This policy explains what TrendsMesh does with personal data when you use the TrendsMesh app in Canva, our plan and checkout pages, or this website.
1. Who we are
TrendsMesh is operated by DALI GAMES Prosta Spółka Akcyjna, doing business as TrendsMesh, ul. Na Ostatnim Groszu 3, 54-207 Wrocław, Poland, NIP 8943202508, KRS 0001011601.
For the data of the people who use TrendsMesh we are the controller under the EU General Data Protection Regulation (GDPR).
Contact for anything in this policy: contact@merchmesh.eu.
2. What we collect
| Category | What it is | Where it comes from |
|---|---|---|
| Account identifiers | Your Canva user and brand identifiers. We do not store your email address, name or a password. | Canva, when you open the app. |
| Billing data | Your plan (Free or Pro), your subscription’s status, and the identifiers our payment provider uses for your customer record, subscription and payments. We never receive your card details. | Dodo Payments. |
| Checkout sessions | A record linking a checkout you start to your account, so the plan you pay for reaches the right account. It is deleted after seven days. | Created by us when you start a checkout. |
| Technical logs | Records of requests to our servers, such as time, request path, status and errors. Our hosting provider’s logs may include IP addresses. | Automatically, when you use TrendsMesh. |
The trends TrendsMesh shows are public information about short-form videos. We do not collect anything about the people who view your designs.
3. Why we use it, and on what legal basis
| Purpose | Data used | Legal basis |
|---|---|---|
| Providing TrendsMesh: showing trends and unlocking them for your plan | Account identifiers, billing data | Performance of a contract (Art. 6(1)(b)) |
| Subscriptions and accounting | Account identifiers, billing data, checkout sessions | Contract (Art. 6(1)(b)) and legal obligation (Art. 6(1)(c)) |
| Keeping TrendsMesh reliable and secure | Technical logs, error reports | Legitimate interests (Art. 6(1)(f)): running a reliable, secure service |
We do not send marketing emails, and we do not sell personal data or share it for advertising.
4. Who processes it for us
| Provider | What it does | What it receives | Where |
|---|---|---|---|
| Google Cloud and Firebase (Google) | Runs our servers and database, and hosts our plan pages | All data described in this policy | EU (Warsaw, Poland); Firebase Hosting serves pages from a global network |
| Sentry | Tells us when something breaks, so we can fix it | Error reports, stripped of personal data apart from account identifiers | EU or USA, under Sentry’s terms |
| Netlify | Hosts this website | Standard web request data, such as IP address and browser type | USA |
Independent controllers. These companies decide for themselves how they use the data they hold, under their own privacy policies:
- Canva, for the data it holds about you as a Canva user.
- Dodo Payments, which sells TrendsMesh subscriptions bought in Canva as merchant of record and collects your payment and invoicing details on its own checkout page.
- TikTok, which serves the video thumbnails and videos TrendsMesh shows. When the app shows a trend, your browser loads its thumbnail from TikTok, and when you open or embed a video, it plays from TikTok.
We may also disclose data where the law requires it, or to establish or defend legal claims.
5. How long we keep it
| Data | How long |
|---|---|
| Account identifiers and billing data | While you use TrendsMesh, and as long as tax and accounting law requires for billing records (in Poland, 5 years from the end of the year the payment was made). |
| Checkout sessions | Seven days. |
| Technical logs | About 30 days, under our hosting provider’s standard log retention. |
To delete your data, write to contact@merchmesh.eu from the Canva account you use TrendsMesh with. We complete deletions within 30 days and confirm when it is done.
6. Transfers outside the European Economic Area
Some providers in section 4 are in the United States. For these transfers we rely on the EU–US Data Privacy Framework where the provider is certified, and otherwise on the European Commission’s Standard Contractual Clauses. You can ask us for a copy of the safeguards at contact@merchmesh.eu.
7. Your rights
Under GDPR you have the right to access your data, to correct it, to have it deleted, to restrict or object to how we use it, and to receive it in a portable format. Exercising these rights is free.
Write to contact@merchmesh.eu and we will answer within 30 days. You can also complain to a data protection authority. In Poland that is the Prezes Urzędu Ochrony Danych Osobowych, ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl.
8. Security
Data travels over encrypted connections (TLS) and is encrypted at rest by our hosting provider. No system is perfectly secure. If a breach is likely to put your rights at risk, we will tell you and the supervisory authority as GDPR requires.
9. Cookies and similar storage
This website sets no cookies, stores nothing in your browser and loads nothing from other companies: its fonts and images are served from this site.
The TrendsMesh app in Canva sets no cookies of its own. Our plan pages receive a short-lived sign-in code in their address, which expires within minutes.
10. Children
TrendsMesh is a tool for businesses and is not directed at children. We do not knowingly collect data from anyone under 16. If you believe a child has given us data, write to us and we will delete it.
11. Changes to this policy
When we change this policy we update the date at the top. If a change materially affects your rights, we will tell you in the app before it takes effect.