Privacy Policy

Virtuoz Solutions, France. Infrastructure hosting is provided by Hostinger.

Trendr is an online studio for creating fictional adult personas, storing visual references, queueing image or video generations, and tracking the related credit balance.

The data controller is the operator of the Trendr service. For any privacy request, contact support@trendr.app.

Trendr processes the following categories of data when you use the service:

• account data: email address, hashed password, role, available credits, creation date, and update date;
• session data: the HTTP-only authentication cookie, user identifier, and role stored in the session token;
• production data: fictional adult personas, fictional ages, descriptions, prompts, negative prompts, reusable references, generation settings, queued jobs, errors, and history;
• media data: images uploaded by the user, generated images or videos, file paths, internal public URLs, MIME type, and known dimensions or duration;
• credit data: credit ledger entries, job cost, balance after each operation, automatic refunds, and admin credit grants;
• communication data: preferred language, marketing email preference, email template, delivery status, provider message identifier, and delivery errors;
• technical data: server logs, error traces, and information needed for security, maintenance, and diagnosis.

Trendr is not designed to receive sensitive data, identity documents, medical information, payment data, or images of minors.

The data is processed for the following purposes:

• creating an account, authenticating the user, and maintaining a secure session;
• providing the studio: personas, references, media library, generation queue, and history;
• sending prompts, references, and generation parameters to AI providers as needed to produce media;
• calculating, debiting, refunding, and auditing credits;
• sending account and billing emails required to operate the service, and sending product or editorial news only when the user has opted in;
• enforcing safety rules: fictional adults only, no minors, no real-person impersonation, and no explicit sexual content;
• maintaining the service, preventing abuse, providing support, and resolving incidents.

The main legal bases are performance of the requested service, Trendr's legitimate interest in operating and securing the service, and applicable legal obligations where specific data must be retained. Consent is used for optional product and editorial emails and may be withdrawn at any time in the account settings.

Trendr uses technical providers to produce images, videos, and production assistance text. The current service sends generation requests to external providers and, when configured, uses a text assistance service to rewrite some blocked prompts or generate Instagram caption suggestions.

These operations may include prompts, reference images, media URLs, generation parameters, and a technical end user identifier. These providers may process data outside the European Union under their own contractual terms and security measures.

Google acts as an authentication provider when you choose Google sign-in. Trendr receives your verified email address and stable Google account identifier; it does not receive your Google password.

When email delivery is configured, Resend processes recipient addresses and email content on Trendr's behalf to send operational messages and consented product or editorial updates.

Trendr does not sell user data, does not use it for targeted advertising, and does not run marketing profiling in the current service.

Uploaded and generated media are stored outside the application's public directory. Access from the studio requires an authenticated account authorized for the asset. Short-lived signed links may be generated when an external AI provider needs to read a reference image to perform a requested generation.

Do not upload confidential documents, real faces without authorization, illegal content, or any content you do not have the right to host and transmit to the configured generation providers.

Trendr uses a session cookie named trendr_session. It is HTTP-only, SameSite Lax, valid for up to 30 days, and necessary to log in to the studio.

During Google sign-in, Trendr uses a short-lived HTTP-only cookie named trendr_google_oauth to protect the OAuth flow. It expires after 10 minutes.

Studio language: trendr_locale (SameSite=Lax · Max-Age=31536000).

With your consent, Trendr uses Google Analytics 4 to measure visits, page views, navigation paths, interactions, and conversions. Trendr does not send your email address, prompts, generated media, or other directly identifying content to Google Analytics.

Google Analytics is disabled until you select Allow analytics. Your choice is stored in the trendr_analytics_consent cookie for 180 days. If enabled, Google may set cookies such as _ga and _ga_<container-id>; their default retention can be up to two years.

You can change your choice at any time with the Cookie settings button. Refusing analytics does not affect access to the service. Advertising storage and ad personalization remain disabled.

Account data, production data, credit data, and media are retained while the account remains active or while they are needed to operate the service. You may request deletion by contacting the email address above.

Some information may be retained longer where necessary for security, proof of an operation, dispute handling, abuse prevention, or compliance with a legal obligation. Technical backups may remain until their normal rotation.

Email delivery records are retained as needed to prevent duplicate messages, retry temporary failures, and investigate delivery issues. The marketing preference is retained until it is changed or the account is deleted.

Depending on the applicable law and conditions, you may request access to your data, correction, deletion, restriction of processing, portability, or object to certain processing.

To exercise these rights, contact support@trendr.app. If you are in the European Union, you may also lodge a complaint with your local data protection authority, including the CNIL in France where applicable.

Trendr applies security measures suited to the current service: hashed passwords, HTTP-only session cookies, account-based application access, per-user data filtering in queries, and limited administrator access.

You remain responsible for keeping your password confidential, choosing what files you upload, writing lawful prompts, and deciding how generated media is used. The full usage rules are available in the Terms of Use.