Trendora← Back to home

Legal

Privacy Policy

Last updated: June 2026

1. Who we are

Trendora is operated by Kacey Wacey, United Kingdom. We provide a YouTube comment intelligence platform that helps creators understand what their audience wants to see next.

For the purposes of UK GDPR, Trendora is the data controller for information collected through this service. You can contact us at hello@trendora.co.

2. What data we collect

Account data: When you sign in with Google, we receive your email address and basic Google profile information. We do not receive your Google password.

YouTube data: When you connect your YouTube channel, we access your public video list and public comments using the official YouTube Data API v3. We access only publicly visible data — the same information any visitor to your channel can see. We never access private videos, subscriber emails, revenue data, or anything non-public.

Free analysis data: When you paste a YouTube URL for a free analysis without an account, we store your IP address (hashed and anonymised) for rate limiting purposes only. We do not link this to any personal identity.

Payment data: Subscription payments are processed by Stripe. We do not store your card number or payment details. We receive a Stripe customer ID and subscription status from Stripe.

Usage data: We collect standard server logs (page views, API calls, error logs) for debugging and performance monitoring. These logs are retained for 30 days.

3. How we use your data

  • To provide and operate the Trendora service
  • To generate comment intelligence reports for your YouTube channel
  • To send you your weekly report by email (subscribers only)
  • To manage your subscription and process payments via Stripe
  • To prevent abuse and enforce rate limits on free analyses
  • To improve the service through aggregate, anonymised usage analysis

We do not sell your data to third parties. We do not use your data for advertising.

4. Legal basis for processing (UK GDPR)

Contract: Processing your account data and YouTube channel data is necessary to provide the service you signed up for.

Legitimate interests: We process anonymised usage data to improve service performance and prevent abuse.

Legal obligation: We may retain certain records to comply with UK tax and financial regulations.

5. Data retention

YouTube comment text: Raw comment text is deleted from our systems within 30 days of collection, as required by the YouTube API Terms of Service.

Report data: Generated reports (containing AI-produced summaries, not raw comments) are retained for the duration of your subscription plus 90 days after cancellation.

Account data: Retained for the duration of your account. Deleted within 30 days of account deletion request.

Payment records: Retained for 7 years as required by UK financial regulations.

6. Third-party services

Google / YouTube: We use the YouTube Data API v3 under Google's API Terms of Service. Your use of YouTube features within Trendora is also subject to Google's Privacy Policy at policies.google.com/privacy.

Stripe: Payment processing. Subject to Stripe's Privacy Policy.

Supabase: Database and authentication hosting. Data is stored on servers in the EU.

Resend: Email delivery for weekly reports and account notifications.

Vercel: Application hosting. Servers located in the EU and UK.

Groq / OpenRouter: AI inference providers used to analyse comment patterns. Comment data is sent to these providers for processing and is not retained by them beyond the API call.

7. Your rights under UK GDPR

You have the right to:

  • Access — request a copy of the personal data we hold about you
  • Rectification — ask us to correct inaccurate data
  • Erasure — request deletion of your account and personal data
  • Portability — receive your data in a machine-readable format
  • Restriction — ask us to limit processing of your data
  • Object — object to processing based on legitimate interests

To exercise any of these rights, email hello@trendora.co. We will respond within 30 days. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk.

8. Revoking YouTube access

You can revoke Trendora's access to your YouTube account at any time by visiting myaccount.google.com/permissions and removing Trendora from the list of connected apps. Revoking access will stop new data collection but does not automatically delete existing reports — email us to request full deletion.

9. Cookies

We use a single session cookie to keep you signed in. We do not use advertising cookies or third-party tracking pixels. No cookie consent banner is required as we only use strictly necessary cookies.

10. Changes to this policy

We may update this policy from time to time. We will notify active subscribers of material changes by email at least 14 days before they take effect. Continued use of Trendora after changes constitutes acceptance of the updated policy.

11. Contact

For any privacy-related questions, contact us at hello@trendora.co.