We value your privacy and are committed to protecting your data. This Chapter explains how personal data is collected, used, and protected on the TrendX platform (the website, the mobile applications, and all related services).
Users may control cookie settings through their browser or device settings.
The TrendX application does not collect any sensitive data (such as health, biometric, religious, or ethnic data) except with prior explicit consent, and in accordance with the special provisions set out in Article (Six) of the Law and Article (Six) of the Implementing Regulations.
When signing in through an external authentication service, we may collect the user's name, email address, profile image, and public profile information. We do not collect passwords or sensitive authentication credentials belonging to those services. By signing in, the user is also subject to the privacy policies of those providers:
Data is collected directly from the user through registration forms, the user profile, and account settings, for the purposes of creating the account, verifying identity, providing the Application's services, personalizing the user experience, and communicating in relation to the account.
Certain data is collected automatically during use of the Application from the following sources: analytics technologies and cookies or their equivalents; device and network data collected automatically; and interoperability with social platforms where the user elects to sign in through them.
Pursuant to Articles (Five) and (Six) of the Personal Data Protection Law and the related provisions of the Implementing Regulations, the Company relies on the following legal bases:
TrendX does not sell or rent personal data to any third party under any circumstances. Data is disclosed only in the following cases:
The Company may share specific data with service providers acting on its behalf (such as cloud computing providers and analytics and notification services), under contracts that ensure compliance with the provisions of the Law and the preservation of data confidentiality.
In response to requests from competent judicial or governmental authorities in accordance with the laws in force, or to give effect to a judicial ruling or investigation order.
Data may be shared where necessary to protect the rights of the Company or the rights, safety, or property of users, or to prevent or report a crime.
Where operational necessity requires the transfer of any data outside the Kingdom of Saudi Arabia, such transfer shall be carried out in accordance with the controls of Article (Twenty-Nine) of the Law and the related provisions of the Implementing Regulations, after obtaining the necessary approvals from SDAIA, and subject to ensuring an adequate level of protection in the receiving country.
Personal data is stored on secure servers using approved encryption technologies, in accordance with the controls issued by the National Cybersecurity Authority (NCA), with the application of role-based access controls (RBAC) and the ISO/IEC 27001:2022 information security management standard.
Upon fulfilment of the purpose of the data or expiry of the retention period, data is destroyed by secure means that prevent its recovery, using secure erasure and digital destruction techniques in accordance with approved international standards (ISO/IEC 27001:2022), and in accordance with the Fifth Principle of the Personal Data Protection Policy of the National Data Management Office.
TrendX application is committed to preventing any form of Child Sexual Abuse and Exploitation (CSAE), and is fully committed to providing a safe digital environment and protecting minors from any harmful or unlawful content.
The Application employs automated and human moderation systems to detect violations and remove them immediately, and to report them to the competent authorities where appropriate, including the National Center for Missing & Exploited Children (NCMEC). Users may report any suspected violations via info@trendx.co or through the in-app reporting tool.
This commitment is grounded in the Anti-Cyber Crime Law promulgated by Royal Decree No. (M/17) of 1428H; the Child Protection Law promulgated by Royal Decree No. (M/14) of 1436H and its Implementing Regulations; and the child protection provisions of the Google Play Developer Program Policy and the Apple App Store Review Guidelines.
Under Article (Four) of the Personal Data Protection Law and the related provisions of the Implementing Regulations, you are entitled to exercise the following rights:
To exercise any of these rights, please contact info@trendx.co. No fees are charged for the exercise of these rights.
In the event of a personal data breach that may cause harm to data subjects, the Company undertakes the following in accordance with Article (Twenty-Four) of the Implementing Regulations:
TrendX aspires to reflect the best version of professional dialogue: a space built on responsible opinion, informed analysis, and data derived from genuine engagement. Here we engage with respect, we disagree professionally, and we contribute content that adds value. A user's presence on TrendX signifies their commitment to building a safe, trustworthy, and professional environment.
TrendX is a space for constructive professional discussion, not an arena for attacks or abuse. The publication of any content involving the following is not permitted:
Where you encounter content that violates these standards, please use the reporting tools available within the Application.
TrendX is a professional community built on trust. We require users to use correct and accurate information, to provide genuine information about themselves or their organization, not to create fake accounts, not to impersonate other persons or entities, and not to publish misleading or fabricated information.
