Terms of use
Effective date: September 15, 2026
These Terms of use (the “Terms”) govern your access to and use of the Trendjectory platform, website, applications, reports, workspaces, APIs and related services (together, the “Service”). The Service is operated by Brand Action Agency, Inc., doing business as Trendjectory (“Trendjectory,” “we,” “us,” or “our”).
By accepting these Terms during registration, invitation acceptance, purchase, or another acceptance process, you agree to them. If you use the Service for an organization, you represent that you have authority to bind it, and “you” includes that organization. If you don’t agree, don’t access or use the Service. Our Privacy policy explains our personal-data practices. Cookie and analytics consent is managed separately through our cookie consent controls. You may grant, change, or withdraw optional consent at any time through Cookie settings. Accepting these Terms doesn’t replace separately required consent.
1. Who we are
Brand Action Agency, Inc., doing business as Trendjectory
1 E. Erie St., Suite 525-2297
Chicago, IL 60611
United States
General contact: info@brandactionagency.com
Support and privacy requests: support@trendjectory.com
2. Definitions
- Account means the credentials and user record used to access the Service.
- Authorized User means an individual whom you permit to access a workspace under your account or organization.
- Customer Content means information, text, prompts, topics, keywords, profiles, research context, branding, logos, support content, files, and other material that you or an Authorized User submit to, store in, or transmit through the Service.
- Output means reports, summaries, trends, recommendations, sources, PDFs, notifications, and other material generated or presented by the Service in response to Customer Content and public or licensed information.
- Partner Services means third-party services used to support a feature of the Service, including AI, research data, email delivery, payment, security, hosting, and infrastructure services. Their roles and data practices are described by category in the Privacy policy.
- Workspace means a Trendjectory account space containing members, projects, research jobs, reports, billing settings, credits, and other workspace data.
3. Eligibility and account registration
You must be legally capable of entering into a binding contract. The Service is available only for business and professional use, including use by employees, agencies, freelancers, consultants, and self-employed professionals. Personal consumer use is not permitted. The Service is not directed to children. You may not use the Service if you’re under 18 or under the age of majority where you live, unless the law permits you to enter into this agreement and you have the authority to do so.
Geographic scope. The Service is operated from the United States and is intended primarily for U.S. business and professional users. We don’t intentionally target advertising to individuals in the European Union, European Economic Area, or United Kingdom. We don’t geographically block access solely because a person is located in those regions. Businesses there that independently find the Service may maintain Accounts and subscriptions, subject to applicable law and availability. You must provide accurate registration and billing information and use the Service lawfully. We may limit or decline access or transactions when reasonably necessary to comply with law or protect the Service. Location and acceptance of these Terms don’t waive applicable privacy rights or other mandatory protections.
You must provide accurate, current, and complete registration information and keep it updated. You’re responsible for protecting your password and authentication credentials, for all activity under your Account, and for notifying us promptly at support@trendjectory.com if you suspect unauthorized access. You may not share credentials or allow a person to access the Service through an account that was not issued to that person.
Email verification may be required before access is enabled. During a beta, prelaunch, controlled-access, or approval period, registration may create a pending account rather than an immediately usable account. We may approve, decline, suspend, or limit access in accordance with these Terms and the applicable launch or access rules.
4. Workspaces, roles and Authorized Users
Workspace owners and administrators control membership, roles, project access, report visibility, downloads, sharing, billing settings, and workspace configuration. By inviting another person, you confirm that you’re permitted to provide that person’s contact information for the invitation and that the invitation is relevant to the person’s professional role. Every invited Authorized User must meet the eligibility requirements in Section 3.
You’re responsible for:
- selecting Authorized Users and assigning appropriate permissions;
- informing Authorized Users about the processing of their information and these Terms where required;
- ensuring that Authorized Users use the Service lawfully; and
- removing access when an Authorized User no longer needs it.
Workspace permissions may allow members to view or download reports and other content. We’re not responsible for a disclosure that results from permissions or sharing choices made by you or a workspace administrator.
5. How the Service works
Trendjectory provides market-intelligence and research workflow tools. Depending on the enabled plan and configuration, the Service may:
- expand topics into research queries and keyword groups;
- retrieve and organize public or licensed web, search, news, and buyer-signal information;
- use AI-assisted processing to summarize evidence and produce reports;
- store projects, research jobs, reports, evidence, profiles, and workspace context;
- generate PDFs and other downloadable Outputs;
- send service notifications, report-ready messages, invitations, support messages, and scheduled briefings; and
- provide report sharing, workspace collaboration, support, billing, and administrative controls.
