Trendiose

Privacy Policy (Datenschutzerklärung)

This policy explains how Trendiose processes personal data, pursuant to Regulation (EU) 2016/679 (GDPR / DSGVO) and the Austrian Datenschutzgesetz (DSG). Trendiose is built to store as little personal data as possible.

Last updated: 28 August 2026.

1. Controller

Yavor Plamenov Ivanov, Gregorygasse 10B/25, 1230 Vienna, Austria — privacy@trendiose.app (see Imprint).

2. What we process, why, and on which legal basis

Account (sign-in with Google)

When you sign in with Google we store your Google account ID, email address, name and avatar URL. Purpose: providing your account. Legal basis: performance of a contract (Art. 6(1)(b) GDPR). We do not store your Google password and — unusually for this kind of service — we do not store any Google access or refresh tokens.

Added channels

If you add a YouTube channel, we store the channel's public ID, title and thumbnail, and an AI-generated summary of its public content (niche, topics, keywords). Only publicly available channel data is read. Legal basis: performance of a contract (Art. 6(1)(b)).

Subscriptions and payments

Payments are processed entirely by Stripe; your card details never reach our servers. We store your subscription plan, status and billing period, and Stripe's customer and subscription identifiers. Legal basis: performance of a contract (Art. 6(1)(b)) and legal obligations regarding bookkeeping (Art. 6(1)(c) GDPR, § 132 BAO — accounting records are retained for the statutory period of 7 years).

Saved trends and feedback

Trends you save and feedback you submit are stored with your account. Legal basis: performance of a contract (Art. 6(1)(b)).

Service telemetry

We record technical metadata about the AI processing we perform (model used, token counts, estimated cost, timing — never the content) and standard server logs for security and troubleshooting. Legal basis: legitimate interest in operating a secure, reliable service (Art. 6(1)(f) GDPR).

Free-trial abuse prevention

When you delete your account, we keep a one-way hashed identifier of your Google account together with the deletion date — no email, name or other details — so the same Google account cannot obtain repeated free trials by deleting and re-registering. Legal basis: our legitimate interest in preventing abuse of the free trial (Art. 6(1)(f) GDPR). This minimal record may be retained for that purpose even if you request erasure (Art. 17(3) GDPR), and is deleted automatically about 18 months after account deletion.

Emails

We send a one-time welcome email when you create your account (performance of a contract, Art. 6(1)(b) GDPR) and a weekly trend digest summarising the trends matched to your added channels (legitimate interest, Art. 6(1)(f) GDPR). You can opt out of the digest at any time via the unsubscribe link in every email or in Settings; the welcome email is a single transactional message. We send no third-party advertising.

3. Cookies

Strictly necessary cookies — the session cookie that keeps you signed in and a CSRF protection cookie — are always active and require no consent (§ 165 Abs 3 TKG 2021). We use no advertising cookies.

Analytics cookies — we use Google Analytics 4 to understand how the site is used. These cookies (e.g. _ga) are set only if you accept them in the cookie banner. Until you consent, Google Consent Mode keeps analytics storage disabled, so no analytics cookies are stored. Legal basis: your consent (Art. 6(1)(a) GDPR / § 165 Abs 3 TKG 2021). You can withdraw consent at any time via the "Cookie settings" link in the footer, with effect for the future.

We have configured Google Analytics for data minimisation: Google Signals and all advertising features are switched off (we run no personalised advertising), IP addresses of visitors in the EU/EEA are dropped by Google before they are logged, and analytics data is retained for no longer than 2 months.

4. Recipients and processors

Where these providers process data in the United States, transfers rely on the EU–U.S. Data Privacy Framework and/or EU Standard Contractual Clauses (Art. 46 GDPR).

5. YouTube API Services

Trendiose uses YouTube API Services. By using Trendiose you also agree to be bound by the YouTube Terms of Service. Google's handling of data is described in the Google Privacy Policy. Trendiose only reads publicly available YouTube data and stores no Google tokens. If you ever granted Trendiose access to your Google account, you can revoke it at any time via the Google security settings.

6. Automated processing

AI models analyse public YouTube data to identify trends and to match them to added channels. This does not produce legal effects for you and is not automated decision-making within the meaning of Art. 22 GDPR.

7. Retention

You can delete your account at any time in Settings — this immediately removes all data listed above (except statutory billing records) and cancels any active subscription.

8. Your rights

You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection to processing based on legitimate interest (Art. 21). Contact us at privacy@trendiose.app. You also have the right to lodge a complaint with the Austrian Data Protection Authority (Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna, dsb.gv.at).