Privacy Policy

Pattern is operated by Pattern.io Limited, a company registered in England and Wales (company number 17133011) (“we”, “our”, or “us”). We operate an AI-powered content strategy platform that analyzes video content and generates actionable reports for creators. Pattern.io Limited is the data controller for the personal data processed through the Service.

This Privacy Policy explains how we collect, use, store, and protect your information when you use our website and services. It does not itself create consent where another lawful basis applies; much of our processing is necessary to provide the Service or based on our legitimate interests, as described below. This policy should be read alongside our Terms of Use.

1. Scope and Eligibility

This policy applies to all users who access Pattern through our website or any related services. You must be at least 16 years of age to use Pattern. We do not knowingly collect personal information from anyone under this age. If we become aware that a user is under 16, we will take steps to delete their data promptly.

2. Information We Collect

Information you provide directly

When you use Pattern, you voluntarily provide us with certain information:

• Video URLs: Links to your own content and any inspiration videos you submit for analysis. These may be from Instagram, TikTok, or other supported platforms.
• Content style descriptions: Text you write describing your creative style, audience, and content goals.
• Submission history: Records of your analysis requests and their status.

Information collected via connected accounts (OAuth)

When you connect your Instagram or TikTok account to Pattern through OAuth, we collect and store the following with your explicit consent:

• Profile information: Your username, display name, profile picture URL, and platform account ID.
• Content metadata: Your published posts and videos with captions, titles, timestamps, and engagement metrics (likes, comments, shares, views, saves, reach) retrieved via official platform APIs.
• Follower statistics: Your follower count, tracked over time to show growth trends on your dashboard.
• Post-level insights (Instagram only): Reach, saves, shares, views, and total interactions for your posts, retrieved via the Instagram Insights API. These metrics are only available for your own content on Professional (Business or Creator) accounts.
• Authentication tokens: OAuth access and refresh tokens used to maintain your connection. When you disconnect, we stop using these tokens and revoke them where the platform supports revocation.
• Publishing permission (optional): If you choose to enable cross-posting, you separately grant a publishing permission (Instagram content publishing, or TikTok video upload and direct post). This lets Pattern publish content to your own connected account at your direction. It is never requested unless you opt in, and you can decline or disconnect at any time.

Through this connection, we only access data for the authenticated user's own account. We do not access other connected users' data, direct messages, or private content through the platform APIs. You can disconnect your account at any time in Settings; when you do, we stop accessing your account and revoke our tokens where the platform supports it.

Information generated through the service

• Strategy reports: AI-generated analysis outputs including scores, pattern identification, content calendars, and script drafts produced from your submissions.
• Temporary video data: During processing, we temporarily download and analyze video content (visual frames, audio tracks, and transcripts). This temporary data is deleted once your report is generated.

Our analysis focuses on the style, structure, and performance patterns of content, such as pacing, hooks, formats, topics, and tone, and on speech transcribed to text. We do not use facial recognition and do not create biometric identifiers such as faceprints or voiceprints.

Information you provide for publishing

If you use cross-posting, the video file and caption you upload to publish are stored securely with our cloud storage provider so we can complete the post. To publish, Pattern serves the video to the destination platform (Instagram or TikTok) over a temporary, signed URL on our verified domain and transmits your caption and the posting options you chose (for TikTok: privacy level, comment/Duet/Stitch settings, and any commercial-content or AI-generated-content disclosure). We publish only to your own connected account, only when you choose to publish (immediately or at a time you schedule), and we never post without that action. For TikTok you can instead send the video to your TikTok inbox as a draft to finish in the app. Uploaded videos are retained only to operate the cross-posting feature and are deleted when you delete the post or your account.

Information collected automatically

• Device information: Browser type, operating system, and screen resolution.
• Usage patterns: Pages visited, features used, and interaction timestamps.
• Performance metrics: Page load times and error logs to maintain service reliability.

3. How and Why We Process Your Information

We process your information for the following purposes, each with a corresponding legal basis:

• To provide the service: Processing your video URLs and generating strategy reports is necessary to fulfill the service you have requested.
• To maintain your dashboard: Storing your submission history, reports, and connected account data (post metrics, follower counts, insights) so you can track your content performance across sessions.
• To publish content you create: When you use cross-posting, we transmit the video and caption you upload to the platform(s) you select, at your explicit direction, to publish to your own connected account. This is necessary to fulfil the publishing action you requested.
• To improve the service: Analyzing aggregate usage patterns to improve analysis accuracy, interface design, and overall quality. This is based on our legitimate interest in operating and improving Pattern.
• To ensure security and reliability: Monitoring for abuse, errors, and performance issues to maintain a stable platform.

4. Data Storage and Retention

We keep personal data no longer than necessary for the purposes described in this policy.

Your submissions and generated reports are stored in our database for as long as you actively use the service. Data from connected Instagram and TikTok accounts (post metrics, follower snapshots, insights) is stored to power your dashboard and is scheduled for deletion when you disconnect the account or delete your Pattern account. Temporary video files downloaded during analysis are deleted once processing is complete; we do not retain them as part of the Service.