The Service and its features may change over time. We may add, remove, limit, or modify features, plans, model configurations, research sources, usage limits, or availability. We won’t materially reduce a paid feature during a paid period without providing a reasonable remedy where required by law or the applicable order.
6. AI-assisted Outputs and important limitations
Outputs are generated from Customer Content, available evidence, research queries, public or licensed information, and statistical or language-processing methods. AI-assisted Outputs can be incomplete, out of date, misleading, or incorrect. Sources may be inaccessible, changed, removed, or interpreted incorrectly. A confidence label, citation, source link, or evidence marker doesn’t guarantee accuracy.
You must independently review and verify Outputs before relying on them. The Service is not a substitute for professional advice or independent diligence and doesn’t provide legal, regulatory, tax, accounting, medical, investment, financial, employment, safety, cybersecurity, or other professional advice. You remain responsible for decisions, communications, publications, campaigns, products, purchases, investments, compliance conclusions, and other actions based on an Output.
The Service doesn’t make decisions about an individual’s eligibility for employment, credit, housing, insurance, education, healthcare, or access to essential services. Don’t use the Service to make such decisions or to profile individuals.
7. Your content and how we use it
As between you and Trendjectory, you retain your rights in Customer Content. You grant us a limited, nonexclusive, worldwide, royalty-free license to host, reproduce, transmit, format, index, analyze, secure, and otherwise process Customer Content only as reasonably necessary to provide, maintain, secure, support, improve, and administer the Service, comply with law, prevent misuse, resolve disputes, and enforce these Terms. This license is subject to the Privacy policy, applicable data-protection law, and any applicable data-processing addendum. It doesn’t authorize a use of personal data that is inconsistent with those obligations.
The Data Processing Addendum in Schedule 1 of these Terms (the “DPA”) applies where Trendjectory processes personal data on your behalf as a processor, service provider, or contractor under applicable data-protection law. By accepting these Terms, you also accept the applicable DPA; no separate signature or email request is required. The DPA doesn’t authorize personal information in research fields contrary to this Section 7.
You represent and warrant that:
- you own or control the rights necessary for us and our Partner Services to process Customer Content as described in these Terms and the Privacy policy;
- Customer Content doesn’t violate law, another person’s rights, confidentiality obligations, or applicable contracts;
- you have given all notices and obtained all permissions or other lawful bases required for information about other people that you submit;
- Customer Content doesn’t contain passwords, access keys, payment-card data, authentication tokens, government identifiers, health information, biometric data, precise location data, or other sensitive personal data unless Trendjectory has expressly agreed in writing to receive and process that data; and
- you won’t include personal information about yourself or another person in research prompts, decision context, saved research profiles, project descriptions used for research, or other content submitted for research. Information needed for account administration, billing, invitations, or support may be provided through the designated features as described in the Privacy policy.
Trendjectory sends research content, relevant report content, and retrieved evidence to AI and research API providers to provide the requested research features. If that content contains personally identifiable information (“PII”), we may transmit it to those providers as part of processing the request. Retrieved sources may also contain incidental personal information. Don’t rely on Trendjectory to detect, reject, or remove all personal information before transmission. We may block, limit, remove, or request changes to content that conflicts with these restrictions.
We use paid API accounts for production AI services, including fallback providers. We haven’t enabled optional model-training or data-sharing programs or changed the providers’ default retention settings. Provider protections still depend on the applicable service, endpoint, published terms, request configuration, and binding data-processing arrangements. We don’t guarantee that every research provider prohibits model training on supplied content or provides zero data retention. Some terms permit service improvement or training for covered features, and operational, security, or legal retention may apply. The Privacy policy explains these distinctions. They don’t waive our obligations under applicable law or an applicable DPA.
Our payment processor processes payments for Trendjectory. Billing addresses and payment information are entered through our payment processor’s payment interfaces and managed under the processor’s applicable terms and privacy notice, available through its payment interface. Trendjectory doesn’t receive or store full payment-card numbers, card security codes, or full bank-account details. We receive payment and subscription notifications and retain the status, identifiers, and related subscription and credit records needed to administer the Service. Notifications may contain additional billing contact or transaction information, as explained in Privacy policy Section 3.5. We use account names and email addresses for account and service communications, not marketing, and don’t sell those details or provide them to third parties for their own marketing.
