Privacy Policy

Last updated: November 1, 2026

This Privacy Policy explains how Xeastra ("Xeastra", "we", "us", or "our") handles information in connection with the Xeastra website, Trend Radar, and related software, services, and API integrations.

Xeastra is currently an independent software project in development. This policy describes the project's current data practices and may be updated as the service develops.

1. Information we may process

Depending on how Xeastra is used, we may process:

Public and API-provided trend data. Information made available by third-party platforms through their official APIs or other authorized interfaces, such as trend keywords, public content, public metadata, engagement or popularity signals, and related analytics.
Authorized account data. If a third-party service requires you to authorize access, Xeastra may process the information permitted by the scopes you approve. We do not ask users to provide their third-party account passwords to Xeastra.
Technical and security data. Hosting, security, and network providers may process technical information such as IP address, request time, browser or device information, and security logs when necessary to deliver and protect the service.
Information you provide directly. For example, information contained in a support, privacy, or other message you send to us.

2. How we use information

We may use information to:

operate, maintain, secure, and improve Xeastra;
identify and analyze public trend signals and changes over time;
combine authorized signals from multiple sources for analytics;
diagnose errors, prevent abuse, and monitor system reliability;
respond to support, privacy, legal, or security requests; and
comply with applicable law and third-party platform requirements.

Xeastra is not intended to collect sensitive personal information or build profiles about private individuals. We seek to limit collection and processing to information reasonably necessary for the service.

3. Third-party platforms and APIs

Xeastra may integrate with services such as Pinterest, Google, YouTube, Meta services, X, Reddit, and other platforms. Data obtained through those services is subject to the applicable provider's terms, developer policies, permissions, and technical restrictions.

Where an integration requires authorization, Xeastra requests only the permissions reasonably necessary for the relevant functionality. API credentials, access tokens, and similar secrets are treated as confidential authentication information and are not intentionally exposed publicly.

4. Legal bases where applicable

Where data-protection law requires a legal basis for processing personal data, the applicable basis may include our legitimate interests in operating, securing, and improving the service; performance of a contract or requested service; compliance with legal obligations; or consent where consent is required. The applicable basis depends on the context and the type of information involved.

5. Sharing and disclosure

We do not sell personal information. We may disclose information only when reasonably necessary to:

service providers that host, secure, or support Xeastra;
third-party platforms as required to operate an authorized integration;
comply with law, legal process, or a valid governmental request;
protect the rights, security, or integrity of Xeastra or others; or
support a reorganization, acquisition, financing, or transfer of the project or business, subject to applicable law.

6. Data retention

We retain information only for as long as reasonably necessary for the purposes described in this policy, including operation, security, troubleshooting, legal compliance, and enforcement of applicable terms. Retention periods may differ by data type and source.

Trend and analytics data may be aggregated, refreshed, or deleted as part of normal system operation. Third-party platform data may also be deleted or updated when required by the provider's terms or applicable law.

7. Security

We use reasonable technical and organizational measures intended to protect information against unauthorized access, loss, misuse, or alteration. No system or transmission method can be guaranteed to be completely secure.

8. International processing

Xeastra and its service providers may process information in countries other than the country in which you are located. Where required, we take appropriate steps to handle personal data in accordance with applicable data-protection requirements.

9. Your privacy rights

Depending on your location and applicable law, you may have rights regarding personal data relating to you, such as rights to request access, correction, deletion, restriction, objection, or portability, and to withdraw consent where processing is based on consent.

These rights are subject to applicable legal limitations and may not apply to information that Xeastra does not control or cannot reasonably identify as relating to you.

10. Children

Xeastra is not directed to children and is not intended to knowingly collect personal information from children through the service.

11. Cookies and analytics

This public Privacy Policy page does not intentionally use advertising cookies or behavioral tracking. Other Xeastra services may use necessary technical storage or operational analytics where required for security, reliability, or functionality. If our use of cookies or analytics materially changes, this policy will be updated as appropriate.

12. Changes to this policy

We may update this Privacy Policy as Xeastra changes or as legal, technical, or platform requirements evolve. The "Last updated" date above indicates the most recent revision.

13. Contact

For privacy questions or requests, contact: poke.the.creator@gmail.com.