1. Who controls your data
YBRSN, operating Trendhaus, is the data controller for personal data described in this policy. Contact us at info@trendhaus.ai for privacy questions or requests.
2. Data we collect
- Account data: email address, authentication identifiers, profile details, niche, goals, and preferences you provide.
- Billing data: plan, subscription status, Stripe customer and subscription references, payment status, and tax-related records. Stripe processes card details; Trendhaus does not store full card numbers.
- Usage data: Trendhaus actions used, timestamps, tool names, credit changes, connection status, error and security logs, device/browser information, and IP-derived request information where generated by our infrastructure.
- TikTok research inputs: public handles, post links, search terms, competitors, and account context you ask Trendhaus to research.
- Communications: messages, support requests, Agency Setup briefs, and feedback you send us.
- Website analytics: aggregate page, referrer, device, and geography information collected through Vercel Web Analytics.
3. Why we use it
- Provide, authenticate, secure, and support the Trendhaus service and MCP connection.
- Run requested TikTok research, maintain account context, meter actions, and show plan usage.
- Process subscriptions, prevent duplicate or fraudulent billing, and maintain accounting records.
- Diagnose failures, prevent abuse, improve reliability, and understand aggregate product usage.
- Respond to support, legal, privacy, and Agency Setup requests.
- Meet legal obligations and enforce our Terms and Acceptable Use Policy.
Our main legal bases are performance of our contract with you, compliance with legal obligations, and our legitimate interests in operating, securing, and improving Trendhaus. Where consent is legally required, we will ask for it and you may withdraw it.
4. Public TikTok data and your AI provider
Trendhaus retrieves and analyzes publicly accessible TikTok information in response to your instructions. Public social data can still be personal data. Use Trendhaus only for lawful research and do not use it to harass, discriminate, identify sensitive traits, or make high-impact decisions about people.
When you invoke Trendhaus from Claude, ChatGPT, Perplexity, or another supported client, that provider receives the prompts, context, and Trendhaus results needed to answer you. Its own terms and privacy policy govern its processing. Do not send sensitive personal data through Trendhaus.
5. Service providers and sharing
We share data only where needed to operate Trendhaus, comply with law, or protect the service. Current categories include:
- Supabase for authentication and database services.
- Stripe for checkout, subscriptions, payment processing, tax-related information, and fraud prevention.
- Vercel for website hosting and privacy-oriented web analytics.
- Railway and infrastructure providers for MCP hosting, caching, logs, and service delivery.
- TikTok data suppliers and public sources to complete the research you request.
- Professional advisers, authorities, or transaction counterparties where legally required or necessary to protect rights or complete a business transfer.
Some providers process data outside the European Economic Area. Where required, we rely on adequacy decisions, standard contractual clauses, or another lawful transfer mechanism.
6. Retention and security
We keep account and subscription data while your account is active and afterward only as needed for billing, tax, fraud prevention, dispute resolution, and legal obligations. Operational and security logs are retained for the period reasonably needed to protect and debug the service. Support communications are kept while relevant to the request and our legal records.
We use access controls, encryption in transit, managed infrastructure, authentication controls, and limited internal access. No internet service is perfectly secure, so we cannot promise absolute security.
7. Your rights
Depending on where you live, you may have rights to access, correct, delete, restrict, object to, or receive a portable copy of your personal data, and to withdraw consent. Email info@trendhaus.ai from your account email so we can verify the request.
If you are in the EU/EEA, you may complain to your local data protection authority. In the Netherlands, this is the Autoriteit Persoonsgegevens.
8. Children and changes
Trendhaus is a professional service for people aged 18 or older. We do not knowingly collect account data from children.
We may update this policy when the product, vendors, or law changes. We will post the updated date here and give additional notice when a change materially affects your rights.