8. Acceptable use and prohibited conduct
You may use the Service only for lawful, authorized, professional purposes. You may not, and may not help another person to:
- violate applicable law, regulation, court order, or third-party rights;
- intentionally submit personal information for research, or use the Service to identify, track, or compile personal information about individuals;
- use Outputs to make decisions or create profiles about individuals in a way prohibited by law or these Terms;
- upload malware, harmful code, credentials, payment data, or material intended to compromise a system;
- probe, scan, attack, reverse engineer, decompile, disassemble, or attempt to discover the source code or underlying models, prompts, security controls, or nonpublic interfaces of the Service;
- bypass authentication, rate limits, credit controls, plan limits, workspace permissions, usage restrictions, or access controls;
- scrape or systematically extract the Service, reports, evidence, source mappings, or account data except through an expressly provided feature;
- use the Service to train, test, benchmark, or develop a competing product or general-purpose model without our written permission;
- impersonate another person, misrepresent your affiliation, or use an invitation or report-share link without authorization;
- interfere with the Service or burden it unreasonably;
- resell, lease, sublicense, or provide the Service to third parties except as expressly permitted by your plan or a written agreement; or
- use the Service to create or distribute content that is unlawful, deceptive, defamatory, discriminatory, threatening, or harmful.
We may investigate suspected misuse and take proportionate steps, including limiting access, suspending a job, removing content, preserving evidence, or terminating an Account.
9. Report sharing and external recipients
The Service may allow you to share a report with a recipient by email or link. You’re responsible for confirming the recipient, setting an appropriate expiration or access scope where available, and revoking access when it is no longer needed. A recipient may copy, download, forward, or retain a report after receiving access. A revoked or expired link may not remove copies already downloaded or forwarded.
You must not use report sharing to disclose confidential, personal, regulated, or proprietary information to a person who is not authorized to receive it.
10. Partner Services and external content
The Service relies on Partner Services for functions such as AI-assisted processing, research and data retrieval, email delivery, payment processing, security checks, hosting, storage, and infrastructure. We use these services under their published terms and applicable account settings. Their privacy, training, retention, and downstream-provider practices vary as explained in the Privacy policy. A restriction on training doesn’t necessarily prevent storage, safety review, caching, or retention of operational records. We don’t control a partner’s independent service, content, availability, or legal terms; this doesn’t remove our own responsibilities under these Terms, the Privacy policy, or applicable law.
Where a Partner Service processes personal data on our behalf, we require contractual protections appropriate to its role, the processing, and applicable law. A provider may act independently for particular processing activities; those roles must be distinguished from processing performed on our instructions. The Privacy policy describes recipient categories and the relevant data uses. We maintain a nonpublic provider register and supply specific identities, functions, locations, and safeguards to customers or individuals as required by applicable law or the DPA. Contact support@trendjectory.com for those requests. Legitimate confidentiality and security restrictions don’t limit required disclosures. Subprocessor authorization and change notices for customer-controlled processing are governed by the DPA.
Research results may contain links to websites or other material operated by third parties. We don’t endorse or guarantee third-party content, and your use of third-party sites is governed by their terms and policies.
11. Plans, subscriptions, credits and payment
11.1 Plans and pricing
Plan names, prices, included credits, project limits, keyword or research limits, features, and other commercial terms are shown in the Service or in an applicable order, quote, or enterprise agreement. Before you commit to a purchase, the applicable offer or checkout must identify the price and currency, billing interval, automatic-renewal terms, cancellation method, applicable taxes or how they are calculated, and material credit, expiration, usage, and refund limitations. Taxes are added where applicable unless the displayed price states that they are included or applicable law requires an inclusive price. You’re responsible for applicable taxes, duties, or similar charges, excluding taxes on our income.
Enterprise access may be governed by a separate written agreement. If an enterprise agreement conflicts with these Terms, the enterprise agreement controls for that conflict.
11.2 Credits
Credits are usage units for eligible research functions. Credits have no cash value, are not currency, and may not be sold, transferred, redeemed, or exchanged except where required by law. The applicable credit cost and material retry or refund conditions are disclosed before you authorize the charge. Manual research may be charged when a job is accepted; scheduled research may be charged after a usable report is produced. Eligible terminal report failures are handled under the disclosed credit-refund rules. A separately confirmed paid retry may be nonrefundable, and a usable report or partial result may not qualify for a full credit refund. Statutory rights are preserved.
