Privacy Policy

Trendit is an autonomous business profile management platform developed and operated by Trendexhub, a software company registered in Uganda. This Privacy Policy explains how Trendit collects, discloses, and protects information when you use the platform to manage your Google Business Profile, Google Ads campaigns, and related Google services.

By using Trendit, you agree to the practices described in this policy. If you do not agree, please discontinue use of the platform. For questions, contact us at info@trendexhub.com.

Trendit accesses the following Google APIs on your behalf, solely to provide the features described in this policy:

• Google Business Profile API — to manage your business listing, publish posts, respond to customer reviews, answer questions, update business information, manage photos and media, and retrieve performance insights.
• Google Ads API — to read campaign performance data, monitor ad spend, retrieve impression and click metrics, and surface advertising insights within the Trendit dashboard. Trendit does not create, modify, or delete Google Ads campaigns without your explicit instruction.
• Google OAuth 2.0 — to authenticate your identity and authorise Trendit to access only the Google services you explicitly grant permission for.

Data obtained through these Google APIs is used exclusively to provide and improve the Trendit service to you. Trendexhub does not use this data to serve advertisements, sell it to third parties, or use it for any purpose unrelated to the functionality described in this policy. Google user data is never used for training machine learning models outside of the direct service.

Trendexhub collects only the information necessary to operate the Trendit platform:

• Google OAuth credentials — access tokens and refresh tokens that authorise Trendit to act on your behalf. Tokens are stored in encrypted environment variables and are never shared with third parties.
• Google Business Profile data — your business name, address, phone number, category, hours of operation, service list, posts, photos, and customer reviews retrieved via the Google Business Profile API.
• Google Ads data — campaign names, impression counts, click data, cost metrics, and performance summaries retrieved via the Google Ads API. This data is used solely to display advertising performance within your Trendit dashboard.
• Review and Q&A content — customer review text, star ratings, and questions retrieved from your Google Business Profile listing in order to generate automated responses on your behalf.
• Performance insights — search impression counts, direction requests, phone call counts, and engagement metrics from Google Business Profile Insights.
• Audit log data — a record of autonomous actions taken by the Trendit agent (posts published, replies sent, actions skipped, policy rejections), retained in a server-side ring buffer of approximately 500 entries for your review and cleared on each deployment.

Information collected via Google APIs is used solely to provide the Trendit service as described below. No Google user data is used for any secondary purpose.

• Authenticating your account and maintaining a valid Google API session.
• Autonomously publishing daily business posts to your Google Business Profile.
• Drafting and submitting replies to 4-star and 5-star customer reviews on your behalf.
• Retrieving and displaying Google Business Profile performance data in your Trendit dashboard.
• Retrieving and displaying Google Ads campaign performance data in your Trendit dashboard.
• Logging all autonomous actions to an audit trail accessible only to you.
• Improving the accuracy of automatically generated content through direct service feedback (no data is shared externally for this purpose).

Trendexhub does not sell, rent, or share your Google API data with any third party, except as required to operate the platform:

• Google LLC — API calls are made directly to Google's servers. Your data is subject to Google's Privacy Policy.
• Google Gemini API — used solely to generate automated post drafts and review reply drafts. Prompts include anonymised business context (business name, category, tone). No customer personal data, no review author names, and no Google Ads financial data are included in prompts sent to Gemini.
• Cloud infrastructure providers — used to host and operate the Trendit service. Data handling is limited to what is required to provide the service.

We do not share Google user data with any advertising networks, data brokers, analytics platforms, or other third parties beyond those listed above.

Trendit is deployed on cloud infrastructure with the following security measures in place:

• All API credentials and OAuth tokens are stored as encrypted environment variables — never in source code or logs.
• All communications between Trendit and Google APIs use HTTPS/TLS encryption.
• All Trendit API endpoints are protected by API key authentication: no endpoint is publicly accessible without a valid key.
• Business profile data retrieved from Google APIs is processed in-memory during each request and is not written to any persistent third-party database.
• Google Ads performance data is fetched on-demand and displayed in-session; it is not stored beyond the duration of the API response.
• The autonomous audit log is maintained as an in-memory ring buffer and is cleared on each redeployment.

Trendexhub retains your API credentials and configuration for as long as your account is active. To request deletion of your data:

• Revoke Google access — remove Trendit from your Google Account's authorised applications at myaccount.google.com/permissions. This immediately invalidates all OAuth tokens and prevents any further API access.
• Contact us — email info@trendexhub.com to request removal of any stored configuration or credentials. We will process deletion requests within 30 days.

You have the right to:

• Access the configuration data Trendexhub holds about your business.
• Correct any inaccurate configuration information.
• Request deletion of your data at any time (see Section 7).
• Withdraw consent by revoking Google API access at any time — this will immediately stop all autonomous actions.
• Receive a copy of your audit log data.

Trendit is a business management tool for use by business owners and their authorised staff. It is not intended for use by individuals under the age of 18. Trendexhub does not knowingly collect personal data from minors.

Trendexhub may update this Privacy Policy to reflect changes in our practices or applicable law. Material changes will be communicated by updating the "last updated" date at the top of this page. Continued use of Trendit following any change constitutes acceptance of the revised policy.

For any questions or concerns regarding this Privacy Policy or our data practices, please contact: