Privacy Policy

Who we are

TrendKit is a private creator relationship and campaign platform operated by Klastra. This policy covers our website, workspaces, public campaign applications and connected integrations. For privacy questions or data requests, email osman@klastra.ai.

Information we collect

We process account details such as your name, email, profile image and authentication information; workspace memberships; creator profiles and public social information; application answers and uploaded media; campaign content; messages; outreach history; and technical logs needed to operate and secure the service. Payment providers may process payment details when payment features are used.

Application forms and usage analytics

Application forms save a draft in this browser tab so an accidental refresh does not erase your work. Drafts expire after 24 hours; uploaded videos must be selected again. Avoid using a shared device for drafts. We collect per-visit random identifiers, field names, time spent, validation errors and submission outcomes to understand form completion. These analytics do not include typed answers, contact details, uploaded media, keystrokes or page recordings. Application answers are processed separately to review your application.

Where prior consent covers interaction analytics, we sample coarse cursor positions and scroll depth to improve the application form. We respect browser Do Not Track and Global Privacy Control signals by disabling application analytics. Usage events expire after 30 days and are accessible only to authorized campaign managers. Technical requests still pass through our infrastructure for security and service operation.

Connected Google mailboxes

When a workspace manager connects Gmail or Google Workspace for outreach, we request permission to send email and read messages. We send only campaigns you launch. We use mailbox history and campaign conversation identifiers to import replies to TrendKit outreach, and stop further follow-ups when a recipient replies. We do not import unrelated inbox conversations.

Connected mailbox addresses, campaign messages, replies and connection status are shared with authorized managers in that workspace. Refresh tokens are encrypted before storage. You can pause sending or disconnect a mailbox from Outreach → Mailboxes. Disconnecting removes its stored credential and stops future sending and reply syncing. Previously imported campaign replies remain part of the workspace records and follow its retention controls.

Google account and Calendar access

Google sign-in provides basic identity information to authenticate your account. If you separately connect Google Calendar, we request read-only calendar event access and your Google account email. We use event information, including titles, times, attendees and meeting links, to identify relevant creator meetings, display them in your workspace and schedule the recording notetaker you authorize. Calendar access does not authorize us to read Gmail messages or edit your calendar events.

Calendar integration is optional. You can disconnect it in Settings → Integrations and revoke access at Google Account connections. Revoking access stops future access; recordings and records already created remain subject to the retention and deletion controls below.

Recordings, transcripts and AI features

When enabled, our meeting provider Recall.ai receives the calendar information needed to synchronize meetings and send a clearly identified recording bot. Meeting recordings and transcripts are processed to provide playback, summaries, discussion notes and suggested next steps. Authorized workspace team members can access shared calls. Research features can use workspace transcripts and notes to answer questions. AI output can be inaccurate and should be reviewed before decisions are made. Meeting organizers must notify participants and obtain any consent required for recording.

How we use and share information

We use information to authenticate users, operate workspaces, manage creator relationships and campaigns, deliver requested communications, provide integrations, prevent abuse and respond to support requests. We share information with authorized workspace members and service providers needed to deliver those features, including Cloudflare for infrastructure and media storage, database and hosting providers, Recall.ai for meeting processing, and Amazon Web Services for email and AI processing. Data may be processed outside your country. We may also disclose information when legally required or necessary to protect users and the service.

We do not sell Google user data, use it for advertising, or use it to train generalized AI models. TrendKit’s use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including its Limited Use requirements.

Storage, security and retention

We restrict access through authentication and workspace permissions and use encrypted connections. We retain data while needed to provide the service, maintain records, resolve disputes or meet legal obligations. Records with a recovery feature remain restorable for 30 days after deletion and are then eligible for permanent removal, including associated media where supported. Backups, security logs, legal records and provider-held data may have separate retention periods. No system can guarantee absolute security.

Your choices and requests

You can update supported account details, disconnect integrations, use available delete and restore controls, and unsubscribe from marketing emails. Contact osman@klastra.ai to request access, correction, export or deletion of personal information, including information imported from Google. We may verify your identity and coordinate with the workspace administrator before completing a request. Operational account or application messages may still be sent when necessary.

Cookies and changes

We use cookies and browser storage to maintain sign-in sessions and workspace preferences. We may update this policy as the product changes and will update the effective date above. Material changes affecting how we use your information will be communicated through appropriate channels.