Subscription credits, promotional credits, and one-time top-up credits may have different expiration, rollover, and cancellation rules. Unless an applicable promotion or written agreement says otherwise, unused subscription credits normally carry into one additional billing cycle and expire when the subscription ends. Top-up purchases don’t automatically renew; their expiration and any cancellation-related limits are disclosed before purchase. Promotional benefits follow the eligibility, duration, payment, and cancellation conditions disclosed when you enroll. Your billing information shows the applicable grant balances and expiration dates. Later changes to billing settings don’t retroactively replace the terms on which you purchased credits or enrolled in a promotion, except as permitted by your agreement and applicable law.
11.3 Subscriptions and renewal
Self-service paid subscriptions renew automatically each month unless canceled before the next renewal or ended under these Terms. An applicable written order may specify a different billing arrangement. By purchasing a recurring subscription, you authorize the payment partner to charge the disclosed subscription price and applicable taxes for each billing period until cancellation takes effect. Any required renewal reminders or notices will be provided. A price change applies prospectively, with advance notice and any acceptance required by law or your agreement, so that you can cancel before it takes effect. A subscription may be downgraded, paused, or marked unpaid after a failed or disputed payment. We may pause scheduled research, report delivery, or other paid features while payment is overdue.
11.4 Cancellation and refunds
Cancel a self-service subscription through Manage my subscription in the Service, which opens our payment processor’s customer portal. Contact support@trendjectory.com if you can’t use those controls or need assistance. Unless required otherwise by law or an order, cancellation takes effect at the end of the current paid period and stops further subscription renewals. Charges already incurred remain payable. Subscription credits expire when the subscription ends unless the applicable offer or agreement provides otherwise; other credit types follow their disclosed rules. Canceling a subscription doesn’t itself delete your Account, Workspace, or reports. Section 11.5 describes Account deletion.
Except where required by applicable law, an order, or a written enterprise agreement, purchases are nonrefundable. This doesn’t limit statutory consumer cancellation, withdrawal, conformity, or other mandatory rights. We may provide credits or a refund in our discretion for a material billing error, duplicate charge, or report failure covered by the applicable refund policy.
11.5 Account closure and deletion
An Account can exist with or without a subscription. Request Account deletion through Delete my account in your Profile when available. For assistance, submit a support ticket while signed in. If you can’t access your Account, use the contact and verification process in Section 9 of the Privacy policy. For ordinary self-service closure of a Workspace you own, first cancel any renewing subscription through Manage my subscription. We verify the cancellation state recorded by our payment processor before proceeding. Cancellation scheduled for the end of the current paid period is sufficient when it stops the next renewal; you don’t need to wait for that paid period to expire. The Account-deletion control doesn’t automatically cancel your subscription.
If you’re only a member of another person’s Workspace, deleting your Account doesn’t require canceling that Workspace’s subscription and doesn’t delete other members’ data or access. Before deleting an Account that owns a shared Workspace, arrange an authorized ownership transfer or separately confirm closure of the Workspace. A transferred Workspace that continues operating doesn’t need cancellation because its former owner leaves. Before deletion, we verify identity and authority and require explicit confirmation of the specific Workspaces and content affected. A signed-in ticket identifies the requesting Account but doesn’t by itself authorize deletion of a shared Workspace; we may require reauthentication or proportionate additional verification.
Account deletion ends your access, including remaining access during a paid period, and prevents use of credits through the deleted Account. Review and download information you need before confirming. Existing refund rights, incurred charges, and applicable legal rights remain governed by these Terms and law. We aim to complete verified Account-deletion requests from active storage within seven days, subject to justified retention exceptions and shared-Workspace rights. This target is separate from inactivity deletion and routine report recovery. Financial records, backups, logs, and provider copies follow the Privacy policy. Formal privacy requests remain available through support and are assessed within applicable legal deadlines even when ordinary self-service closure is blocked.
12. Beta, prelaunch and availability
The Service or a feature may be identified as beta, preview, pilot, prelaunch, experimental, or controlled access. Such features may be incomplete, change without notice, have lower availability, or contain errors. We don’t promise that beta or prelaunch features will become generally available or remain available.
The Service is provided on an “as available” basis. We may perform maintenance, apply security controls, respond to provider outages, pause research, limit traffic, or disable a feature to protect the Service or its users. We don’t promise uninterrupted or error-free operation or any particular research completion time unless a written service-level agreement says otherwise.
