You agree to the privacy policy below, and the Privacy Policy for Substack, the technology provider.

TREND PULSE – PRIVACY POLICY

Effective Date: January 22, 2026

Last Updated: January 22, 2026

1. INTRODUCTION

Trend Pulse ("we," "us," or "our") respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our newsletter, reports, digital products, and related services (collectively, the "Service").

By accessing or using our Service, you consent to the data practices described in this policy.

2. INFORMATION WE COLLECT

2.1 Information You Provide Directly

· Account Information: Name, email address, password, payment information (processed securely via Stripe or other PCI-compliant processors)

· Profile Information: Job title, business type, interests (optional)

· Communication Data: Emails, messages, feedback, survey responses

· Subscription Preferences: Newsletter settings, content interests

2.2 Information Collected Automatically

· Usage Data: Pages viewed, time spent, links clicked, download history

· Device Information: IP address, browser type, operating system, device identifiers

· Location Data: General location (country/region) based on IP address

· Cookies & Tracking Technologies: See Section 6 for details

2.3 Information From Third Parties

· Payment Processors: Confirmation of payment, subscription status

· Analytics Providers: Aggregated usage statistics

· Social Platforms: If you connect via social login (optional)

3. HOW WE USE YOUR INFORMATION

Purpose Legal Basis

To deliver Trend Pulse newsletters, reports, and paid content Performance of contract

To process payments and manage subscriptions Performance of contract

To send service announcements and updates Legitimate interests

To personalize content recommendations Legitimate interests

To analyze usage and improve Service quality Legitimate interests

To detect and prevent fraud, abuse, security issues Legitimate interests

To comply with legal obligations Legal compliance

To conduct market research (aggregated/anonymous) Legitimate interests

4. HOW WE SHARE YOUR INFORMATION

4.1 Service Providers

We share data with trusted third parties who assist in:

· Payment processing (Stripe, PayPal)

· Email delivery (ConvertKit, Substack)

· Analytics (Google Analytics, Fathom)

· Customer support (Help Scout, Zendesk)

· Hosting and infrastructure (Vercel, AWS)

These providers are contractually obligated to protect your data.

4.2 Legal Requirements

We may disclose information if required by law, subpoena, or legal process, or to protect:

· Our rights, privacy, safety, or property

· The rights, privacy, safety, or property of our users

· To enforce our Terms of Service

4.3 Business Transfers

In the event of a merger, acquisition, or asset sale, your information may be transferred as part of that transaction.

4.4 Aggregated/Anonymous Data

We may share aggregated or anonymized data that cannot identify you for:

· Market analysis

· Industry reporting

· Research purposes

5. DATA RETENTION

We retain your personal data only as long as necessary:

· Active subscribers: For duration of subscription + 3 years

· Inactive accounts: 2 years after last engagement

· Payment records: 7 years for tax/legal compliance

· Analytics data: 26 months (anonymized thereafter)

You may request earlier deletion (see Section 9).

6. COOKIES & TRACKING TECHNOLOGIES

6.1 Types We Use

· Essential: Required for Service functionality (login, payments)

· Performance: Analytics to improve Service (anonymous)

· Functional: Remember preferences (language, time zone)

· Marketing: To measure campaign effectiveness (with consent)

6.2 Your Choices

· Browser settings to block/delete cookies

· Privacy extensions (Ghostery, Privacy Badger)

· Our cookie preference center (when available)

· Note: Disabling essential cookies may limit Service functionality

7. DATA SECURITY

We implement appropriate technical and organizational measures:

· Encryption: TLS/SSL for data in transit, AES-256 for data at rest

· Access controls: Role-based access, multi-factor authentication

· Regular audits: Security assessments and penetration testing

· Employee training: Privacy and security awareness

· Incident response plan: For potential data breaches

No system is 100% secure. You are responsible for maintaining your password confidentiality.

8. INTERNATIONAL DATA TRANSFERS

We operate globally and may transfer data to countries with different privacy laws. When we do, we ensure appropriate safeguards:

· Standard Contractual Clauses (EU)

· Privacy Shield certification (where applicable)

· Your explicit consent when required

9. YOUR DATA RIGHTS

Depending on your location, you may have the right to:

· Access: Request copies of your personal data

· Rectification: Request correction of inaccurate data

· Erasure: Request deletion ("right to be forgotten")

· Restriction: Request limitation of processing

· Portability: Request transfer of your data

· Objection: Object to certain processing

· Withdraw consent: Where processing is based on consent

To exercise these rights, contact: privacy@trendpulse.co

We respond within 30 days and will not discriminate against you for exercising your rights.

10. CHILDREN'S PRIVACY

Our Service is not intended for individuals under 18. We do not knowingly collect data from children. If we learn we have collected such data, we will delete it promptly.

11. CALIFORNIA PRIVACY RIGHTS (CCPA/CPRA)

California residents have additional rights:

· Know what personal information is collected, used, shared, or sold

· Delete personal information

· Opt-out of sale of personal information (we do not sell personal data)

· Non-discrimination for exercising rights

· Limit use of sensitive personal information

To exercise California rights, use the contact method above or call: [Your Toll-Free Number]

12. EUROPEAN DATA PROTECTION RIGHTS (GDPR)

If you are in the European Economic Area, you have rights under GDPR as outlined in Section 9. Our Data Protection Representative in the EU is: [Name/Company, Address, Email]

13. THIRD-PARTY LINKS

Our Service may contain links to third-party websites. We are not responsible for their privacy practices. We encourage you to review their privacy policies.

14. DO NOT TRACK SIGNALS

We do not currently respond to Do Not Track browser signals due to lack of standardized approach. We will reevaluate if a standard emerges.

15. CHANGES TO THIS POLICY

We may update this Privacy Policy periodically. We will notify you of material changes by:

· Email notification to subscribers

· Notice on our website

· Updated effective date

Your continued use after changes constitutes acceptance.

16. CONTACT US

For privacy-related questions or to exercise your rights:

Email: thetrendpulse@zohomail.com

Address: Norman, OK 73069

Data Protection Officer: [Name/Email if applicable]

17. COMPLAINTS

You have the right to lodge a complaint with a supervisory authority, particularly in your country of residence.

---

KEY SUMMARY IN PLAIN LANGUAGE

· We collect what you give us (email, payment info) and basic usage data

· We use it to deliver your subscription, improve our service, and prevent fraud

· We share only with essential service providers and when legally required

· We protect your data with industry-standard security

· You control your data – access, correct, delete, or export it anytime

· We don't sell your personal information to third parties

· Questions? Email privacy@thetrendpulse@zoho.com

---

IMPLEMENTATION CHECKLIST

1. Update placeholders: [Your Business Address], [Your Toll-Free Number], [EU Representative]

2. Add to website: Create /privacy page, link in footer and signup flows

3. Cookie banner: Implement if using non-essential cookies

4. Email update: Send to existing subscribers about policy update

5. Data mapping: Document where all data flows (internal tool recommendation: Airtable/Notion)

6. Process for requests: Set up system to handle data rights requests within 30 days

7. Team training: Ensure all team members understand privacy obligations

---