Company particulars and contact appear below; an agreement is not confirmed until they are completed. Patternward controls account, request, own creator recruitment, early access and support contact data. Customer-entrusted materials are processed under the DPA; the customer determines its own legal basis.
2. Purposes and bases
Account, order and service data support pre-contract steps and performance under GDPR Article 6(1)(b). Legally required records rely on (c). Access protection, request investigation and legal claims rely on legitimate interests under (f) after assessing individual rights. Optional early access messages and separate creator consents rely on (a); withdrawal does not invalidate earlier processing.
3. Early access
The form records email, feature, language and consent version. Clicking the emailed link confirms the subscription; submission alone does not subscribe to other messages or create a customer account. Each message allows withdrawal. Retention periods for registrations and minimal consent proof require legal review; unverified automatic deletion is not asserted.
4. Opt-in creator beta
Creators separately choose profile listing, statistics access and contact through briefs, and can withdraw each consent independently. Brand search shows only profiles with the required consents. Statistics come only from accounts connected by the creator with consent. Profiles are not scraped from platforms. Brands do not automatically receive private creator email or phone details. Creators declare their own rates.
5. Market observations
Only admitted official advertising sources and public brand pages described on Method are collected. Ads show their source and capture date. Personal data in public materials require assessment of legitimate interests and individual rights; collection authorization is not a general legal assessment of every item. The ad takedown page sends requests for review with a 72-hour deadline. Market text is not copied into customer creatives.
6. Retention, recipients and locations
Customer-owned data defaults to the subscription period plus 90 days; owners can set workspace policy and request deletion. Market observations and measurements are kept for 13 calendar months, with deletion receipts. Workspace deletion allows two weeks for export or withdrawal; backups expire separately. The inventory below distinguishes pilot, planned and disabled providers. Clerk identity is processed in the US; EU-only processing is not asserted.
7. Rights and contact
Individuals may request access, correction, erasure, restriction and portability where applicable, object to legitimate-interest processing and withdraw consent. They may complain to the Polish data protection authority, UODO. Send requests to the contact below; entrusted-data requests are referred to the relevant customer. Statutory rights deadlines differ from product support timing. Polish support is available through the in-app form and email, targeting a reply within one business day, Monday to Friday, 09:00 to 17:00 Warsaw time.
8. Cookies and decisions
Necessary cookies and device storage support sessions, protection against forged changes, workspace choice, language and appearance. Optional application measurement requires consent, adjustable in privacy settings; details are in the cookie document. Ad analysis and suggestions do not make legally significant decisions about individuals under GDPR Article 22. Access is not used to profile people appearing in public ads.
Last changed:
Oracle Cloud
Pilot hosting, database and files
State
Pilot hosting; Stockholm region confirmed by the founder, agreement and backups pending
Location
Oracle Cloud Infrastructure, Stockholm (eu-stockholm-1), EU
Transfer basis
EEA hosting region confirmed by the founder; verify the processing agreement and backup configuration.
Retention
Workspace policy; backups are expected in the same Stockholm region (eu-stockholm-1), with location and lifetime still to be confirmed.
Hetzner
Planned application, database, file and backup hosting
State
Planned; not the current pilot host
Location
Falkenstein, Germany (fsn1), EU; planned configuration, not deployment evidence.
Transfer basis
EEA processing after a processing agreement and deployment verification.
Retention
Workspace policy; backup expiry follows the deletion plan.
Brevo
Transactional messages, subscription confirmations and notifications
State
Selected provider; account exists, credentials and activation are pending
Location
France, EU according to recorded provider documentation.
Transfer basis
EEA processing; verify the processing agreement and account settings before activation.
Retention
Message and log retention must be verified in account settings.
Google Cloud Vertex AI
Analysis and text or images from customer-owned data; market pattern analysis without copying ads
State
not used in the pilot
Location
Not used in the pilot; no customer data processing.
Transfer basis
eu uses EU processing; global requires verified terms and EEA transfer safeguards independently of the customer choice.
Retention
No training and context caching off; abuse logs may remain until an exemption is granted, and a request does not establish zero retention.
Clerk
Identity, sign-in, sessions, email verification, multi-factor authentication and invitations
State
Selected identity provider; Patternward determines local permissions
Location
United States; identity storage is not described as EU-only.