13. Intellectual property
The Service, including its software, interfaces, visual design, documentation, prompts, workflows, methods, templates, trademarks, logos, and noncustomer content, is owned by or licensed to Trendjectory and is protected by intellectual-property laws. Except for the limited rights expressly granted in these Terms, no rights are transferred to you.
Subject to your payment obligations, these Terms, and third-party rights, you may use and share Outputs generated for your Workspace for your internal business purposes and for authorized client or customer delivery. Outputs may not be unique, and Trendjectory doesn’t promise that an Output is free of third-party rights. You’re responsible for obtaining any permission needed to publish, distribute, or commercially use source material or an Output.
If you provide suggestions, ideas, or feedback, you grant Trendjectory a perpetual, irrevocable, worldwide, royalty-free right to use and incorporate that feedback without compensation, provided we don’t identify you or disclose Customer Content as the source of the feedback.
14. Confidentiality
Each party may receive nonpublic information from the other party. The receiving party will use reasonable care to protect the disclosing party’s nonpublic information and use it only to perform or exercise rights under these Terms. Confidential information doesn’t include information that is public without breach, already known without restriction, independently developed, lawfully received from another source, or required to be disclosed by law.
This section doesn’t replace a data-processing addendum, security agreement, nondisclosure agreement, or enterprise agreement that applies to a particular Workspace. If a written agreement contains more specific confidentiality obligations, that agreement controls.
15. Suspension and termination
You may stop using the Service at any time. We may suspend or terminate all or part of an Account or Workspace if you breach these Terms, fail to pay, create a security or legal risk, misuse the Service, or if continued operation is not commercially or technically feasible. Where reasonable, we’ll give notice and an opportunity to cure before termination, but we may act immediately when necessary to protect people, data, systems, or legal rights.
Cancellation of a paid subscription doesn’t itself delete an Account or its saved reports. Unpaid Accounts are subject to the 12-month inactivity periods in Section 8 of the Privacy policy, with at least 30 days’ advance email notice before scheduled inactivity deletion. Signing in before deletion restarts the inactivity period. These periods don’t authorize removal of other users’ active Workspace data or records that must be retained under applicable law.
After termination, your right to use the Service ends. We may delete or de-identify Customer Content according to the Privacy policy, applicable retention requirements, backups, legal holds, and Workspace administration rules. Reports or data shared with other people may remain in their possession. Sections that by their nature should survive termination remain in effect, including payment obligations, intellectual property, confidentiality, disclaimers, limitations of liability, indemnity, dispute provisions and data-retention obligations.
16. Warranties and disclaimers
To the maximum extent permitted by law, the Service and Outputs are provided “as is” and “as available.” Trendjectory disclaims all warranties, whether express, implied, statutory, or otherwise, including warranties of merchantability, fitness for a particular purpose, title, non-infringement, availability, accuracy, reliability, security, and that the Service or Outputs will meet your requirements or produce a particular result.
We don’t warrant that the Service will be uninterrupted, error-free, secure against every threat, or free of harmful content. Nothing in these Terms excludes a warranty or right that cannot lawfully be excluded.
17. Indemnification
To the extent permitted by law, you’ll defend, indemnify, and hold harmless Trendjectory, Brand Action Agency, Inc., and their officers, employees, contractors, and agents from claims, damages, losses, liabilities, costs, and expenses (including reasonable legal fees) arising from or related to: (a) your Customer Content; (b) your or an Authorized User’s use or misuse of the Service; (c) your breach of these Terms; (d) your violation of law or a third party’s rights; or (e) your decisions, products, publications, or actions based on an Output.
We’ll promptly notify you of a covered claim and may participate in its defense. You may not settle a claim in a way that admits fault by or imposes obligations on Trendjectory without our written consent.
18. Limitation of liability
To the maximum extent permitted by law, Trendjectory and Brand Action Agency, Inc. won’t be liable for indirect, incidental, special, consequential, exemplary, or punitive damages, or for lost profits, revenue, goodwill, business opportunity, anticipated savings, data, reports, credits, or use, arising out of or related to the Service or these Terms, even if advised of the possibility of those damages.
To the maximum extent permitted by law and subject to the exceptions below, our total aggregate liability for all claims arising out of or related to the Service or these Terms won’t exceed the greater of: (a) the amounts you paid to Trendjectory for the affected Service during the 12 months before the event giving rise to the claim; or (b) 100 U.S. dollars.
