Privacy Policy

1. Who we are

TrendsAGI is operated by TRENDSAGI LTD, a private limited company registered in England and Wales, company number 16489189. We are the data controller for the personal data described in this policy.

You can reach us about anything in this policy at [email protected].

2. What we collect

Account information

Your email address, your first and last name if you provide them, and a hashed version of your password. We never store your password in a form we can read.

Data from advertising accounts you connect

If you connect an advertising or analytics account, we store an access token for that connection in encrypted form, together with the account, campaign, ad set and performance data we read from it. Section 4 sets out exactly what we do with it.

Billing information

Subscriptions are processed by Stripe. Card details are entered directly with Stripe and never reach our servers. We retain your subscription status, plan and billing history.

Usage and device information

A randomly generated visitor and session identifier, the pages you view, your approximate location derived from your IP address, your browser and device type, and any campaign parameters in the link you arrived through (such as utm_source, gclid or fbclid). Our tracking explicitly filters out fields that look like credentials or contact details before anything is recorded. If you accepted analytics and arrived through an ad, the ad click identifier (for example gclid, fbclid, li_fat_id or msclkid) is kept in your browser for up to 90 days and saved with your account when you sign up, so we can measure which campaigns lead to customers.

3. Why we use it, and our lawful basis

• To provide the service — creating your account, authenticating you, detecting trends and showing them against your connected accounts. Lawful basis: performance of our contract with you.
• To take actions you ask for — such as applying a targeting change you have previewed and confirmed. Lawful basis: performance of our contract.
• To bill you. Lawful basis: performance of our contract.
• To keep the service secure and working — logging, rate limiting, fraud and abuse prevention. Lawful basis: our legitimate interests.
• To understand and improve how the product is used. Lawful basis: consent where required, otherwise our legitimate interests.
• To meet legal obligations, such as keeping accounting records.

4. Advertising accounts you connect

TrendsAGI can connect to advertising platforms including Meta, Reddit, Google Ads, Microsoft Advertising, TikTok, LinkedIn, Pinterest and Snapchat. A connection is only ever created when you start it and complete that platform's own authorisation screen, and you can disconnect it at any time from your integrations settings.

For a connected account we read its structure and its performance metrics — campaigns, ad sets, ads, spend, impressions, clicks and conversions — so we can show you which of your campaigns a detected trend affects.

Where a platform allows it and you have granted the necessary permission, TrendsAGI can also apply an interest-targeting change to a single ad set. By default this is manual: we show you the exact before-and-after and send the change only after you explicitly confirm it.

You can also switch on automatic application for a specific connection. This is off unless you turn it on. While it is on, a detected trend can apply a targeting change to the ad set you selected without asking you each time, and you can turn it off at any time. Whichever mode you choose, the change is always limited to interest targeting on one ad set: we never create, pause or delete campaigns, ad sets or ads, and never change budgets, bids or creatives.

Data obtained from a connected account is stored against your account only, shown only to you, and is never combined with another customer's data, sold, or used to target advertising of our own. It is used solely to provide the features described above.

Data received from Meta is handled in accordance with the Meta Platform Terms and their developer policies. When you disconnect a Meta account, or when we delete your account, the stored token and the data read through it are deleted.

5. Who we share it with

We do not sell your personal data, and we do not share it with advertisers or data brokers. We use the following service providers, each of which processes data only on our instructions and under a written agreement:

We may also disclose data where we are legally required to. We review any such request for lawfulness before responding, disclose only the minimum necessary, and keep a record of the request and our response.

6. Where your data is stored

Our application and database run on servers in Germany. Backups are stored encrypted with Cloudflare. Some providers listed above are based in the United States; where personal data is transferred outside the UK or EEA, that transfer is covered by an adequacy decision or by Standard Contractual Clauses.

7. How long we keep it

• Account information: for as long as your account is open, then deleted within 30 days of closure.
• Connected-account tokens: until you disconnect the integration or close your account, whichever is first.
• Advertising metrics read from connected accounts: deleted with your account.
• Billing records: six years, because we are required to keep them.
• Usage and analytics data: up to 24 months.

8. Your rights

Under the UK GDPR you can ask us to give you a copy of your data, correct it, delete it, restrict or object to how we use it, or send it to another provider. You can also withdraw consent at any time where we relied on it.

To delete your account and its data, email [email protected] from the address on your account. We will confirm and complete the deletion within 30 days. You can remove a single connected advertising account at any time, without deleting your TrendsAGI account, from your integrations settings.

We respond to requests within one month. If you are not satisfied with our response you can complain to the UK Information Commissioner's Office at ico.org.uk.

9. Cookies and tracking

We use cookies and similar technologies as described in our Cookie Policy. Our marketing pages also load the Reddit advertising pixel, which lets Reddit measure conversions from our advertising. Reddit acts as an independent controller for the data it receives; you can control that collection through your Reddit account settings and your browser.

10. Security

Traffic is encrypted in transit. Access tokens for connected accounts are encrypted at rest. Customer data is isolated per account at the database level, and access to production systems is restricted to the people who need it. No system is perfectly secure, but if a breach affects your data we will notify you and the ICO as the law requires.

11. Children

TrendsAGI is a business tool and is not intended for anyone under 18. We do not knowingly collect data from children.

12. Changes to this policy

If we make a material change we will update the date at the top of this page and, where the change affects you meaningfully, tell you by email before it takes effect.

13. Contact us

Questions, requests or complaints: [email protected]. General enquiries: [email protected].