Privacy Policy

Trendscape is operated by Unumandakh Bayandelger, a sole trader registered at Altai Khothon, Ulaanbaatar, 16030, Mongolia. We are the controller for the personal data we collect about visitors to this website and users of the service. Privacy questions and requests go to unumandakh.b@gmail.com, or by post to the address above.

• Account details: your email address, a hashed password (never the password itself), an optional display name, your email digest preference, and the verification and password-reset tokens those flows need. Used to create and secure your account and to send transactional email.
• Plan and billing references: your current plan and the Paddle customer, subscription and price identifiers, with the subscription status and renewal date. These are references to records Paddle holds, not payment details. Used to give you the features you have paid for.
• What you track: the shops, listings and search terms you add, the alerts you configure, your categories and app settings. Used to run the tracking and alerting you asked for.
• Usage counters: a ledger of metered actions such as refreshes and AI calls. Used to enforce plan limits and prevent abuse.
• Messages you send us: support email, feedback and any attachments, and text you submit to AI features. Used to answer you and to fix problems.
• Technical data: your IP address, used transiently for rate limiting and the sign-up bot check, plus server logs of requests and errors. Used for security and troubleshooting.

We do not use your data to train our own models and we do not build advertising profiles.

We do not collect or store card numbers. Paid plans are sold by Paddle, which acts as merchant of record and collects your payment details, billing address and tax information independently, as a controller in its own right, under Paddle’s privacy policy. We receive only the identifiers and status described above.

Where the law requires a legal basis, we rely on:

• Performance of a contract for account details, plan references, what you track, and support messages.
• Legitimate interests for usage counters, technical data and server logs: keeping the service secure, preventing abuse, enforcing plan limits and fixing faults.
• Consent for optional email digests, which you can switch off in your settings.
• Legal obligation where we must keep or disclose records by law.

This website sets no cookies and runs no analytics or advertising trackers. The service itself sets four first-party cookies, all strictly necessary: a session token that keeps you signed in, and three cookies holding your basic account details, your tracked-item counts and your plan limits so the interface can render without an extra request. There are no analytics, advertising or third-party tracking cookies, and nothing to opt out of beyond signing out. If we add analytics later, this section will say so first.

We do not sell your personal data. We share it only with:

• Paddle, our merchant of record, for the sale of paid plans, subscription management and payments, invoicing and tax compliance.
• Vercel, which hosts and serves the web interfaces.
• Cloudflare, for the sign-up bot check and network protection.
• Google, whose Gmail infrastructure delivers our outbound email.
• OpenAI, which processes the text of any AI features you invoke.
• healthchecks.io and UptimeRobot, which monitor whether our jobs and endpoints are running. They see operational signals, not your account data.
• Professional advisers such as accountants, lawyers or auditors, where needed.
• Authorities or other parties where the law requires it, or to protect our rights or the safety of others.

Our servers and providers are based mainly in the United States, so your data may be processed outside the country you live in, including outside the UK and the European Economic Area. Where that happens we rely on the safeguards the law provides, such as the European Commission’s standard contractual clauses, the UK international data transfer addendum, or an adequacy decision, and on our providers’ own commitments under those frameworks.

We keep account data for as long as your account exists. When you delete your account we delete your personal data and your tracked lists, keeping only what we must for tax, accounting and fraud-prevention records, which Paddle holds for its own legally required period. Server logs rotate away within roughly seven to fourteen days. Data we no longer need is deleted or anonymised.

Passwords are stored as salted hashes, traffic runs over HTTPS, sessions use signed tokens that can be invalidated, and access to production systems is restricted to the people who operate them. No service can promise perfect security, so please use a unique password here.

Depending on where you live, you have the right to access the personal data we hold about you, to have it corrected or deleted, to receive a copy in a portable format, to restrict or object to certain processing, and to withdraw consent where we rely on it. Write to unumandakh.b@gmail.com from the address on your account. We will not treat you differently for exercising these rights. You can change your password and delete your account from within the app.

• UK and EEA: we respond within one month, extendable where the law allows. You may also complain to the Information Commissioner’s Office in the UK or to your local data protection authority.
• California and other US states: we respond within 45 days. We do not sell or share personal information as those terms are defined in the CCPA, and have not done so in the preceding twelve months. Residents of states with comparable laws, including Colorado, Connecticut, Virginia, Utah and Texas, have equivalent rights.
• Canada: we handle personal information under PIPEDA. You may withdraw consent by deleting your account, and you may complain to the Office of the Privacy Commissioner of Canada.

The service is not for anyone under 16 and we do not knowingly collect information from children. If you believe a child has given us information, write to us and we will delete it.

We may update this policy. We will change the effective date above and give notice by email or in the app for material changes. Questions go to unumandakh.b@gmail.com. See also our terms of service and refund policy.