None of the warranty disclaimers, exclusions of damages, or liability limits in these Terms excludes or limits liability that cannot lawfully be excluded or limited, including liability for fraud, willful misconduct, death or personal injury caused by negligence, or infringement of intellectual-property rights where limitation is prohibited. They don’t limit a party’s obligations under applicable data-protection law or any mandatory consumer remedy. An applicable signed enterprise agreement or DPA may provide additional protections.
19. International availability and mandatory rights
The business and professional-use requirements in Section 3 apply to all Accounts and Authorized Users. They don’t waive rights that apply by law. If you nevertheless qualify for mandatory consumer protection, applicable rights relating to cancellation, withdrawal, conformity, refunds, and defective digital services remain available.
Where mandatory law gives you a right to withdraw from a distance service contract, we honor that right. Notify support@trendjectory.com with an unequivocal statement that you wish to withdraw. Where required, we provide the applicable withdrawal instructions, model form, and confirmation on a durable medium.
If you expressly request that a paid service begin during the withdrawal period, you may owe a proportionate amount for service properly supplied before withdrawal, but only where the required information and request have been provided. Loss of a withdrawal right requires satisfaction of the applicable legal conditions, including any separate express consent and acknowledgment. An ongoing subscription is not fully performed merely because an Account is activated or a first report is generated. Accepting these Terms alone doesn’t supply any separate early-performance request, consent, or acknowledgment required by law. Different rules may apply to separately supplied digital content; any required disclosures and consents must be provided for that transaction.
Nothing in these Terms limits rights under the General Data Protection Regulation or other applicable privacy and data-protection law. Section 9 of the Privacy policy explains how to submit privacy requests, including when you can’t access your Account. Receipt of an email alone doesn’t authorize Account or Workspace deletion.
20. Governing law and disputes
These Terms are governed by the laws of the State of Illinois, United States, without regard to conflict-of-law rules. Subject to mandatory rights under applicable law, disputes arising out of or related to these Terms or the Service must be brought exclusively in the state courts located in DuPage County, Illinois, or, where federal subject-matter jurisdiction exists, in the United States District Court for the Northern District of Illinois, Eastern Division. Each party consents to personal jurisdiction and venue in those courts.
Before filing a claim, the parties will try in good faith to resolve the dispute by contacting support@trendjectory.com and providing a written description of the issue. This informal step doesn’t prevent a party from seeking urgent injunctive or protective relief or from using a mandatory statutory complaint, consumer, or regulatory process.
21. Changes to these Terms
We may update these Terms from time to time. We’ll post the revised Terms and their effective date. For a material change affecting your rights or obligations, we’ll provide notice appropriate to the change, your agreement, and applicable law, with advance notice where required. We’ll obtain affirmative acceptance where required; continued use will constitute acceptance only where that method is legally permitted and the required notice has been given. Changes won’t apply retroactively to accrued claims or completed transactions unless you agree or applicable law requires otherwise. If you don’t accept a revised term, contact us about ending the affected subscription or Workspace, subject to your existing agreement and mandatory rights.
22. General provisions
These Terms, an applicable order, any signed enterprise agreement, and any applicable DPA govern the Service. The Privacy policy describes our personal-data practices and remains applicable to that processing. For a conflict, an applicable DPA controls the personal-data processing it covers, and a signed enterprise agreement or order controls the commercial matters it specifically addresses; these Terms otherwise apply. No general priority clause reduces mandatory privacy or consumer rights or authorizes processing inconsistent with an applicable privacy commitment. If a provision is unenforceable, it will be modified to the minimum extent necessary and the remaining provisions will remain effective. Our failure to enforce a provision is not a waiver. You may not assign these Terms without our written consent, except in connection with a merger, reorganization, or sale of substantially all assets. We may assign these Terms as part of such a transaction.
23. Contact us
Contact us with questions about these Terms, account access, cancellation or billing:
Brand Action Agency, Inc. / Trendjectory
1 E. Erie St., Suite 525-2297
Chicago, IL 60611
United States
info@brandactionagency.com
support@trendjectory.com
Schedule 1: Data processing addendum
1. Scope and acceptance
This DPA is part of the Terms between Brand Action Agency, Inc., doing business as Trendjectory, and the customer identified through the Account, Workspace, or applicable order. It takes effect with acceptance of the Terms and covers personal data processed by Trendjectory on that customer’s behalf (“Customer Personal Data”). The customer is the controller or business, or a processor authorized by its controller; Trendjectory is the corresponding processor, subprocessor, service provider, or contractor. Those roles depend on the actual processing and applicable law. Capitalized terms not defined here have the meanings in the Terms.
