Privacy Policy

1. What we collect

We collect only what is necessary to provide the service: your email address (used to authenticate your account and associate your purchased kit entitlements), the raw idea text you submit through the funnel, and anonymous usage signals (idea generation counts) used to enforce plan limits.

Payment is processed entirely by Polar (our payment provider). TrendLens never sees or stores your card number or billing address — only the fact that your order was completed and the amount paid.

2. How we use it

• To authenticate you and retrieve your entitlements across sessions.
• To generate your MVP build kit using third-party AI APIs (your idea text is sent to the AI provider for generation, subject to their data policies).
• To enforce plan limits (Free: 1 build kit; Trial: 10 build kits; Lifetime: unlimited).
• To send transactional emails about your account or order if necessary.

We do not sell your data, use it for advertising, or share it with third parties beyond what is required to operate the service (Supabase for database hosting, AI API providers for generation, Polar for payments).

3. Data retention

Your account data (email, entitlements, usage counters) is retained as long as your account exists. Generated build kit content is stored in our database so you can revisit your results. You may request deletion of your account and associated data by contacting us — see Section 7.

4. Cookies and local storage

We use a session cookie set by our authentication provider (Supabase) to keep you logged in. We do not use advertising or tracking cookies. No third-party analytics scripts are loaded.

5. Security

Data in transit is encrypted via TLS. Data at rest is stored in Supabase with row-level security policies. Webhook signatures are verified before any entitlement is granted. We do not log raw idea text beyond what is required for generation.

6. Third-party services

• Supabase — database and authentication hosting.
• Polar — payment processing.
• AI API providers (OpenAI, Google, Anthropic) — idea-to-kit generation. Your idea text is transmitted to one of these providers per generation request.
• Cloudflare — network edge and bot protection (Turnstile CAPTCHA on sign-up flows).

7. Contact & deletion requests

To request deletion of your data, or for any privacy-related question, email us at admin@trendlens.uk. We will respond within 30 days.

8. Changes to this policy

We may update this policy as the service evolves. Material changes will be communicated via the email on file. Continued use of the service after notice constitutes acceptance of the updated policy.