Privacy policy

Who this covers

Creative Patterns (the product at creativepatterns.app and related deployments) is a workspace for paid creative intelligence: Markdown notebooks, imported ad performance, pattern analysis, and generated runbooks. This policy describes what we process to run that product for you.

What we collect

• Account and auth. Email address and session data via Supabase (magic link or other methods Supabase supports). We do not operate a separate password store for magic-link sign-in.
• Workspace content. Data you create in the app: campaign names, notebook Markdown, runbooks, briefs, brand and GTM notes, and similar files stored for your workspaces.
• Ad and performance data. Creatives and metrics you import (for example from CSV) or sync from connected accounts, plus derived tags and pattern outputs the engine computes from that data.
• Reddit Ads connection. If you use Reddit Ads API OAuth, we store tokens and related identifiers needed to sync the authorized account. We use them only to fetch and normalize the data you trigger.
• Server-side AI (optional). When configured, we may send aggregated pattern evidence (scores, counts, labels — not your Reddit password) to OpenAI-compatible APIs to generate short narratives on top of the deterministic pattern engine. If the API is disabled or fails, the product falls back to non-AI copy.
• Product and security logs. Standard technical metadata (requests, errors, timestamps) needed to operate, secure, and debug the service. We do not use third-party advertising trackers on the logged-in product surface beyond what our hosting and auth stack require.

Why we use it

To provide and improve Creative Patterns: authenticate you, load your workspaces, run pattern analysis and runbook generation, store outputs you ask us to create, and respond to support. We do not sell your workspace contents or use them to train public models for other customers.

Where it lives

Primary infrastructure is Supabase (database, auth, storage) and the Next.js application on our hosting provider. Reddit Ads data is fetched from Reddit when you connect. If server-side narratives are enabled, a subset of pattern data is processed by OpenAI (or the model you configure) under their terms and privacy policy.

Sharing

We share data with subprocessors strictly as needed to operate the service: hosting, Supabase, Reddit (when you use the integration), and OpenAI (only when a server-side narrative call runs). We do not list or sell personal data to data brokers.

Retention & deletion

We keep your data while your account is active and you retain workspaces. You can delete content within the product where those actions exist. Account deletion or export beyond what the UI supports may require a request to us (see below). Backups may retain copies for a limited period consistent with our provider’s practices.

Security

We use industry-standard transport encryption (HTTPS), authenticated access to workspaces, and access controls aligned with Supabase RLS. No method of transmission over the Internet is 100% secure; we work to reduce risk as the product matures.

Children

Creative Patterns is not directed at children under 13, and we do not knowingly collect personal information from children under 13.

Changes

We will update this policy as features (billing, new integrations, regional hosting) change. The “last updated” date at the top will change when we do; continued use after material updates means you acknowledge the revised policy.