Privacy Policy

Pattern (“we”, “our”, or “us”) operates an AI-powered content strategy platform that analyzes video content and generates actionable reports for creators. This Privacy Policy explains how we collect, use, store, and protect your information when you use our website and services. By using Pattern, you agree to the practices described here. This policy should be read alongside our Terms of Use.

1. Scope and Eligibility

This policy applies to all users who access Pattern through our website or any related services. You must be at least 16 years of age to use Pattern. We do not knowingly collect personal information from anyone under this age. If we become aware that a user is under 16, we will take steps to delete their data promptly.

2. Information We Collect

Information you provide directly

When you use Pattern, you voluntarily provide us with certain information:

• Video URLs — Links to your own content and any inspiration videos you submit for analysis. These may be from Instagram, TikTok, or other supported platforms.
• Content style descriptions — Text you write describing your creative style, audience, and content goals.
• Submission history — Records of your analysis requests and their status.

Information collected via connected accounts (OAuth)

When you connect your Instagram or TikTok account to Pattern through OAuth, we collect and store the following with your explicit consent:

• Profile information — Your username, display name, profile picture URL, and platform account ID.
• Content metadata — Your published posts and videos with captions, titles, timestamps, and engagement metrics (likes, comments, shares, views, saves, reach) retrieved via official platform APIs.
• Follower statistics — Your follower count, tracked over time to show growth trends on your dashboard.
• Post-level insights (Instagram only) — Reach, saves, shares, views, and total interactions for your posts, retrieved via the Instagram Insights API. These metrics are only available for your own content on Professional (Business or Creator) accounts.
• Authentication tokens — OAuth access and refresh tokens used to maintain your connection. These are revoked on the platform side when you disconnect your account.

We only access data for the authenticated user's own account. We do not access other users' data, direct messages, or private content. You can disconnect your account at any time in Settings, which revokes our access immediately.

Information generated through the service

• Strategy reports — AI-generated analysis outputs including scores, pattern identification, content calendars, and script drafts produced from your submissions.
• Temporary video data — During processing, we temporarily download and analyze video content (visual frames, audio tracks, and transcripts). This temporary data is deleted once your report is generated.

Information collected automatically

• Device information — Browser type, operating system, and screen resolution.
• Usage patterns — Pages visited, features used, and interaction timestamps.
• Performance metrics — Page load times and error logs to maintain service reliability.

3. How and Why We Process Your Information

We process your information for the following purposes, each with a corresponding legal basis:

• To provide the service — Processing your video URLs and generating strategy reports is necessary to fulfill the service you have requested.
• To maintain your dashboard — Storing your submission history, reports, and connected account data (post metrics, follower counts, insights) so you can track your content performance across sessions.
• To improve the service — Analyzing aggregate usage patterns to improve analysis accuracy, interface design, and overall quality. This is based on our legitimate interest in operating and improving Pattern.
• To ensure security and reliability — Monitoring for abuse, errors, and performance issues to maintain a stable platform.

4. Data Storage and Retention

Your submissions and generated reports are stored in our database for as long as you actively use the service. Data from connected Instagram and TikTok accounts (post metrics, follower snapshots, insights) is stored to power your dashboard and is deleted when you disconnect the account or delete your Pattern account. Temporary video files downloaded during analysis are automatically deleted once processing is complete — typically within minutes. We do not retain copies of the video files themselves.

If you request deletion of your data, we will remove your submissions, reports, and all derived data (including AI-generated creator models, intelligence reports, and content analysis) within 30 days. We also instruct our AI processing providers to delete any cached data associated with your account. Anonymized, aggregated data that cannot be linked back to you may be retained for service improvement purposes.

5. How We Share Your Information

We do not sell, rent, or trade your personal information. We share data only with the following categories of service providers, each of whom processes data on our behalf and under contractual obligations:

• AI processing providers — Your video content, descriptions, and connected account data are sent to AI services for analysis. Our AI processing providers are: Anthropic (Claude) for strategy analysis and content synthesis, OpenAI (Whisper, GPT-4o) for audio transcription and analysis, and Google (Gemini) for video vision analysis. These providers process data solely at our direction to generate your reports. None of these providers use your data to train their models. All processing occurs via their API services under data processing agreements.
• Infrastructure providers — We use Supabase for database hosting, Vercel for application hosting, and Cloudflare (R2) for temporary file storage.
• Analytics providers — We use Google Analytics 4 to measure aggregate site usage. See section 8 for details on the data collected and how to opt out.

We may also disclose information if required by law, legal process, or to protect the rights, safety, or property of Pattern and its users.

6. International Data Transfers

Our service providers may process data in jurisdictions outside your country of residence, including the United States. Where such transfers occur, we ensure appropriate safeguards are in place, including standard contractual clauses and provider certifications, to protect your data in accordance with applicable privacy regulations.

7. Your Rights

Depending on your jurisdiction, you may have the following rights regarding your personal data:

• Access — Request a copy of the personal data we hold about you.
• Correction — Ask us to correct inaccurate or incomplete information.
• Deletion — Request that we delete your personal data, subject to any legal obligations we may have to retain certain records.
• Portability — Receive your data in a structured, machine-readable format.
• Objection — Object to the processing of your data where we rely on legitimate interest as the legal basis.
• Withdrawal of consent — Where processing is based on your consent, you may withdraw it at any time.

To exercise any of these rights, contact us at the address below. We will respond to your request within 30 days.

8. Cookies and Local Storage

Pattern uses minimal browser storage. We store your theme preference (dark or warm mode) in local storage so it persists between visits.

We use Google Analytics 4 (“GA4”) to understand how visitors use the site — which pages are popular, where users drop off, and how features are performing — so we can improve the product. GA4 sets first-party cookies (such as _ga) to distinguish unique visitors and collects aggregate metrics including page views, session duration, device type, browser, and general geographic region. Google does not store full IP addresses in GA4. We do not enable Google Analytics' optional advertising features (including Google Signals, personalized advertising, and remarketing audiences), so we do not share this data with Google's advertising network and do not use Google Analytics for retargeting. You can opt out of Google Analytics on any website by installing the Google Analytics Opt-out Browser Add-on.

9. Security

We implement technical and organizational measures to protect your data, including encryption in transit (TLS), secure database access controls, and prompt deletion of temporary video files after processing. While no system is completely immune to security threats, we take reasonable steps to safeguard the information you entrust to us.

10. Changes to This Policy

We may revise this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make material changes, we will update the effective date at the top of this page. We encourage you to review this policy periodically.

11. Contact Us

If you have questions about this Privacy Policy, wish to exercise your data rights, or have concerns about how your information is handled, please contact us at stephen@getpattern.io.