Privacy Policy

Pattern Vault, Inc. operates patternvault.com and the Pattern Vault application. For customer accounts we act as controller. For the leads you import into your boards and the messages you send, you act as controller and we act as your processor.

We collect what you give us at signup, what your payment provider reports back, and product-usage events that tell us which features are worth keeping.

Our listings database contains business contact information gathered from public sources: directory and map listings, the business's own website, public registrations, and licensed third-party data providers.

These records describe organisations. Where a field could identify an individual — an owner's name on a sole proprietorship, or a personal mobile used as a business number — we treat it as personal data and honour deletion requests from that person.

We do not build consumer profiles, we do not buy consumer marketing lists, and we do not track visitors to the websites we crawl.

We use customer data to provide and support the service, process payments, prevent abuse and fraud, meet legal obligations, and send service notices. Product analytics are used in aggregate to prioritise work.

We use listings data to compute signal scores, generate site previews on your instruction, and keep records current on our rolling re-scan cycle.

Marketing email goes only to customers and to people who opt in, always with a working unsubscribe link. We do not email the businesses in our database.

Where GDPR or UK GDPR applies: providing the service is necessary for our contract with you; maintaining a B2B listings database, securing the platform, and improving the product rest on our legitimate interests, assessed against the limited privacy impact of business-level data; marketing to prospects relies on consent where required; retention of invoices rests on legal obligation.

Generating or editing a preview sends the public listing content and your written instruction to our model providers under agreements that prohibit using the content to train their general models.

We retain preview drafts and edit history in your account so you can reopen them. Delete a preview and it goes on the same 30-day deletion path as the rest of your data.

We do not sell personal information and we do not share it for cross-context behavioural advertising. We share data only with processors who need it to run the service, plus with acquirers in a merger, or with authorities when a valid legal request compels it.

We set a session cookie required to keep you signed in, a preference cookie for interface settings, and first-party analytics cookies. There are no third-party advertising or social tracking pixels on the application. Marketing pages use one first-party analytics cookie you can decline without losing functionality.

Account and board data live for the life of your account and 30 days after deletion, excluding backups which cycle out within 90 days. Invoices are kept seven years for tax law. Support tickets are kept three years. Aggregated, non-identifying statistics may be kept indefinitely.

Listings records are refreshed on a rolling 30-day cycle; records suppressed at a business's request are kept only as a hashed suppression entry so we don't re-add them.

Depending on where you live you may have rights to access, correct, delete, or port your data, to object to or restrict processing, and to opt out of sale or sharing (we do neither). You can exercise most of these from account settings; anything else goes to privacy@patternvault.com.

California residents may designate an authorised agent, and we won't discriminate against you for exercising a right. EU and UK residents may complain to their supervisory authority; our EU representative details are available on request.

Business owners who find their listing in our database can request suppression at any time using the same address, without holding a Pattern Vault account.

Data is processed in the United States. For transfers from the EEA, UK, or Switzerland we rely on Standard Contractual Clauses and the UK Addendum, with a transfer assessment on file.

We encrypt data in transit with TLS 1.2+ and at rest with AES-256, enforce SSO and MFA internally, scope access to least privilege, log administrative actions, and test the platform annually with an external firm. If a breach affects your data we notify affected customers within 72 hours of confirming it.

Pattern Vault is a business tool and is not directed to anyone under 18; we don't knowingly collect their data.

When we change this policy materially we update the version and effective date above and email account holders at least 14 days ahead. Past versions are available on request.

Email privacy@patternvault.com — including business owners who want a listing removed. We confirm within 5 business days and complete removals within 30. Pattern Vault, Inc., 1100 Larimer St, Suite 400, Denver, CO 80204.