure, loss or destruction.

These measures include:

  • Account authentication
  • Business-level data separation
  • Role-based permissions
  • Controlled administrator access
  • Support-access logging
  • Secure transmission of information
  • Appropriate backup and recovery arrangements
  • Regular reviews of access permissions

No online service can guarantee absolute security. Users are responsible for protecting their login details, selecting secure passwords and controlling access granted to members of their business.

14. Data Export and Deletion

Business account owners may request or use available tools to export information held within their accounts.

When an account is closed, information will be deleted or anonymised in accordance with the retention periods explained in this Privacy Policy, except where it must be retained for legal, security, fraud-prevention, accounting or dispute-resolution purposes.

15. Service Providers and Sub-Processors

Topdec Trade Assist may use carefully selected service providers to host, maintain, secure and support the platform.

These providers may process personal information only where necessary to provide their services and must be subject to appropriate confidentiality, data-protection and security obligations.

Relevant categories of service providers include:

  • Cloud hosting and infrastructure: Providers that host the platform's application, database and file storage.
  • Payment processing: Stripe, which processes subscription payments on our behalf.
  • Email delivery: Providers that transmit transactional, support and onboarding emails.
  • AI and content services: Providers that power the Trade Assist AI features when you request estimates, advice or generated content.
  • Accounting integrations: Third-party accounting platforms you actively connect (QuickBooks, Xero, Sage, FreshBooks, Moneybird, Wave) — only when you initiate a sync.
  • Analytics and error monitoring: Providers that help us understand usage patterns and diagnose technical issues.

Some of these providers may process information outside the United Kingdom. Where this happens, we ensure appropriate safeguards (such as Standard Contractual Clauses) are in place to protect your data.

16. International Transfers

Your data may be processed by our service providers outside the UK. Where this happens, we ensure appropriate safeguards (such as Standard Contractual Clauses) are in place to protect your data.

17. Children's Privacy

The Service is intended for trade professionals and is not directed at anyone under 18. We do not knowingly collect data from children. If you believe we have, please contact us so we can delete it.

18. Responsibilities of Decorating Businesses

Decorating businesses using Topdec Trade Assist are responsible for ensuring that the personal information they enter or import is collected lawfully and used in accordance with applicable data-protection law.

In particular, decorating businesses should:

  • Have an appropriate lawful basis for collecting and using customer, employee and subcontractor information
  • Provide relevant privacy information to their customers, employees and other contacts
  • Only enter information that is necessary for running their decorating business
  • Respond to data-subject requests from individuals whose information they hold
  • Keep their own login details secure and control access granted to team members
  • Ensure that information entered is accurate and kept up to date

Topdec Trade Assist provides tools to help businesses manage information, but the business remains responsible for its data-protection obligations as a controller of its customers' personal data.

19. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified within the app or by email. Continued use after changes take effect constitutes acceptance. The date shown above reflects when this policy was last updated.

Contact

Questions about your privacy? Contact us through the in-app support or via AutoWorks Systems.