Legal

Privacy Policy

Last updated: October 1, 2026

This Privacy Policy explains how DIVISION99 LLC ("TrendGap", "we", "us"), the company behind TrendGap.io, collects, uses, shares, and protects information when you visit our website or use our services (the "Service"). By using TrendGap, you agree to the practices described here.

1. Information We Collect

We collect the following categories of information:

  • Account information. Name, email address, and authentication credentials when you sign up. If you sign in with Google, we receive your name, email, and profile picture from Google.
  • Billing information. Plan, billing cycle, and subscription status. Payments are handled by Polar, our merchant of record; your card details go directly to Polar and its payment processor and never touch our servers.
  • Usage data. Niches you save or track, ideas you submit to the evaluator, feature interactions, and aggregated activity used to improve the Service.
  • Device and log data. IP address, browser type, device identifiers, referring URL, and timestamps. Used for security, debugging, and analytics.
  • Cookies and similar technologies. Used for authentication, security, and preferences, and to remember how you first found us. See the Cookies section below.

2. How We Use Information

  • Provide, operate, secure, and improve the Service;
  • Authenticate you and maintain your session;
  • Process payments and manage subscriptions;
  • Generate AI-powered evaluations and recommendations you request;
  • Send transactional emails (receipts, security alerts, important product changes);
  • Send marketing emails — only if you opt in, and you can unsubscribe at any time;
  • Detect, prevent, and respond to fraud, abuse, and security incidents;
  • Comply with legal obligations.

3. Legal Bases (EEA / UK Users)

If you are in the European Economic Area or the United Kingdom, we process your data under the following legal bases: performance of a contract (delivering the Service you signed up for), our legitimate interests (improving the Service, security, fraud prevention), your consent (marketing communications), and compliance with legal obligations.

4. How We Share Information

We do not sell your personal data. We share data only with:

  • Service providers who help us run TrendGap, under contracts that require them to protect your data and use it only on our instructions:
    • Cloudflare — hosting, database, file storage, bot protection (Turnstile), and website analytics;
    • Zoho — delivery of our transactional emails through Zoho ZeptoMail (EU region), and our support mailbox;
    • OpenRouter — access to the AI models behind our AI features (see below).
  • Polar (polar.sh), our merchant of record, which sells our subscriptions, issues invoices and receipts, and handles sales tax and VAT. Card payments are processed for Polar by its payment processor, Stripe. To start a checkout we send Polar your name, email address, account ID, chosen plan, and how you first found us; to open its billing portal for you we send your account ID. Polar's own privacy policy also applies to the details you enter at checkout and in its portal.
  • Google, if you choose "Continue with Google" — Google confirms your identity and shares your name, email address, and profile picture with us.
  • Fonts and images from other sites — our pages load fonts from Google Fonts and some images (such as logos and badges) from the sites that host them, so those sites receive your IP address and browser details when your browser fetches them.
  • Legal and safety — when required by law, valid legal process, or to protect the rights, property, or safety of TrendGap, our users, or the public.
  • Business transfers — in connection with a merger, acquisition, or sale of assets, in which case continuity of this Policy will be required.

Our AI features send requests to OpenRouter, which passes them to the provider of the AI model that generates the answer. When you submit an idea to the AI evaluator, the idea text and the feedback style you chose are sent for processing; your name, email address, and account details are not. Niche blueprints (competitors, name ideas, and validation checklists) are generated from the niche's own details only and contain no information about you. We do not authorize providers to use your submissions to train their general-purpose models.

5. Data Retention

We keep account data for as long as your account is active. If you delete your account, we delete or anonymize your personal data within 30 days, except where we are required to retain it for legal, accounting, or fraud-prevention purposes. Aggregated and anonymized data may be retained indefinitely.

6. Security

We use industry-standard safeguards including encryption in transit (TLS), passwords stored only as one-way hashes, role-based access controls, and server-side checks that give each user access only to their own data. No system is perfectly secure, but we work hard to protect your data and we will notify affected users promptly if a breach occurs that materially impacts them.

7. Your Rights

Depending on where you live, you may have the right to access, correct, export, or delete your personal data; restrict or object to certain processing; and withdraw consent at any time. To exercise these rights, email privacy@trendgap.io. You also have the right to lodge a complaint with your local data protection authority.

8. International Transfers

TrendGap is operated from the United States. Our database is hosted by Cloudflare, primarily in the eastern United States, and the Service runs on Cloudflare's global network, so your requests may be handled in a data center near you. Our transactional emails are processed by Zoho ZeptoMail in the European Union. If you access the Service from outside the United States, your information will be transferred to and processed in the U.S. and other countries where we or our service providers operate. Where required, we rely on Standard Contractual Clauses or equivalent safeguards.

9. Cookies

We use only strictly necessary cookies:

  • Sign-in cookies. A session cookie is set when you sign in and kept until you sign out or the session expires. If you continue with Google, a second cookie protects that sign-in from forgery and expires within minutes. Both are HttpOnly, so scripts on the page cannot read them.
  • Security checks. When you sign up, sign in, or ask for a password reset or verification email, Cloudflare Turnstile checks that you are a person using technical signals from your browser and device, and Cloudflare may set its own security cookie for this.

We also keep a few small items in your browser's local storage: how you first found us (the referring site or campaign link and the page you landed on), which is saved with your subscription if you subscribe; whether you dismissed a site notice; and when you last opened your notifications. Our website analytics (Cloudflare Web Analytics) do not use cookies, and we do not use advertising cookies. You can clear cookies and local storage in your browser settings. Blocking the sign-in cookies will break sign-in and other core functionality.

10. Children's Privacy

TrendGap is not directed at children under 16, and we do not knowingly collect personal data from them. If you believe a child has provided us data, please contact us and we will delete it.

11. Changes to This Policy

We may update this Policy from time to time. If we make material changes, we will give you reasonable notice through the Service or by email before they take effect. The "Last updated" date above always reflects the most recent revision.

12. Contact

Questions or requests about your privacy? Email privacy@trendgap.io.

DIVISION99 LLC, 30 N Gould St, STE R, Sheridan, WY 82801, USA.