Privacy Policy

Effective date: April 26, 2026

Last updated: April 26, 2026

This policy explains what TrendForge.biz (“TrendForge”, “we”, “us”) collects when you join our waitlist, what we do with it, and what rights you have.

We're a small team. We collect as little as possible, we never sell your data or use it for advertising, and the only third parties who touch your data are the service providers we need to deliver the waitlist (each named below, each under a written data-protection contract). If you have any question about this policy, email hello@trendforge.biz.

Who we are

TrendForge.biz is operated by BJ Unlimited LLC, a Washington State limited liability company with its registered office at 522 W Riverside Ave #8421, Spokane, WA 99201.

For privacy questions and data-rights requests, contact hello@trendforge.biz. We have not appointed a Data Protection Officer because we are not required to do so under GDPR Article 37. The same address handles privacy matters.

What we collect

When you join the waitlist on trendforge.biz, we collect:

• The email address you submit. Providing it is voluntary; without it you can't join the waitlist.
• The page section you submitted from (hero or final CTA), so we can understand which message converts.
• UTM campaign tags from the page URL (such as utm_source, utm_medium, utm_campaign, utm_content, utm_term), if present. These tell us which marketing channel you arrived from.
• The timestamp of your submission and (if you confirm via the email link) the timestamp of your confirmation.
• Your IP address is processed transiently for rate-limiting (preventing abuse of the signup form). The IP is held in a short-lived record that automatically expires after 60 seconds and is not stored alongside your email.

We do not collect your name, precise location, payment information, browsing history outside this site, third-party social-media data, biometric data, advertising identifiers, or sensitive personal information of any kind.

When you visit any page on trendforge.biz, we use Vercel Analytics to count page views in aggregate. Vercel Analytics does not set cookies and does not assign you a persistent identifier. Vercel processes your IP address transiently to derive country and aggregate page-view data; consult Vercel's privacy documentation for details. We use this only to understand which pages people read and where they came from.

We do not use Google Analytics, Facebook Pixel, LinkedIn Insight Tag, or any other tracking pixel.

How we use what we collect

The only reason we collect your email is to:

• Send you the confirmation email (the “double opt-in”) that adds you to the confirmed waitlist.
• Email you when early access opens, and occasionally before that with product updates that are genuinely interesting (typically less than once a month before launch).

We will not use your email for advertising, retargeting, or to enrich third-party data sets. We will not sell, rent, or trade your email to anyone, ever. We do not make automated decisions about you and we do not profile you.

Why we're allowed to use your data (lawful basis under GDPR and UK GDPR)

Our lawful basis for processing your email is your consent, given when you submit the signup form and confirmed when you click the link in the confirmation email.

You can withdraw your consent at any time by emailing hello@trendforge.biz (we'll remove you from the waitlist immediately) or by clicking the unsubscribe link in any email we send. Withdrawing consent does not affect the lawfulness of processing that occurred before withdrawal.

How long we keep it

• Unconfirmed waitlist entries (you submitted the form but didn't click the confirmation link): we delete these after 30 days.
• Confirmed waitlist entries: we keep these until the earlier of (a) you asking us to remove your email, or (b) 24 months after we send the launch announcement, after which we delete inactive waitlist entries. If you become a TrendForge customer at launch, your data will be governed by the customer-account terms in effect at that time, and we'll tell you about that change before it happens.
• Aggregate analytics data (Vercel Analytics, Speed Insights): retained for up to 24 months in aggregate form, with no association to you personally.
• Rate-limit IP records: deleted automatically after 60 seconds.

If we retain anything beyond these windows for a legal reason (such as a regulatory investigation or a litigation hold), we will tell you.

Who we share your data with

We share data with the following service providers, who process it only on our behalf and under contracts that require them to protect it. None of these constitutes a “sale” or “sharing” of personal information as defined under California law.

We do not share your data with anyone else. We do not sell, rent, or trade it.

International data transfers

If you're in the EU, UK, or Canada, the service providers listed above are based in the United States. International transfers are made under appropriate safeguards, including the EU-U.S. Data Privacy Framework and the corresponding UK Extension and Swiss-U.S. framework where applicable, Standard Contractual Clauses (the 2021 European Commission set, with the 2022 UK International Data Transfer Addendum where required), and the providers' own certifications.

If you'd like a copy of the safeguards in place for any specific transfer, email hello@trendforge.biz.

