TREND ("we," "us," or "our") operates thetrend.io (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service. We are committed to protecting your privacy and being transparent about our data practices.
Information We Collect
Account Information
When you sign in with Google, we receive your name, email address, and profile picture from your Google account. We do not collect or store your Google password.
Email Data (Read-Only Gmail Access)
We request read-only access to your Gmail account solely to scan for clothing purchase receipts. Our parsers extract structured data from order confirmation emails, including:
- Brand and retailer name
- Item name, category, and description
- Size and color information
- Price and order date
Important: We never read, store, or access the full content of your emails. We only extract structured purchase data from order confirmation emails. We never send, delete, or modify any emails in your account.
Usage Data
We collect standard analytics data including pages visited, features used, and interaction patterns to improve the Service. This data is collected via Google Analytics and is anonymized.
How We Use Your Information
We use the information we collect to:
- Build your personal style profile (preferred brands, categories, price ranges, and sizes)
- Group you into a style cluster with users who have similar fashion preferences
- Detect emerging trends within your style community
- Generate personalized product recommendations
- Send you weekly recommendation emails (with one-click unsubscribe)
- Improve our trend detection algorithms and Service quality
Data Security
We take the security of your data seriously and implement the following measures:
- Google OAuth tokens are encrypted at rest using AES-128-CBC with HMAC verification (Fernet encryption)
- All data is transmitted over HTTPS/TLS
- Database connections use SSL encryption
- We use Google Cloud Platform infrastructure with enterprise-grade security
- Access to production systems is restricted and audited
Data Sharing & Third Parties
We do not sell your personal information. We may share limited data with the following third parties:
- Skimlinks — We use Skimlinks for affiliate link tracking when you click product recommendations. Skimlinks may set cookies to track conversions. No personal information is shared with Skimlinks.
- Google Cloud Platform — Our infrastructure provider. Data is stored in Google Cloud's US data centers.
- Google Analytics — Anonymous usage analytics to improve the Service.
We may also disclose your information if required by law, legal process, or government request.
Your Rights & Choices
You have the following rights regarding your data:
Revoke Gmail Access
You can revoke our access to your Gmail at any time through your Google Account permissions. We will no longer be able to scan new emails, but previously extracted purchase data will remain in your account until you request deletion.
Unsubscribe from Emails
Every email we send includes a one-click unsubscribe link compliant with RFC 8058. You can also manage email preferences from your dashboard settings.
Data Deletion
You may request complete deletion of your account and all associated data by contacting us at privacy@thetrend.io. We will process your request within 30 days.
Data Export
You may request a copy of all personal data we hold about you by contacting us at privacy@thetrend.io.
Data Retention
We retain your account information and purchase data for as long as your account is active. If you delete your account, we will remove all personally identifiable information within 30 days. Anonymized, aggregated trend data (which cannot be linked back to you) may be retained indefinitely for analytical purposes.
Cookies
We use essential cookies for authentication (JWT session tokens). We also use Google Analytics cookies to understand how visitors interact with the Service. Skimlinks may set third-party cookies for affiliate conversion tracking. You can control cookie settings through your browser preferences.
Children's Privacy
The Service is not directed to individuals under the age of 13. We do not knowingly collect personal information from children under 13. If we become aware that a child under 13 has provided us with personal information, we will take steps to delete such information.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last Updated" date. Your continued use of the Service after any changes constitutes acceptance of the updated policy.
Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us at privacy@thetrend.io.