1. Who we are
Trend Oracle is operated by ArcMedium.io (Netherlands). We are the data controller for your personal data under the EU General Data Protection Regulation (GDPR).
2. What we collect
- Account data: name, email, profile picture (via Google OAuth)
- Onboarding profile: persona, industries, region, audience age band, deliverable type, optional "trend itch" free-text
- Subscription data: tier, billing period, Stripe customer ID (no card details stored on our servers)
- Usage data: sign-in timestamps, dashboard views, exports generated
- Email: only if you opt into the weekly digest
3. Why we collect it (legal bases)
- Performance of contract: account, subscription, and usage data are required to provide the Service
- Legitimate interest: we use aggregated, anonymized usage data to improve the product
- Consent: the weekly digest is opt-in; you can withdraw consent any time in settings
4. Who we share it with (subprocessors)
- Stripe (Ireland) — payment processing
- Google (US/EU) — OAuth sign-in only
- Neon (US/EU) — database hosting (EU region: Frankfurt)
- Anthropic (US) — AI text generation. We send trend metadata (titles, tags, region) but no personal data, no PII
- Hetzner Cloud (Germany) — application hosting
We do not sell your data and we do not run third-party advertising or tracking scripts on the Service.
5. Retention
We retain account and subscription data while your account is active and for 12 months after cancellation for legal/accounting purposes, after which it is deleted. Onboarding profile data and digest preferences are deleted immediately upon account deletion.
6. Your rights (GDPR)
You have the right to:
- access a copy of your data (request via email)
- correct inaccurate data via the settings page or by emailing us
- delete your account (also deletes the underlying data)
- export your data in a portable format
- withdraw consent for opt-in features (e.g. weekly digest)
- lodge a complaint with the Dutch Data Protection Authority (Autoriteit Persoonsgegevens)
To exercise any of these rights, email hello@arcmedium.io — we will respond within 30 days.
7. Cookies
We use a minimal session cookie set by Auth.js to keep you signed in. We do not use third-party tracking or advertising cookies.
8. Changes
Material changes will be communicated by email at least 14 days before they take effect.
9. Contact
Privacy questions: hello@arcmedium.io