Privacy policy
Last updated . Terms of service
1. Who we are
This policy explains how HVSCALE SERVICES - FZCO (doing business as Trendtrack), registered under license number 001 - 55425, with its office at IFZA Business Park, DDP, Building A1, Dubai Digital Park, Dubai Silicon Oasis, Dubai, United Arab Emirates ("we", "us", "our"), collects, uses and shares personal data when you use the Trendtrack marketplace (the "Marketplace"). We are the controller of that data. Questions and requests go to contact@trendtrack.io.
The Marketplace is covered by this policy and by our terms of service. Trendtrack's other products on trendtrack.io have their own privacy policy.
2. What we collect
Your account. Your name, email address and password (stored only as a hash). If you sign in with Google, Google shares your name, email address and profile picture with us. For each signed-in session we keep the IP address and browser it was opened from, so you and we can spot a session that is not yours.
Your profile and onboarding. Your handle, display name, photo, bio, country, city, markets and website, and your onboarding answers: for buyers, things like your company, platform, revenue range, team size, timeline and needs; for sellers, your kind of business, size, experience, markets and services; and how you heard about us.
What you publish as a seller. Freelance and agency profiles (rates, minimum project, offices), team members and invites, gigs, case studies, and the images and videos you upload with them. We strip hidden metadata, such as location, from uploaded images.
What you publish as a buyer. Requests, their budget and the images you add to them.
Messages and reviews. The conversations you take part in and the messages you send, the reviews you write and the scores in them, and the notifications we send you.
How you use the Marketplace. The words you search for (with any email address removed), the listings shown to you and their place, the gigs you open and the sellers you contact, your approximate country and preferred language (from your connection and browser, not your exact location), and whether you are online, to show a green dot to the people you talk to.
Our team's decisions. Moderation outcomes (approved or refused gigs, requests and reviews), reputation entries and the internal reputation score of each seller and buyer, and an audit log of every action our team takes.
3. Why we use it, and on what basis
- To run the Marketplace (your account, your listings, messages, notifications and emails about your account): to perform our contract with you.
- To review content and keep the Marketplace safe (moderation, rate limits, fraud and abuse detection, our audit log): our legitimate interest in a trustworthy marketplace, and our legal obligations.
- To rank listings (search relevance and reputation, as described in our terms): our legitimate interest in showing buyers the best matches.
- To measure and improve the Marketplace (search statistics, seller analytics, error reports, cookieless visit counts): our legitimate interest in a product that works.
- Analytics cookies and session replay: only with your consent, which you can withdraw at any time.
We do not sell your personal data and we do not use it for advertising. We do not make decisions with legal or similarly significant effects about you by automated means alone: rate limits slow down unusual traffic, and a person on our team takes every moderation decision.
4. Who can see what
Published seller profiles, gigs, case studies and approved reviews are public, and search engines may index them. Published requests are public with the buyer's handle, name and photo. A message is visible only to the people in its conversation. Your email address is never shown to other members. Reputation scores are visible only to our team.
5. Service providers
These providers process personal data on our behalf, under contracts that limit them to our instructions:
- Cloudflare: Runs the website and the Marketplace's servers (Workers) and their connection to the database (Hyperdrive), and stores accounts and sessions (D1), uploaded images and videos (R2), online status (KV) and the queue that carries usage events to analytics (Queues). Its AI models (Workers AI) read search requests to suggest filters and turn listings and searches into vectors for search by meaning.
- PlanetScale: Hosts the Marketplace's main database (Postgres): profiles, agencies, gigs, requests, case studies, conversations and messages, reviews and notifications.
- ClickHouse Cloud: Stores usage analytics: searches and the listings they showed, gig views and contacts, activity timelines and our team's audit log. Identified by account ids, never by name or email.
- PostHog (US cloud): Product analytics: page views and actions on the site, and session replays with every field masked when you accept analytics cookies. Some account events (for example signing up or publishing a request) are sent under your account id, without your name or email.
- Upstash: Counts requests for rate limits (Redis), keyed by your account id or by a one-way hash of your IP address, never the address itself.
- Better Stack: Collects error reports, logs and performance traces so we can find and fix problems. Reports carry at most your account id: no cookies, request bodies, IP addresses, names or emails.
Google processes your data as a separate controller when you choose to sign in with it. We may also disclose personal data when the law requires it, or to protect members or the Marketplace when someone breaks our terms.
6. International transfers
Some of these providers store or process data outside your country, including in the United States. Where the law requires it, transfers outside the European Economic Area are covered by appropriate safeguards, such as the European Commission's Standard Contractual Clauses.
8. How long we keep it
We keep your account and what you publish for as long as your account is open, and delete it when you ask us to close the account, except where the law requires us to keep something longer or we need it to handle a dispute or abuse. Usage analytics are tied to account ids, not names, and are kept only as long as they are useful to run and improve the Marketplace. Invites expire after 14 days unless our team sets another date, and email verification links after one hour.
9. Your rights
Depending on where you live, you have the right to:
- access your personal data and get a copy of it;
- correct data that is inaccurate or incomplete;
- have your data deleted;
- restrict or object to some uses of it, including those based on legitimate interest;
- receive the data you gave us in a portable format;
- withdraw your consent at any time, without affecting what was done before;
- if you live in California or another US state with a privacy law, know what we collect and share, and appoint an authorized agent. We do not sell or share personal data for advertising.
Write to contact@trendtrack.io from the address on your account. We answer within one month, and we will not treat you differently for using these rights. You can also complain to the data protection authority where you live.
10. Security
Connections are encrypted, passwords are hashed, IP addresses used for rate limits are hashed before they are stored, and our team's access to the admin tools is restricted and logged. No system is perfectly secure, so tell us at contact@trendtrack.io if you notice something wrong.
11. Children
The Marketplace is for businesses and is not meant for children. If you believe a child has given us personal data, contact us and we will delete it.
12. Changes
When we change this policy, we update the date at the top. When a change matters, we tell you before it applies, on the Marketplace or by email.
13. Contact
HVSCALE SERVICES - FZCO, IFZA Business Park, DDP, Building A1, Dubai Digital Park, Dubai Silicon Oasis, Dubai, United Arab Emirates. Email: contact@trendtrack.io. Email is not always secure, so please do not send sensitive information that way.