Privacy Policy
1 — Who are we?
Trendl is a software company offering quantitative trading software and execution technology for NQ futures. Trendl can be reached at info@trendl.io.
Trendl is a trade name of CollaborIT Management & Advies B.V., registered at Anna van Renesselaan 106, 1911 KS Uitgeest, CoC 08152819. CollaborIT Management & Advies B.V. is the data controller within the meaning of the General Data Protection Regulation (GDPR) for the personal data that Trendl processes in the context of its services.
2 — What data do we process?
2.1 Data you provide during registration
- Name (first and last name)
- Email address
- Phone number
- Password (stored as a bcrypt hash — never readable by Trendl)
2.2 Data we collect automatically during use
- IP address and device type upon login
- Language preference (NL/EN)
- Notification settings
2.3 Data we collect in the context of our services
- Subscribed product (type and name of the Trendl subscription chosen by the Client)
- Subscription status and start date
- Per Trade Signal: time of receipt, confirmation choice by the Client, time of confirmation — recorded in the audit log
- Executed trades and results (based on the IBKR connection, if applicable to the subscribed product)
- Push notification subscription tokens
2.4 Data we do not process
- Bank account numbers or payment details (payments are processed via an external payment provider)
- Copy of identification document (KYC/AML is handled by Interactive Brokers, not by Trendl)
- Financial data other than trade results arising from the Trendl service
3 — What do we use your data for?
| Purpose | Legal basis | Retention period |
|---|---|---|
| Performance of the Agreement (app access, signal delivery, order routing) | Performance of contract (Art. 6(1)(b) GDPR) | Duration of subscription + 2 years |
| Audit log of confirmation choices (legal basis: client autonomy) | Legitimate interest (Art. 6(1)(f) GDPR) | 7 years |
| Invoicing and performance fee (HWM calculation) | Performance of contract + legal obligation | 7 years (fiscal retention obligation) |
| Push notifications (signal delivery) | Consent (Art. 6(1)(a) GDPR) | Until consent is withdrawn |
| Service communications (updates, changes) | Legitimate interest | Duration of subscription + 1 year |
| Security and fraud prevention | Legitimate interest | 1 year |
4 — Who do we share your data with?
Trendl only shares your data in the following cases:
Interactive Brokers Ireland Ltd. (Broker): for products where technical order routing via the Broker applies, order instructions are submitted on behalf of the Client to Interactive Brokers via the IBKR Client Portal Web API. This requires an account with Interactive Brokers, to which Interactive Brokers' privacy policy applies.
Payment provider: payment data is processed by the payment provider appointed by Trendl (Stripe or Mollie). Trendl does not have access to your full payment details.
Email provider: Trendl uses Microsoft 365 for email communications. Emails are processed via Microsoft servers in the EU.
Legal obligations: Trendl may provide data to competent authorities if required by law.
Trendl does not sell your personal data to third parties and does not share it with advertisers.
5 — Security
Trendl takes appropriate technical and organizational measures to protect your personal data against unauthorized access, loss, or misuse:
- Passwords are stored as bcrypt hashes (never readable)
- All communication is conducted exclusively via HTTPS (TLS)
- JWT tokens have a limited validity period
- Access to management systems is restricted via IP whitelisting and two-factor authentication (Microsoft 2FA)
- Sessions are managed server-side with an invalidation chain
6 — Your rights under the GDPR
You have the following rights regarding your personal data:
- Right of access: you may request which data we hold about you.
- Right to rectification: you may have incorrect data corrected.
- Right to erasure: you may request the deletion of your data, insofar as this does not conflict with statutory retention obligations.
- Right to restriction of processing: in certain cases you may request that processing be restricted.
- Right to data portability: you may request your data in a structured format.
- Right to object: you may object to processing based on legitimate interest.
- Right to withdraw consent: if processing is based on your consent (e.g. push notifications), you may withdraw this consent at any time via the Application.
Requests can be sent to info@trendl.io. We will respond within 30 days.
You also have the right to file a complaint with the Dutch Data Protection Authority (autoriteitpersoonsgegevens.nl).
7 — Cookies and similar technologies
The Trendl website (trendl.io) uses:
- Functional cookies: necessary for the operation of the website (language preference, session). No consent required.
- Analytical cookies: if used, only after your consent.
The Trendl application (app.trendl.io) stores the following data in your browser:
- JWT authentication token (localStorage) — required for access
- Language preference
8 — Changes
Trendl reserves the right to amend this Privacy Policy. Changes will be published on trendl.io. In the event of material changes, we will notify you via email or the Application.
9 — Contact
For questions about this Privacy Policy or your personal data:
Trendl
info@trendl.io · trendl.io
Questions? info@trendl.io