Videos you upload for cross-posting are stored to operate the cross-posting feature and are deleted when you delete the post or your Pattern account. The published post then lives on your own Instagram or TikTok account, governed by that platform's policies, not ours.

If you request deletion of your data, we will remove your submissions, reports, and all derived data (including AI-generated creator models, intelligence reports, and content analysis) within 30 days, and request deletion from our processing providers where applicable. Anonymized, aggregated data that cannot be linked back to you may be retained for service improvement purposes.

Disconnecting a single connected account is different, and is not a deletion request. When you disconnect an Instagram or TikTok account you may ask us to delete the data we derived from it; if you do, we keep that data for a further 90 days and then delete it. The 90 days exist so that reconnecting the same account within that window restores your history rather than starting you from nothing — reconnecting cancels the deletion. If you would rather have the data removed straight away, submit a deletion request instead and we will action it within 30 days as described above.

5. How We Share Your Information

We do not sell, rent, or trade your personal information. We share data only with the following categories of service providers, each of whom processes data on our behalf and under contractual obligations:

• AI processing providers: Your video content, descriptions, and connected account data are sent to third-party AI services for analysis (for strategy analysis, audio transcription, and video vision analysis). These providers process data at our direction to generate your reports. We do not permit these providers to use your content to train their own models, and we access them through their business API services.
• Infrastructure providers: We use reputable third-party providers for database hosting, application hosting, and file storage.
• Analytics providers: We use an analytics provider to measure aggregate site usage. See section 8 for details on the data collected and how to opt out.
• Social platforms you publish to: When you use cross-posting, we send the video and caption you upload to the platform you choose (Instagram or TikTok) so it can be published to your own account, at your direction. Your use of those platforms is governed by their own terms and privacy policies.

Call scheduling: Separately from the providers above, our book a call page embeds a Google Calendar booking form so you can pick a time with us. We do not send your account data to Google. The details you submit in that form, which is whatever it asks for, such as your name and email, are collected by Google and shown to us so we can set up the call. Google operates that form under its own privacy policy.

We may also disclose information if required by law, legal process, or to protect the rights, safety, or property of Pattern and its users.

6. International Data Transfers

Our service providers may process data in jurisdictions outside your country of residence, including the United States. Where such transfers occur, we ensure appropriate safeguards are in place, including standard contractual clauses and provider certifications, to protect your data in accordance with applicable privacy regulations.

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you.
• Correction: Ask us to correct inaccurate or incomplete information.
• Deletion: Request that we delete your personal data, subject to any legal obligations we may have to retain certain records.
• Portability: Receive your data in a structured, machine-readable format.
• Objection: Object to the processing of your data where we rely on legitimate interest as the legal basis.
• Withdrawal of consent: Where processing is based on your consent, you may withdraw it at any time.

To exercise any of these rights, contact us at the address below. We will respond to your request within 30 days.

You also have the right to complain to a data protection authority. If you are in the UK, you may contact the Information Commissioner's Office (ICO). If you are in the EEA, you may contact the data protection authority in your country of residence.

8. Cookies and Local Storage

Pattern uses minimal browser storage. Beyond the consent cookie described below, we store small amounts of interface state in your browser, such as which notices you have dismissed and which checklist items you have ticked, so the app looks the same when you come back.

We use a privacy focused analytics provider to understand how visitors use the site, which pages are popular, and how features are performing, so we can improve the product. We rely on our legitimate interest in operating and improving Pattern. By default, analytics runs without storing anything on your device. It helps us understand how people use Pattern, such as which pages and features are used and where people run into problems, and can include interactions like clicks, scrolling and page navigation. We do not use this data for advertising or share it with advertising networks. Analytics data is retained for a limited period and then deleted.

Because this default analytics stores nothing on your device, we treat it as exempt from cookie consent requirements. If you Accept analytics cookies, we additionally set a cookie so we can recognize your browser across visits, which makes the measurement more accurate. On your first visit we show a banner where you can Accept all, Deny, or open Settings to choose categories individually. If you Deny (or withdraw later), we stop this site analytics and store nothing beyond the strictly necessary items below. Separately, when you are signed in, we record basic product usage events needed to operate and improve the service, as described in section 3. The only storage we use regardless of your choice falls under the “Necessary” category: a small cookie recording your consent choice, plus the interface state described at the top of this section. Both are strictly necessary for the site to function as you expect and cannot be turned off. You can change or withdraw your choice at any time using the Manage Cookies link in the site footer.

Our book a call page embeds a Google Calendar booking form, which loads when you open that page. Google may set its own cookies in that form under its own privacy policy. Our cookie settings do not control them. No other page loads it.

9. Security

We implement technical and organizational measures to protect your data, including encryption in transit (TLS), secure database access controls, and prompt deletion of temporary video files after processing. While no system is completely immune to security threats, we take reasonable steps to safeguard the information you entrust to us.

10. Changes to This Policy

We may revise this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will update the effective date at the top of this page. We encourage you to review this policy periodically.

11. Contact Us

If you have questions about this Privacy Policy, wish to exercise your data rights, or have concerns about how your information is handled, please contact us at [email protected].