Skip to main content
    Privacy

    Privacy Policy

    How we collect, use and protect your personal data — in plain English.

    Last updated: February 22, 2026

    Introduction

    This Privacy Policy explains how TrendsIQ Labs ("TrendsIQ", "we", "us") collects, uses, and protects your personal information when you use our website, applications, and services (collectively, the "Service"). By using the Service, you agree to the practices described below.

    Information we collect

    We collect information in three ways:

    • Account information — name, email, password hash, profile picture, and any preferences you set.
    • Usage information — pages visited, features used, AI runs performed, IP address, device and browser metadata.
    • Content you create — saved trends, scripts, hooks, titles, pipeline cards, contact form submissions.

    How we use it

    We use your data to:

    • Operate and improve the Service.
    • Personalize trend recommendations to your niches and channels.
    • Communicate updates, security notices, and (with your consent) product news.
    • Detect, prevent and respond to fraud, abuse and security incidents.
    • Comply with legal obligations.

    Sharing & subprocessors

    We do not sell your personal information. We share data only with vetted subprocessors required to operate the Service. As of June 2026 our active subprocessors are:

    • MongoDB Atlas (US/EU) — primary database, encryption at rest (AES-256) and in transit (TLS 1.2+).
    • Google Cloud (Gemini API) — AI inference for titles, hooks, scripts, deep-dives. We forward only the request prompt and never your stored data.
    • Google (YouTube Data API) — public YouTube metadata lookups. Calls are made with your own API key (BYOK).
    • SerpApi, Supadata — Google Trends and transcript retrieval, called with your own API keys (BYOK).
    • Resend — transactional emails (password reset, account notifications). Only your email address is shared.
    • Cloudflare — DDoS protection and edge caching.

    We may also share data with authorities when required by law, or with acquirers in the event of a merger, acquisition, or asset sale (you'll be notified).

    Bring-your-own-keys & encryption

    TrendsIQ uses a BYOK (Bring Your Own Keys) model: you supply your own Gemini, YouTube Data API, SerpApi and Supadata keys to enable AI and data features. Keys are encrypted at rest using AES-128 GCM via Fernet with a server-side master key, and are never returned to the browser after creation. Only the last 4 characters are exposed in the UI for identification.

    You can revoke or rotate any key at any time from /integrations — deletion is immediate and permanent.

    AI training & your content

    We do not use your prompts, saved items, scripts or any content you generate on the Service to train any AI model. Prompts are sent to Google's Gemini API solely to produce your requested output and are subject to Google's data-use policy (Gemini API requests are not used to improve Google's models on the standard API tier we use).

    Cookies

    We use first-party cookies for authentication, preferences and basic analytics. We do not use third-party advertising cookies. You can disable cookies in your browser, but parts of the Service may stop working. Granular consent (analytics / marketing) can be managed through the cookie banner the first time you visit, or by clearing site data to re-prompt.

    Data retention

    We keep account data for as long as your account is active. When you delete your account, we delete your personal data within 30 days, except for records we must retain to comply with legal obligations.

    Your rights

    Depending on where you live, you may have rights to access, correct, export, restrict processing, or delete your personal data. To exercise these rights, contact us at privacy@trendsiq.io.

    EU/UK residents: you have the right to lodge a complaint with your local data protection authority. California residents: you have rights under the CCPA, including the right to know and delete.

    Children

    The Service is not directed to children under 16. We do not knowingly collect personal data from children. If you believe we have, please contact us immediately.

    International transfers

    We may transfer your data to countries other than your own. When we do, we use standard contractual clauses or other approved mechanisms to protect it.

    Changes to this policy

    We may update this Privacy Policy from time to time. Material changes will be communicated via email or in-app notice at least 30 days before they take effect.

    Contact

    Questions? Email privacy@trendsiq.io or write to TrendsIQ Labs, 1 Market Street, Suite 400, San Francisco, CA 94105, USA.