Privacy Policy

Last updated: March 16, 2026

1. Introduction

Trend Index (“we”, “us”) respects your privacy. This policy describes how we collect, use, and protect your personal data in compliance with GDPR and other applicable regulations.

2. Data We Collect

Account Data

• Name, email address
• Organization name
• Password (stored hashed, never in plaintext)

Usage Data

• IP addresses (for security and rate limiting)
• Browser user agent
• Pages visited, features used
• Watchlist preferences

Trend Data

We collect publicly available data from configured sources (APIs, RSS feeds, social platforms). No private user data from these sources is collected.

3. How We Use Your Data

• Provide and operate the Service
• Send notifications (spikes, digests) based on your preferences
• Improve Service features with anonymized analytics
• Ensure security and prevent abuse
• Comply with legal obligations

4. Legal Basis (GDPR)

• Contract: Processing needed to provide the Service you signed up for
• Legitimate interest: Security, fraud prevention, service improvement
• Consent: Marketing emails (opt-in)

5. Data Sharing

We do not sell your personal data. We may share data with:

• Infrastructure providers (hosting, email delivery) under strict data processing agreements
• Law enforcement if required by applicable law

6. Your Rights (GDPR)

You have the right to:

• Access: Download all your personal data (Settings → Export Data)
• Rectification: Correct inaccurate data via your profile
• Erasure: Delete your account and all associated data (Settings → Delete Account)
• Portability: Export your data in JSON format
• Object: Opt out of marketing communications at any time

7. Data Retention

• Account data: retained while account is active, deleted within 30 days of account deletion
• Audit logs: retained for 90 days
• Session data: deleted on logout or after 7 days of inactivity

8. Security

We use industry-standard measures: encryption in transit (TLS), hashed passwords (bcrypt), rate limiting, CSRF protection, and regular security audits.

9. Cookies

We use essential cookies for authentication and CSRF protection. No tracking cookies are used without your consent.

10. Changes

We may update this policy. Material changes will be communicated via email or in-app notification.

11. Contact

Data Protection Officer: privacy@trendindex.io