Privacy Policy (Datenschutzerklärung)

This policy explains how Trendiose processes personal data, pursuant to Regulation (EU) 2016/679 (GDPR / DSGVO) and the Austrian Datenschutzgesetz (DSG). Trendiose is built to store as little personal data as possible.

Last updated: [DATE].

1. Controller

[FULL LEGAL NAME], [STREET AND NUMBER], [POSTAL CODE] [CITY], Austria — [CONTACT EMAIL] (see Imprint).

2. What we process, why, and on which legal basis

Account (sign-in with Google)

When you sign in with Google we store your Google account ID, email address, name and avatar URL. Purpose: providing your account. Legal basis: performance of a contract (Art. 6(1)(b) GDPR). We do not store your Google password and — unusually for this kind of service — we do not store any Google access or refresh tokens.

Added channels

If you add a YouTube channel, we store the channel's public ID, title and thumbnail, and an AI-generated summary of its public content (niche, topics, keywords). Only publicly available channel data is read. Legal basis: performance of a contract (Art. 6(1)(b)).

Subscriptions and payments

Payments are processed entirely by Stripe; your card details never reach our servers. We store your subscription plan, status and billing period, and Stripe's customer and subscription identifiers. Legal basis: performance of a contract (Art. 6(1)(b)) and legal obligations regarding bookkeeping (Art. 6(1)(c) GDPR, § 132 BAO — accounting records are retained for the statutory period of 7 years).

Saved trends and feedback

Trends you save and feedback you submit are stored with your account. Legal basis: performance of a contract (Art. 6(1)(b)).

Service telemetry

We record technical metadata about the AI processing we perform (model used, token counts, estimated cost, timing — never the content) and standard server logs for security and troubleshooting. Legal basis: legitimate interest in operating a secure, reliable service (Art. 6(1)(f) GDPR).

3. Cookies

Strictly necessary cookies — the session cookie that keeps you signed in and a CSRF protection cookie — are always active and require no consent (§ 165 Abs 3 TKG 2021). We use no advertising cookies.

Analytics cookies — we use Google Analytics 4 to understand how the site is used. These cookies (e.g. _ga) are set only if you accept them in the cookie banner. Until you consent, Google Consent Mode keeps analytics storage disabled, so no analytics cookies are stored. Legal basis: your consent (Art. 6(1)(a) GDPR / § 165 Abs 3 TKG 2021). You can withdraw consent at any time via the "Cookie settings" link in the footer, with effect for the future.

4. Recipients and processors

• Google Ireland Ltd. / Google LLC — sign-in (Google OAuth), YouTube API Services (public video/channel data), AI analysis via the Gemini API, and Google Analytics (usage statistics — only with your consent).
• Stripe Payments Europe Ltd. / Stripe Inc. — payment processing and subscription billing.
• Anthropic PBC — optional AI analysis provider (only when enabled as the AI backend).
• [HOSTING PROVIDER, LOCATION] — hosting of the application and database on servers operated for us.

Where these providers process data in the United States, transfers rely on the EU–U.S. Data Privacy Framework and/or EU Standard Contractual Clauses (Art. 46 GDPR).

5. YouTube API Services

Trendiose uses YouTube API Services. By using Trendiose you also agree to be bound by the YouTube Terms of Service. Google's handling of data is described in the Google Privacy Policy. Trendiose only reads publicly available YouTube data and stores no Google tokens. If you ever granted Trendiose access to your Google account, you can revoke it at any time via the Google security settings.

6. Automated processing

AI models analyse public YouTube data to identify trends and to match them to added channels. This does not produce legal effects for you and is not automated decision-making within the meaning of Art. 22 GDPR.

7. Retention

• Account, channels, saved trends, feedback: until you delete your account.
• Trend and scan data: deleted automatically after 14 days.
• AI processing metadata: deleted automatically after 60 days.
• Billing records: 7 years (statutory retention, § 132 BAO), held by Stripe.

You can delete your account at any time in Settings — this immediately removes all data listed above (except statutory billing records) and cancels any active subscription.

8. Your rights

You have the right to access (Art. 15), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and objection to processing based on legitimate interest (Art. 21). Contact us at [CONTACT EMAIL]. You also have the right to lodge a complaint with the Austrian Data Protection Authority (Datenschutzbehörde, Barichgasse 40–42, 1030 Vienna, dsb.gv.at).