Privacy Policy

1. Information We Collect

We collect the following categories of information:

• Account information: name, email, phone, organization name, job title, and password (hashed).
• Customer data: contacts, deals, activities, communications, files, and notes you upload or create within the Service.
• Usage data: log files, IP address, browser type, device identifiers, referrer URL, and feature usage analytics.
• Cookies and similar technologies: session cookies, authentication tokens, and minimal analytics cookies.
• Communications data: messages, emails, and call logs you send or receive through the Service (when integrations are enabled by you).

2. How We Use Your Information

• To provide, maintain, and improve the Service.
• To authenticate users and secure accounts.
• To process billing and prevent fraud.
• To send service communications, security alerts, and transactional emails.
• To generate aggregated, anonymized analytics that help us improve product features.
• To comply with legal obligations and respond to lawful requests.

We do not sell your personal data or your customers' data to third parties.

3. Where Your Data Is Stored

Trendnaut is hosted on Vercel (United States and global edge network) with database services provided by Supabase (US/EU regions). Files are stored in Supabase Storage. Email transactional services use Postmark. We use industry-standard encryption (TLS in transit, AES-256 at rest where applicable) and apply Row-Level Security policies to isolate tenant data.

4. Your Rights

Under DPDP Act 2023 and GDPR, you have the following rights:

• Access: request a copy of your personal data.
• Correction: ask us to update inaccurate information.
• Deletion: request that we delete your data (right to be forgotten).
• Portability: export your data in a machine-readable format (CSV).
• Withdraw consent: opt out of optional processing at any time.
• Lodge a complaint: contact your local data protection authority.

You can exercise most of these rights directly within the Service (Profile and Export pages). For deletion requests, email privacy@trendnautlabs.in and we will respond within 30 days.

5. Cookies

We use only essential cookies (authentication and session) and minimal first-party analytics. We do not use third-party advertising or tracking cookies. You can clear cookies at any time via your browser settings; doing so will log you out of the Service.

6. Third-Party Service Providers

We share data with the following sub-processors strictly to provide the Service:

• Vercel — hosting and edge functions.
• Supabase — database, authentication, and storage.
• Postmark — transactional email delivery.
• Razorpay / Stripe — payment processing (billing data only).
• Sentry — error monitoring (anonymized).
• Vercel Analytics — aggregated usage analytics.

We do not share data with sub-processors outside this list without notifying you.

7. Data Retention

We retain your account and customer data for as long as your subscription is active. After cancellation, data is retained for 30 days to support reactivation, then permanently deleted. Audit logs and billing records are retained for up to 7 years to meet legal and tax requirements.

8. Children's Privacy

Trendnaut is intended for business users aged 18 and older. We do not knowingly collect data from children under 18. If you believe a child has provided us data, please contact us immediately and we will delete it.

9. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be communicated via email or in-app notice at least 30 days before they take effect.

10. Contact Us

For privacy-related questions or to exercise your rights, contact our Data Protection Officer:

• Email: privacy@trendnautlabs.in
• Postal: Trendnaut Labs, Bengaluru, Karnataka, India