This DPA doesn’t govern information Trendjectory processes for its own account administration, billing, security, legal compliance, or other independent purposes described in the Privacy policy. A label alone doesn’t determine a party’s role. Collecting a name or email address for Trendjectory’s own account and service communications doesn’t by itself make Trendjectory the customer’s processor. The professional-use requirements in Section 3 of the Terms remain in force. This DPA doesn’t waive any applicable privacy right.
2. Processing details
Subject and purposes: operating the customer’s Workspace; administering membership and permissions on its instructions; storing and organizing its projects, reports, and research history; producing requested reports; delivering its invitations and report notifications; enabling its selected sharing and exports; and providing support, troubleshooting, security, and deletion for those functions. The customer discloses Customer Personal Data only for these limited purposes.
Operations and frequency: collection, recording, organization, storage, retrieval, use, transmission, access management, export, correction, restriction, and deletion, performed as needed during use of the selected features. Customer settings, authorized feature requests, the Terms, this DPA, and written support instructions define the processing.
Individuals and data: Workspace members and invitees, employees and professional contacts, report recipients, and people whose information is incidentally included in Customer Content or retrieved evidence. Data may include names, professional email addresses, organization and role information, Workspace and user identifiers, permissions, invitation and delivery details, and personal information incidentally present in content or associated technical records. Personal or sensitive data is not permitted in research fields under Section 7 of the Terms. Its incidental presence doesn’t remove obligations that apply to it.
Duration: the period needed to supply the selected services and complete deletion or return under Section 7 of this DPA. Subscription cancellation alone doesn’t end requested Account or Workspace storage. The inactivity and ordinary report-recovery periods in Privacy policy Section 8 apply, subject to a lawful deletion instruction or a shorter period required by law.
3. Instructions and permitted use
We’ll process Customer Personal Data only on the customer’s documented lawful instructions, including instructions concerning transfers, except where applicable law requires otherwise. In that case, we’ll inform the customer of the legal requirement before processing unless the law prohibits that notice. We’ll promptly inform the customer if we believe an instruction infringes applicable data-protection law and may suspend the affected processing while the issue is resolved.
The customer is responsible for the lawfulness of its instructions, required notices and lawful bases, authorized access, and its handling of individual rights. A customer acting for another controller must have authority to give the instructions and engage Trendjectory. These responsibilities don’t reduce Trendjectory’s own obligations.
We won’t sell Customer Personal Data, share it for cross-context behavioral advertising, or use it to train general-purpose AI models for our own or a provider’s independent purposes. We won’t retain, use, or disclose it outside the specified purposes or direct business relationship, or combine it with personal data from other customers or our own interactions, except as expressly permitted by applicable law. The general disclosures about varying research-provider practices don’t authorize processing that conflicts with this DPA. If a provider cannot meet the applicable restrictions, we must use a suitable processing arrangement or stop the affected transmission.
4. Confidentiality and security
We’ll limit access to people who need it for the authorized processing and are subject to contractual or statutory confidentiality duties. We’ll maintain technical and organizational safeguards appropriate to the data, processing, and risks, including the measures specified in Section 10 below. We’ll assess their effectiveness and may update them without materially reducing the overall protection of Customer Personal Data. We’ll provide information reasonably needed to assess those safeguards without disclosing other customers’ data or compromising security.
5. Subprocessors
The customer grants general written authorization to engage subprocessors for hosting and storage, infrastructure and security, email and report delivery, support, and permitted research processing. We maintain a nonpublic register identifying the relevant legal entities, functions, and processing locations. We’ll provide the customer with access to the relevant register privately before covered processing begins and on request at support@trendjectory.com, and provide change notices as described below. Authorization covers only processing permitted by this DPA. Independent controllers must be identified and assessed separately. Confidentiality arrangements must not prevent required disclosures to individuals or authorities.
Before a subprocessor receives Customer Personal Data, we’ll bind it to written data-protection obligations appropriate to its work and no less protective than those required of us for that processing. We remain responsible to the customer for the subprocessor’s performance of those obligations. We’ll provide at least 30 days’ advance notice of an intended addition or replacement through the customer’s designated email address, allowing an objection based on reasonable data-protection grounds before the change takes effect.