How we protect your data

We use the following safeguards. None is foolproof; together they reflect what we consider reasonable for a waitlist that holds only email addresses.

• In transit: all data is encrypted with TLS between your browser, our service, and our processors.
• At rest: waitlist data sits in Resend's encrypted storage; analytics data sits in Vercel's encrypted storage.
• Access controls: access to the waitlist database is limited to the small number of staff who need it for product and operational reasons.
• Token signing: confirmation links are signed with a server-held secret and expire after 30 days.
• Rate limiting: abusive signup attempts are throttled before they reach storage.
• Secrets: all credentials are stored in encrypted environment variables and rotated on a defined schedule.

If we ever experience a security incident affecting your data, we will notify you and the relevant supervisory authorities in accordance with applicable law.

Your rights

Depending on where you live, you have some or all of the following rights:

• Access — ask what data we hold about you.
• Correction / rectification — ask us to fix anything that's wrong.
• Deletion / erasure — ask us to delete your data (we can typically do this within minutes for the waitlist).
• Portability — get a copy of your data in a portable format.
• Objection / restriction — object to or restrict how we process your data.
• Withdraw consent — withdraw the consent you gave when you signed up.
• Complain to a supervisory authority — in the EU, your local data protection authority; in the UK, the ICO; in California, the California Privacy Protection Agency (CPPA); elsewhere, your local equivalent.

To exercise any of these rights, email hello@trendforge.biz. We will respond within 30 days (or the period required by your local law, whichever is shorter).

California-specific disclosures (CCPA / CPRA)

This section provides the disclosures required by the California Consumer Privacy Act, as amended by the California Privacy Rights Act.

• Categories of personal information collected (Cal. Civ. Code §1798.140(v)): Identifiers (email address) — Category A. Internet or other electronic network activity (UTM source data, browser type, device type, page interaction in aggregate) — Category F. We collect no other categories.
• Sensitive personal information: None.
• Categories of sources from which we collect: Directly from you (email, form variant). From your device or browser (UTM tags, browser type, IP for transient rate-limit). From your interaction with marketing channels (UTM source).
• Business or commercial purposes: Waitlist administration; abuse prevention; product communications; aggregate analytics.
• Categories of third parties to whom we disclose personal information: Email service providers; hosting and analytics service providers; abuse-prevention service providers (when enabled); error-monitoring service providers (when enabled).
• Sale or sharing: We do not sell personal information. We do not “share” personal information for cross-context behavioral advertising as defined by Cal. Civ. Code §1798.140(ah). Because we do not sell or share, we do not display a “Do Not Sell or Share My Personal Information” link.
• Sensitive PI use limitation: We do not use sensitive PI for purposes that would trigger the CCPA right to limit, because we do not collect any.
• Retention: As stated in the “How long we keep it” section above.
• Non-discrimination: We will not discriminate against you for exercising any CCPA right.

To submit a verifiable consumer request under CCPA, email hello@trendforge.biz. We will verify your request by confirming your email address against our waitlist records.

Cookies and tracking

This site does not set cookies for analytics, advertising, or tracking.

The only browser storage we use is one entry in your browser's localStorage under the key tf_signed_up, which holds a non-identifying flag (the value 1) indicating that you've already signed up. The flag does not contain your email address or any other identifier. It exists so we can show you the “you're on the list” state when you return to the site. You can clear it from your browser settings at any time.

We don't use Google Analytics, Facebook Pixel, LinkedIn Insight Tag, or any other tracking pixel.

Our site does not respond to Do Not Track browser signals because we do not track users across third-party sites or services.

If we ever add features that require cookies (we have no plans to), we'll update this policy and ask for your consent first.

Children

This site is not directed at children under 13 in the United States and the United Kingdom, or under 16 in the European Union (member states may set a lower minimum, in some cases as low as 13). We do not knowingly collect data from children. If you believe a child has signed up for our waitlist, email hello@trendforge.biz and we will delete the entry and notify any parent or guardian we can identify.

Changes to this policy

If we change this policy, we'll update the “Last updated” date at the top. For material changes, we'll email everyone on the waitlist before the change takes effect.

Contact us

For any privacy question, complaint, or rights request:

• Email: hello@trendforge.biz
• Postal: BJ Unlimited LLC, 522 W Riverside Ave #8421, Spokane, WA 99201

We'll respond within 30 days.