Privacy policy

Account data: your name, email address, password (stored as a hash) and, if you turn it on, two-factor authentication settings.

Workspace data: your workspace, its members and their roles, your brands and their settings (country, language, budgets, margins, pricing rules).

Connected accounts, only when you connect them yourself:

• TikTok ad accounts (TikTok for Business): advertiser ID, name, currency, time zone and an access token.
• TikTok profiles (Login Kit): your TikTok open ID, display name, avatar, and access and refresh tokens. We request only the user.info.basic, video.publish and video.upload permissions.
• Shopify stores: shop domain, granted scopes and an access token.

Product and campaign data: the TikTok links and product links you import, AI analysis results, supplier listings, prices and margins, links and IDs of approved videos, the campaigns we create for you and their hourly statistics (spend, impressions, clicks, conversions, revenue).

Activity records: approvals, publications, launches, budget changes and connection changes are logged for your workspace's audit trail.

Trendcart does not store video files. For candidate videos we keep only the TikTok link, author, thumbnail link and public metadata. A video is analyzed by streaming it to the AI provider, and only the result is kept.

When you approve a video, it is uploaded to your own Shopify store as product media and, if you choose, to your TikTok ad account or posted to your connected TikTok profile. When you reject or remove it, we delete it from your Shopify store.

We use data from TikTok only to provide the features you ask for, on the accounts you connected:

• Showing which profile or ad account is connected.
• Posting the videos you approve to your TikTok profile. Nothing is posted without your action, and posts stay private until TikTok allows public posting for our app.
• Uploading your approved videos to your ad account, creating campaigns, ad groups and ads in a paused state, launching them only after a person on your team approves, and reading their statistics.

We do not sell TikTok data, use it for advertising profiles, or share it with anyone other than the service providers listed below. You can disconnect a TikTok account at any time from the Connections page, and revoke our access from your TikTok or TikTok for Business settings.

• To run the service you signed up for: import, analysis, sourcing, page building, publishing and campaigns.
• To keep accounts secure, prevent abuse and enforce workspace roles.
• To send service emails: email verification and workspace invitations.
• To meet legal obligations.

We process data to perform our contract with you and, for security and abuse prevention, on our legitimate interest in keeping the service safe.

We share data with these providers only as needed to run the service:

• Hosting and infrastructure: Vercel (application hosting), Neon (database), Upstash (rate limiting).
• Email: Resend (account emails).
• AI processing: Google (Gemini), Anthropic (Claude), OpenAI and Perplexity, to identify products, check videos against ad rules and write product copy.
• Product research: SerpApi, Firecrawl and a TikTok data provider, to find listings and related public TikTok videos.
• Platforms you connect: TikTok and Shopify, under their own privacy policies.

Some of these providers process data outside your country. Where required, they are bound by appropriate safeguards such as standard contractual clauses.

Access tokens and other credentials are encrypted at rest with AES-256-GCM. Every workspace's data is kept separate, and each action checks the user's role. Connections use HTTPS.

We keep your data while your workspace is active. Disconnecting an account deletes its tokens from our side. When you ask us to delete your account or workspace, we delete its data within 30 days, except records we must keep by law.

Data already sent to your own Shopify store or TikTok accounts stays there under your control.

Trendcart uses only the cookies it needs to work: a session cookie to keep you signed in, and short-lived cookies that protect sign-in and account connections. Your light or dark theme choice is saved in your browser's local storage. We do not use advertising or tracking cookies.

Depending on where you live, you can ask to access, correct, export or delete your personal data, object to or restrict its processing, and complain to your data protection authority. To make a request, contact us using the details below.

Trendcart is a business tool and is not meant for anyone under 18.

We will update this page when our practices change and change the date at the top. For significant changes, we will notify workspace owners by email.