Privacy Policy

Last Updated: March 24, 2026

1. Introduction

Trends of the World ("we", "us", "our") is committed to protecting your personal data. This Privacy Policy explains what information we collect, how we use it, with whom we share it, and your rights in relation to it. It applies whenever you use our website or platform (the "Service").

2. Data Controller

Trends of the World acts as the data controller for personal data collected through the Service. For any privacy-related enquiries, you can reach us at info@trendsoftheworld.com.

3. Information We Collect

We collect the following categories of personal data: • Account data: your email address and encrypted password when you register. • Profile data: your subscription tier and, where applicable, your Stripe customer ID. • Usage data: interactions with the dashboard, pages visited, and features accessed, collected via standard server logs. • Payment data: billing and transaction records processed by Stripe. We do not store card numbers or full payment details on our servers. • Communications: messages you send us via the contact form or by email.

4. How We Use Your Information

We use your personal data to: • Create and manage your account. • Provide access to subscription features appropriate to your plan. • Process payments and manage billing through Stripe. • Send transactional emails (e.g., trend alert digests) when requested. • Respond to support and contact enquiries. • Improve the Service through aggregated, anonymised analytics. • Comply with legal obligations.

5. Legal Basis for Processing

We process your personal data on the following legal bases under the GDPR: • Contractual necessity: to fulfil your subscription and provide the Service. • Legitimate interests: to maintain security, prevent fraud, and improve the platform. • Legal obligation: where we are required to retain or disclose data by law. • Consent: where you have explicitly opted in (e.g., marketing communications, where applicable).

6. Cookies and Local Storage

The Service uses browser localStorage to cache trend data for up to 12 hours, reducing unnecessary network requests. No advertising or tracking cookies are used. Essential session cookies may be set by Supabase for authentication purposes. You can clear local storage at any time via your browser settings.

7. Data Sharing and Third Parties

We do not sell or rent your personal data. We share data only with the following processors: • Supabase – authentication and database hosting. Data is stored in secure EU-region infrastructure. • Stripe – payment processing. Subject to Stripe's own Privacy Policy. • Yahoo Finance – no personal data is transmitted; all market data is fetched client-side via public URLs. We may disclose personal data if required by law or in response to valid legal process.

8. Data Retention

We retain your account data for as long as your account is active. If you delete your account, we will erase your personal data within 30 days, except where we are required to retain it for legal or regulatory purposes (e.g., billing records, which are kept for 7 years in line with standard accounting requirements).

9. Data Security

We implement industry-standard security measures including TLS encryption in transit, encrypted storage, and strict access controls. All authentication is handled by Supabase, which follows SOC 2 Type II security practices. Despite these measures, no system is entirely immune to risk, and we cannot guarantee absolute security.

10. Your Rights

Under the GDPR and applicable data protection law, you have the right to: • Access the personal data we hold about you. • Correct inaccurate or incomplete data. • Request erasure ("right to be forgotten"). • Restrict or object to certain processing. • Data portability — receive your data in a machine-readable format. • Withdraw consent at any time where processing is based on consent. To exercise any of these rights, contact us at info@trendsoftheworld.com. We will respond within 30 days.

11. Children's Privacy

The Service is not directed at children under the age of 18. We do not knowingly collect personal data from minors. If we become aware that a child has provided us with personal data without parental consent, we will delete it promptly.

12. International Transfers

Our primary data infrastructure is hosted within the EU. Where data is transferred outside the EU/EEA (for example, via Stripe's global infrastructure), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

13. Changes to This Policy

We may update this Privacy Policy periodically. The "Last Updated" date at the top of this page will reflect any changes. We encourage you to review this page regularly. Material changes will be communicated via email to registered users.

14. Contact and Complaints

For any privacy questions or to lodge a complaint, contact us at info@trendsoftheworld.com. You also have the right to lodge a complaint with your local data protection authority (e.g., the relevant EU supervisory authority in your country of residence).