Privacy policy

This policy explains how Triple AI Global Solutions AB, trading as MegaTrend Spotter (“we”, “us”), collects, uses, and protects personal data when you use this application. We act as the data controller under the EU General Data Protection Regulation (GDPR).

Who we are

Triple AI Global Solutions AB (trading as MegaTrend Spotter) is a foresight tool for analysts. For privacy questions, contact privacy@megatrendspotter.com.

Data we collect

• Account data — email address and authentication identifiers when you sign up or sign in.
• Workspace content — scans, keywords, AI-synthesized trends, and visualizations you create.
• Usage data — if you accept analytics cookies, we record pages visited, device type, approximate location, and referring URL.
• Technical logs — server and error logs containing IP address and request metadata, retained briefly for security and debugging.

Why we use it (legal bases)

• Contract — to provide the service, authenticate you, and store your scans.
• Legitimate interest — to secure the service, prevent abuse, and improve reliability.
• Consent — for analytics cookies. You can withdraw consent any time from the cookie policy page.
• Legal obligation — where required by applicable law.

Who we share data with

• Stripe — our Merchant of Record and payment processor. When you purchase credits, Stripe Payments Europe, Ltd. collects and processes your billing information, payment details, and tax data to complete the transaction, handle invoicing, refunds, and tax compliance. See Stripe's privacy policy.
• Infrastructure providers — hosting, database, and authentication subprocessors that store and serve your data on our behalf.
• AI providers — model providers that process your prompts and keywords to generate scan output.
• Authorities — where required by law or legal process.

Data retention

• Account data — kept for the life of your account and deleted within 30 days after account closure, unless we must retain it for a legal obligation.
• Workspace content — kept until you delete it or close your account.
• Billing records — retained by Stripe and by us for up to 7 years to meet tax and accounting obligations.
• Technical logs — retained for up to 90 days, then deleted or anonymised.
• Analytics data — retained for up to 14 months.

Security

We apply appropriate technical and organisational measures to protect your data, including TLS encryption in transit, encryption at rest for databases and backups, role-based access controls, principle-of-least- privilege for staff access, audit logging, and routine dependency and infrastructure patching. Payment card data is handled exclusively by Stripe and never touches our servers.

Your rights

You may request access, correction, deletion, or export of your personal data at any time.

You also have the right to lodge a complaint with your local data protection supervisory authority.

Refunds

Refund eligibility and process are described in our refund policy.