We welcome wide-ranging discussions on work, management, markets, trends, and skills, provided that all contributions remain within a professional framework. The following is not permitted:
When creating a survey or a post, you must ensure that the question is clear, avoid misleading or provocative phrasing, refrain from using content to incite division, and refrain from posing questions that violate privacy or target specific individuals. The purpose of content on TrendX is to stimulate thought, measure trends, and enrich dialogue.
TrendX relies on two complementary systems to detect violating content:
Following review, content may be restricted in visibility, flagged for review, or permanently removed.
Certain content that might otherwise breach these standards may be permitted to remain in specific cases where it: has clear educational value; forms part of legitimate professional analysis; or relates to a news event of professional relevance. In such cases, an appropriate warning may be displayed before viewing.
TrendX applies an integrated system of automated and human mechanisms to protect the safety of the community and the reliability of survey data. The system operates across two distinct domains: content safety for posts and events, and data quality for survey responses. Both domains are governed by a single configurable enforcement engine that records strikes against user accounts and escalates penalties automatically.
Before any content reaches the artificial intelligence model, it passes through an internal keyword filter. This is a deterministic, high-speed check that requires no external service. The filter is applied to post titles, answer options, and event titles.
Upon detection of a match, the system responds immediately, before the content is created or stored: the post or event is not created; a notification is sent to the author stating the reason for removal; a strike is added to their account; and the penalty engine evaluates the new strike balance and applies the appropriate penalty.
Content that passes the keyword filter is submitted to an intelligent classification model that returns a risk score from 0 to 100, on the basis of which the applicable action is determined:
The 40–90 range is deliberately broad so that ambiguous content is routed to human review rather than decided automatically under uncertainty, which reduces false positives for legitimate users while maintaining control over clear violations.
The integrity of surveys is a cornerstone of TrendX's value. The system uses behavioural signals — not assumptions — to identify users who are not responding in good faith. Devices and IP addresses serve solely as sensing instruments; strikes and penalties are recorded and applied exclusively at the account level, in order to protect users in shared environments (households, universities, and offices).
This signal detects users who complete surveys at a speed that does not allow the questions to be read and considered. The expected duration is calculated in one of two ways: automatically according to the type of each question (each type having a configured minimum time), or by a manual override set by the survey creator or the administrator. A strike is recorded where a survey is submitted in less than the configured proportion of the expected duration.
Fraud resistance: the timer uses server time (changes to the device clock have no effect); reloading the page does not reset the timer; and a strike is recorded only after a successful submission, not upon abandoning the survey.
This signal identifies coordinated abuse in which multiple accounts are operated from a single device to inflate survey completions. A cluster is flagged where the number of distinct accounts on a single device reaches a configured threshold and where a configured proportion of them have completed surveys on that device. Where both conditions are met, every eligible account in the cluster receives a strike.
Each strike source has an independent enforcement plan that tracks its own strike counter and applies penalties on that basis alone. This means that a user with multiple types of violations is assessed separately for each source.
No other action generates a strike. Reports, automatic hiding, wallet usage, and refund operations do not create strikes.
Administrators may modify the number of strikes at each level, the action applied at each level, and the sources associated with the plan, through the administration panel. Modifications apply only to subsequent strikes and do not operate retroactively.
The account state is enforced at the backend level before every action — it cannot be circumvented through the user interface.
Every administrative action is logged with the administrator's identifier, timestamp, reason, and the affected user or content. Deletion reasons are retained internally and are not displayed to the user. The logs are available for any compliance review.
A user is entitled to submit an appeal against any enforcement action via info@trendx.co within 15 days of the action, and the appeal will be answered within 15 business days. Where the user remains dissatisfied, they are entitled to escalate the matter to the Saudi Data and Artificial Intelligence Authority (SDAIA).
A detailed complaint should be sent to info@trendx.co and will be answered within 15 business days of receipt in complete form.
Where the user is dissatisfied with the handling of the complaint or does not receive a response within the specified period, they are entitled to submit a complaint to:
The Company reserves the right to update this Guide periodically in response to regulatory or operational developments. Where material amendments are made, users will be notified through:
The update date shown at the head of the Guide constitutes the official reference for the effectiveness of the current version. Continued use of the Application after notification shall constitute acceptance of the amended version.
This Guide takes effect from the date of its publication and supersedes all previous versions of TrendX's separate policies (the Privacy Policy, the Professional Community Guide, and the Platform Health Strategy), including the Privacy Policy page currently published on the website. Any conflict between this Guide and any earlier document shall be resolved in favour of this Guide.
Note: This is an English translation of the Arabic Unified Policy and Privacy Guide. In the event of any discrepancy between the Arabic and English versions, the Arabic version shall prevail.