If the customer objects during that notice period, we’ll seek a reasonable alternative or resolution before the proposed subprocessor processes that customer’s data. If none is available, either party may terminate the affected feature or service before that processing begins. We’ll refund prepaid fees attributable to the unused terminated portion. Notices and objections may be handled electronically; an individual negotiation is not required for ordinary acceptance of this DPA.
6. Requests and personal data breaches
Taking account of the processing and information available to us, we’ll provide reasonable assistance with individual rights requests, security obligations, breach notifications, required impact assessments, and prior consultations with regulators. We’ll promptly forward a request concerning Customer Personal Data to the customer and follow its lawful instructions, unless applicable law requires us to respond directly. The customer controls its response; we remain responsible for responding concerning our own controller processing.
We’ll notify the customer without undue delay after becoming aware of a breach affecting Customer Personal Data and provide available information about the nature of the breach, affected data and individuals, likely consequences, response measures, and a contact for follow-up. We may provide information in stages as it becomes available. We’ll investigate, contain, remediate, preserve relevant evidence, and assist the customer with legally required notifications. Notification is not an admission of liability and won’t be delayed until an investigation is complete.
7. Return and deletion
At the customer’s choice and on a lawful instruction, or when the covered services end, we’ll return Customer Personal Data in an available commonly used format or delete it, and delete remaining copies unless applicable law requires continued storage. If no return instruction is given, deletion applies. We’ll assist with an export request received before scheduled deletion. Ordinary report-recovery and inactivity periods don’t postpone a deletion required sooner by law.
For a specific legally required retention, we’ll restrict the retained data to that purpose, protect it, and delete it when the requirement ends. Backup copies will be isolated from ordinary use pending secure expiry under the applicable documented rotation; restored systems must reapply required deletions. We’ll require relevant subprocessors to perform their corresponding deletion duties and, on request, confirm completion or explain any lawful limitation. Independent copies retained by a customer or its report recipients remain their responsibility.
8. Compliance information and audits
We’ll make available information reasonably necessary to demonstrate compliance and allow and contribute to audits and inspections by the customer or its independent auditor as required by applicable law. Existing security information and written responses may be used first where sufficient. Audit arrangements must protect confidentiality, other customers, and system security, and use reasonable notice and scope where circumstances permit. Those arrangements don’t prevent an urgent, legally required, or regulator-directed review.
Where the California Consumer Privacy Act applies to the covered processing, we’ll provide the level of protection it requires, certify that we understand and will comply with the applicable contractual restrictions, and notify the customer if we determine we can no longer meet our obligations. The customer may take reasonable and appropriate steps to verify compliant use and, on notice, stop and remedy unauthorized processing. Each party will comply with other processor or service-provider duties imposed on it by applicable law.
9. International transfers and priority
We process data from the United States and through the relevant locations identified for our providers. If a covered transfer requires specific safeguards, the parties must establish those safeguards before that transfer and provide legally required information about them. Acceptance of these Terms or this DPA is not a substitute for completed transfer clauses, an applicable adequacy basis, or other safeguards required for the actual transfer. If a lawful arrangement cannot be established, the affected processing must not proceed. This clause doesn’t expand launch eligibility.
This DPA controls a conflict concerning Customer Personal Data. A separately executed customer DPA expressly replacing this schedule controls to the extent stated, subject to mandatory law. The Terms otherwise apply, including their liability provisions and mandatory exceptions. Obligations concerning retained Customer Personal Data continue until deletion or return is complete. Questions, instructions, and privacy notices may be sent to support@trendjectory.com.
10. Security measures
Access and isolation: individual authentication, protected password representations, role-based Workspace permissions, access checks for reports and shared links, restricted administrative access, and removal of permissions when no longer needed. Personnel access must remain limited to authorized duties.
Transmission and credentials: protected network transmission for Service access and provider requests, controlled storage of service secrets, appropriate token protection and expiry, and restrictions on exposing credentials in logs or application responses.
Operational protection: input validation, rate limits, relevant security and audit records, investigation of suspicious activity, correction of identified vulnerabilities according to risk, and procedures for incident handling and breach escalation.
Recovery and disposal: access-controlled backups, documented recovery and deletion procedures, periodic assessment of recovery capability and security measures, and application of lawful deletion instructions after a restore. Provider contracts and settings must support the safeguards required for their processing. This schedule doesn’t represent a certification, a completed independent audit, universal anonymization, or zero retention.
