← Back to home日本語

Privacy Policy

Last updated: October 21, 2026

1. Introduction

TrendTag (the "Service") is an SNS analytics service operated by Reaplus Inc. ("we", "us"). This Privacy Policy explains how we handle personal information and other data when you use the Service.

By using the Service, you agree to this Policy. If you do not agree, please do not use the Service.

2. Information We Collect

We collect the following categories of information.

(a) Account registration

  • Email address (for sign-up and login authentication; also used as the digest-email destination only if you opt in from Settings)

(b) SNS account data (obtained via your OAuth authorization)

When you connect your own Instagram or TikTok account, we retrieve the following via each platform's API only after your explicit consent on the OAuth authorization screen.

  • Profile data (account name, profile image URL, follower count, account type)
  • Post/video metadata (post ID, thumbnail URL, publish time, permalink, caption, etc.)
  • Performance metrics (likes, comments, saves, shares, plays/views, reach, impressions, etc.)
  • Story metadata and metrics (Instagram)
  • Hashtag analysis metadata and aggregated metrics (Instagram)
  • Account-level metrics (profile views, website clicks, online follower distribution, etc.)
  • Daily follower snapshots (collected once per day for trend analysis)
  • Audience attribute data (aggregated age, gender, region, city, and active hours. Not used to identify individuals)
  • Video insights (total/average watch time, full-video watched rate, retention curve, traffic sources, viewer demographics, etc.) (TikTok)
  • Comment data (comment text, commenter display name, like count, timestamp, reply relationships, hidden/pinned state, etc.)
  • Tagged post metadata (post ID, thumbnail, permalink, owner username, etc.) (Instagram)
  • Mention data (when your account is mentioned in a caption or comment, received via Instagram Webhooks)
  • TikTok industry-average metrics supplied by the platform for the business category you select (average likes, comments, shares, views, engagement rate, follower count, follower growth, and video count). We fetch and store these only for categories you choose, using the authorization of your connected account. They are aggregated statistics that do not identify individuals, and they are global averages, not averages for the Japanese market.

(c) Data you submit through in-app actions

When you use comment management features, reply text and instructions to hide, delete, or pin comments are sent to the respective platform APIs (see Section 3).

(d) Workspace information

  • Workspace name, membership, and role (owner, member, or viewer)
  • Accounts assigned to a viewer, when an assignment exists, so that viewing can be limited to those accounts

(e) Contact and beta feedback

We store messages you send from the contact form or the in-app feedback button. That includes an optional name, a reply email address, and the message. Feedback also includes the page URL, viewport size, browser user agent, and the selected workspace ID. Signed-in submissions also store your user ID.

3. How We Use Information

We use collected data so that people in a workspace can analyze and view the SNS accounts connected to that workspace: follower trends, post performance, engagement charts, comments, mentions, tagged posts, monthly summaries, and printable monthly reports. For TikTok, we also use the global industry averages for the category you select so you can compare them with your own metrics.

Owners, members, and viewers of the same workspace can view the SNS data connected to that workspace, within their role. If a viewer is assigned specific accounts, viewing is limited to those accounts.

If another workspace later connects the same SNS account, that connection requires OAuth authorization of the account. After the connection is complete, past data the Service has already collected and stored for that account is shown, for the full period stored in the Service, to people authorized in the later workspace. The Service does not obtain this data through a connection that lacks OAuth authorization of that account.

At your direction, we also send the following actions to each platform:

  • TikTok: reply, hide, delete, pin, and like comments on your own videos
  • Instagram: reply to and hide comments on your own posts

You can open a printable monthly report page and save a PDF with the browser print dialog. We do not store report files on our servers or in object storage. You may optionally create time-limited share links so people with no TrendTag account and no login can view the same report. Share tokens are signed and hard to guess; we store only a hash of the token, never the raw token. A link cannot be viewed after the expiry set when it was created, or after you revoke it. You are responsible for who you share a link with. People who only view a share link are not counted as workspace members.

If you explicitly enable digest emails in Settings, we may send a weekly or monthly summary to your registered email address. Digests are off by default (opt-in). You can stop them anytime from Settings or the unsubscribe link in each email.

Anomaly alerts (a sudden drop in followers, or a post far above the account average) are on by default, including email. You can turn the alerts off, and turn email off, from Settings. When an account needs to be reconnected, we may email your registered address. These messages are sent through Resend, described in Section 6.