Transfer basis
Confirm the processing agreement and EEA transfer basis for the actual account; adequacy or contractual clauses are not presumed.
Retention
Verified account settings and terms; complete before production activation.
Payment provider
Payments and settlements after an agreement
State
Not selected; existing payment tests do not establish an active service
Location
To be selected and verified.
Transfer basis
Assess the provider and agreement at selection; processing is not authorized.
Retention
To be agreed; accounting documents follow statutory duties after adviser confirmation.
Jev (TypeSafe)
Judgments over public market data; customer data (brand material, drafts, questions and support tickets) only with that workspace’s “Best available model” opt-in.
State
Disabled by default; each use requires its switch, capability and current provider receipt.
Location
Processing location unconfirmed; EU-only workspaces retain local fallback paths.
Transfer basis
Current provider eligibility and processing agreement required; selecting the best available model does not replace an EEA transfer basis.
Retention
No training according to the integration design; zero retention requires a separate enterprise agreement and operator evidence.
fal.ai
Image and video generation from owned brand material. Competitor material never enters generation.
State
Inactive until its key is configured and the operator confirms the terms.
Location
Outside the EU; requires this workspace’s “Best available model” selection.
Transfer basis
Provider admission, processing agreement and EEA transfer basis required.
Retention
Retention, deletion and no-training terms require confirmation per operation; request headers do not replace an agreement.
ElevenLabs
Polish narration with authorized voices and script verification. Competitor material never enters generation.
State
Inactive until its key is configured and the operator confirms the terms.
Location
Outside the EU; requires this workspace’s “Best available model” selection.
Transfer basis
Provider admission, processing agreement and EEA transfer basis required.
Retention
Retention, deletion and no-training terms require confirmation per operation; request headers do not replace an agreement.
MiniMax
Video and narration from owned material after explicit voice selection. Competitor material never enters generation.
State
Inactive until its key is configured and the operator confirms the terms.
Location
Outside the EU; requires this workspace’s “Best available model” selection.
Transfer basis
Provider admission, processing agreement and EEA transfer basis required.
Retention
Retention, deletion and no-training terms require confirmation per operation; request headers do not replace an agreement.
BytePlus ModelArk
Video from owned product photos. Competitor material never enters generation.
State
Inactive until its key is configured and the operator confirms the terms.
Location
Outside the EU; requires this workspace’s “Best available model” selection.
Transfer basis
Provider admission, processing agreement and EEA transfer basis required.
Retention
Retention, deletion and no-training terms require confirmation per operation; request headers do not replace an agreement.
Ayrshare
Optional publication of approved owned brand creatives, post copy and schedules; account identifiers and publication receipts. No competitor data or media.
State
Inactive until provider selection after sandbox acceptance, configuration and key.
Location
Processing region unconfirmed; processing may also take place outside the EU (details below).
Transfer basis
Processing terms and transfer basis required before activation; EU workspaces require separate owner opt-in.
Retention
Provider terms require confirmation; local connections and receipts follow the workspace retention inventory.
OpenAI
AI assisted copy drafting, used only when enabled for your workspace.
State
Disabled until enabled for your workspace; provider admission and consent to processing outside the EU are required.
Location
United States; processing outside the EU.
Transfer basis
Standard contractual clauses (SCCs) in the OpenAI processing agreement; verification for the specific account required before transferring data.
Retention
Disabling response storage (store=false) does not establish zero retention; abuse monitoring logs may contain content for up to 30 days unless zero data retention is confirmed for the account.
PostHog EU
Platform usage analytics, only with consent to optional analytics.
State
Optional analytics; no events are sent without consent.
EEA processing; verify the processing agreement and PostHog Cloud EU project selection for the account.
Retention
Confirm event retention in project settings before activation.
Change history
. Marked Vertex AI as not used in the pilot and listed OpenAI copy drafts for opted-in shops in data location.
. Added OpenAI for optional copy drafting in the US and PostHog EU for analytics with consent.
. Added the inactive posting-provider adapter and EU-workspace consent for transferring owned materials.
. Added Oracle Cloud for the pilot, a separate planned hosting status, AI location choices and pending company particulars.
. The founder confirmed OCI hosting in Stockholm (eu-stockholm-1); same-region backups remain to be confirmed. Added Jev (TypeSafe), public market data and customer data only with that workspace’s opt-in to the best available model.
