Privacy Policy

Effective date: 2026-10-16

This policy explains what data Trendys (https://trendys.io, the “Service”) processes, why, for how long, and how to delete it. The data controller is Trendys. Contact for any data question: support@trendys.io.

1. Data we process

1.1. Your Service account

• name, email, password hash, two-factor and passkey settings;
• language and interface settings, token balance and usage history;
• payment records (amount, status, payment ID). Card data is handled by the payment provider YooKassa — the Service never receives or stores it.

1.2. Working with public content

• search queries, saved videos, favorites, watches, digests;
• public data of videos and profiles (links, captions, metrics) obtained from public sources and third-party APIs;
• AI analysis results, scripts, carousels and other content you create;
• media files you upload to the media library.

1.3. Connected Instagram, TikTok and YouTube accounts

When you connect your professional Instagram account (via Instagram Login), TikTok account or YouTube channel (via Google Sign-In), the Service receives and stores:

• an access token (encrypted) and the list of granted permissions;
• account ID, username, name, profile picture, follower and media counts;
• your media list (link, caption, thumbnail, date) and insights (views, reach, likes, comments, saves, shares, watch time), including the history of these numbers;
• daily account insights (reach, views, follows and unfollows) and an aggregated audience breakdown (gender, age, countries, cities, active hours of followers) — aggregated only, with no data about individual people;
• for publishing — the files and captions you submit for publication.

YouTube. For a YouTube channel the Service uses YouTube API Services (YouTube Data API and YouTube Analytics API) with read-only permissions: channel title, picture and counts, your video list and its statistics (views, likes, comments, retention, watch time, subscribers gained, traffic sources), daily channel statistics and an aggregated viewer breakdown (age, gender, countries). The Service never posts to YouTube or changes your channel. By connecting a channel you agree to the YouTube Terms of Service; Google data is also processed under the Google Privacy Policy. You can revoke access at any time on the Google Account permissions page.

1.4. Instagram DM automations

If you enable an automation (an automatic reply to a comment or direct message containing a keyword), the Service processes, on your behalf, data of people who interact with your account:

• the person’s Instagram-scoped ID (IGSID, issued by Instagram per app) and username;
• the comment or message text, the media ID and the time;
• whether they tapped the button in the message and opened the link;
• a log of automated messages sent and delivery errors.

The Service only receives events of your own account for which you granted permission (instagram_business_manage_comments, instagram_business_manage_messages), and sends messages only in response to the person’s own action and within Instagram’s limits (one private reply per comment; afterwards only within 24 hours of the person’s message or button tap). The Service does not read conversations unrelated to your automations and does not send broadcasts.

1.5. Technical data

• IP address, browser type, request and error logs;
• cookies: login session, CSRF protection, language, theme, sidebar state. The Service uses no advertising or third-party tracking cookies.

2. Why we use data

• to provide the Service: trend search and analysis, analytics for your accounts, publishing, DM automations;
• for payments, token accounting and customer support;
• for security, abuse prevention and debugging;
• for service emails (e.g. when a digest is ready).

Data received from Instagram, TikTok and YouTube (Platform Data) is used only to provide the Service’s features to you. We do not sell it, license it, share it with data brokers, use it for advertising, profiling or model training, or combine it with other data to build profiles of people.

3. Who we share data with

Only with processors the Service cannot work without, and only to the extent needed:

Some processors are located outside your country; transfers are limited to what is needed to provide the Service. We may also disclose data when legally required by authorities.

4. Retention

• account data — while your account exists;
• tokens and connected social account data — until you disconnect or delete the account, or revoke access;
• DM automation logs (messages, runs, contacts) — until the automation or the account is deleted, and no longer than 12 months;
• insights history of connected accounts (daily account snapshots and media metric snapshots) — until the social account is disconnected, and no longer than 12 months;
• raw webhook notifications from Instagram — no longer than 30 days;
• server logs — up to 90 days; payment records — as required by law.

5. How to delete your data

• Disconnect a social account: Settings → Social accounts → “Disconnect”. The token, synced media, automations and their logs are deleted.
• From Instagram: Settings → Apps and websites → remove Trendys. Instagram sends us a deletion request and we delete all data linked to that Instagram account.
• From Google: remove Trendys on the Google Account permissions page. The channel stops syncing and we delete the stored channel data within 30 days.
• Delete your Trendys account: Settings → Profile → “Delete account”.
• By email: support@trendys.io — we complete requests within 30 days.

See also the data deletion instructions.

6. Your rights

You may request access to, correction or deletion of your data, restrict processing, or withdraw consent by writing to support@trendys.io. If you messaged or commented on an account of a creator who uses our automations and want your data deleted, email us with your Instagram username and the account you contacted.

7. Security

Connections are encrypted (HTTPS), social tokens are stored encrypted, access to data is restricted, and notifications from Instagram are verified by cryptographic signature.

8. Children

The Service is not intended for people under 18 and does not knowingly collect their data.

9. Changes

We publish new versions on this page with the date at the top and notify you of material changes by email or in the interface.