Except as follows, we do not sell collected data, use it for advertising or behavioral targeting, or disclose it externally without your permission. The exceptions are sharing with people authorized in the same workspace, disclosure of a report through a share link you created, processing by the processors in Section 6 for the purposes in this Policy, and disclosure required by law. We do not use your SNS data for our own research or analytics.

Contact and beta feedback messages are used only to reply and to understand defects or improvements. We do not use them for advertising. Submissions tied to a signed-in user are deleted together with that user's data when the account is deleted. Requests to delete a signed-out submission are handled using the reply email address.

To improve the Service and respond to failures, we send non-identifying usage events and error reports with tokens and email addresses removed to the measurement and monitoring services in section 6. Posts, metrics, and access tokens are not included.

4. Storage and Security

Data is stored in a secured database (Supabase / PostgreSQL). For monthly report share links we store only the token hash and expiry, not report files. SNS access and refresh tokens are encrypted at rest and handled only on the server. Tokens are never exposed to the browser.

We apply appropriate technical and organizational safeguards, but we cannot guarantee absolute security of data transmitted over the internet. Contact us if you have security concerns.

5. Retention and Deletion

While an SNS account remains connected, we retain its data and update it once per day via automated sync. If you stay logged in but do not use the Service for a period, we retain data until you disconnect the SNS account or delete your Service account.

When you disconnect an SNS account, we delete the data tied to that connection in that workspace, including posts, metrics, follower snapshots, comments, mentions, tagged posts, hashed monthly report share links, and the industry category selected for that account. If another workspace still has the same SNS account connected, that other connection stays in place. The range of past data shown to that workspace follows the full-period display in Section 3. Industry averages themselves are shared aggregates that do not identify you. We delete the stored averages for a category when no remaining connected account still uses that category. You can disconnect anytime from Settings.

When you delete your Service account (withdraw), data linked to your account is deleted, including SNS connections, posts, metrics, comments, mentions, tagged posts, and hashed monthly report share links. This cannot be undone. If other members remain in a workspace, or another workspace keeps the same SNS account connected, data those workspaces display may remain under Section 3 and the previous paragraph.

After deletion, complete erasure from disaster-recovery backups may take up to 30 days for technical reasons. We may retain data longer where required by law.

For the steps to request deletion by email, disconnect only an SNS account, or revoke access on the platform, see Data Deletion Instructions.

6. Third-Party Services

We use the following third-party services, each governed by its own privacy policy and terms:

  • Kinde — authentication (privacy policy)
  • Supabase — database and file storage (privacy policy)
  • Vercel — application hosting, page-performance measurement (Vercel Speed Insights), product-usage measurement (Vercel Web Analytics), and runtime error logs (privacy policy). Speed Insights measures display performance and is not used for advertising or behavioral targeting. Runtime error logs are recorded at Vercel so we can respond to failures. Vercel Web Analytics records product usage events such as sign-up, account connection, team creation, invites, analytics views, CSV download, and share link creation. Event properties do not include personal data.
  • Sentry — error monitoring. We send error information and browser and device information. Email addresses, tokens, and cookies are removed before sending. We do not use session replay (privacy policy).
  • Meta Platforms (Instagram Graph API) — used to retrieve Instagram data (privacy policy)
  • TikTok for Developers / TikTok API for Business — used to retrieve TikTok data (privacy policy)
  • Resend — sends email to you: digest emails when you turn them on in Settings, notices when an account needs to be reconnected, and anomaly alerts according to your Settings (privacy policy)

We operate in compliance with Meta and TikTok platform terms and developer policies (Meta Platform Terms, TikTok Developer Terms of Service).

7. Cookies

We use authentication session cookies required to keep you logged in. These cookies are necessary for the Service to recognize you and keep the session secure.

We use Vercel Speed Insights to measure page display performance. That measurement is not used for advertising or behavioral targeting. Product-usage measurement (Vercel Web Analytics) and error monitoring (Sentry) are described in Section 6.

We do not use cookies for advertising or behavioral targeting.

8. Changes to This Policy

We may update this Policy when laws or the Service change. Material changes, including changes to the beta, sharing inside a workspace, the range of past data that is shown, email, performance measurement, product-usage measurement, or error monitoring, are announced by posting them on this page and updating the last updated date.

The revised Policy takes effect when it is posted on this page. Please review this page from time to time.

9. Contact

For questions about this Policy or requests to access, correct, or delete personal information, contact:

Operator: Reaplus Inc. (株式会社Reaplus)

Service site: https://trendtag.youthnow.jp

The public site domain is trendtag.youthnow.jp. The operator name is Reaplus Inc. (株式会社Reaplus).

Email: info@reaplus.jp

In-app contact form: Contact