Privacy Policy

1. Who We Are

Pattern Owl is a product review analytics platform operated by TrustSpot Acquisitions Co, Inc. ("we," "us," or "our"). This policy explains how we collect, use, and protect your information when you use our service.

2. Information We Collect

Account Information

When you create an account, we collect your email address and, optionally, your name. If you sign in with Google, we receive your name and email from Google. We also collect optional business information during onboarding (company name, website, and business type).

Review Data

You provide review data by uploading CSV files or connecting a review platform (e.g., RaveCapture). This data may include product names, review text, ratings, dates, and reviewer information such as customer names, email addresses, and general location (city, state, country). You are responsible for ensuring you have the right to share this data with us.

Integration Credentials

If you connect a third-party review platform, we store your API key to sync reviews on your behalf. API keys are encrypted at rest using AES-256-GCM encryption.

Usage Data

We collect basic usage data such as browser type, pages visited, and error logs to maintain and improve the service. We use cookies for authentication sessions only.

3. How We Use Your Information

• To provide and maintain the Pattern Owl service
• To analyze your review data and generate insights using AI
• To authenticate your account and protect your data
• To sync reviews from connected platforms on your behalf
• To send transactional emails (account verification, password resets)
• To diagnose errors and improve service reliability

4. AI Processing

We use OpenAI's API to analyze review text and generate insights. When processing your reviews, we send review text, ratings, and product names to OpenAI. We do not send customer names, email addresses, or order IDs to OpenAI. OpenAI's data usage policies apply to data processed through their API.

5. Third-Party Services

We use the following third-party services to operate Pattern Owl:

• Supabase — Database hosting and authentication
• Vercel — Application hosting
• OpenAI — AI-powered review analysis
• Google — OAuth authentication (optional)
• Postmark — Transactional email delivery

Each service processes data under its own privacy policy. We only share the minimum data necessary for each service to function.

6. Data Security

We take reasonable measures to protect your data, including:

• All data transmitted over HTTPS
• Row-level security on all database tables (users can only access their own data)
• API keys encrypted at rest
• Passwords hashed by our authentication provider (never stored in plaintext)
• Server-side secrets are never exposed to the browser

7. Data Retention

We retain your account data and review data for as long as your account is active. You may disconnect integrations and delete uploaded data at any time through the application. If you wish to delete your entire account and all associated data, please contact us at the email below.

8. Your Rights

You have the right to:

• Access the data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Disconnect third-party integrations at any time
• Export your data

To exercise any of these rights, contact us at the email below.

9. Children's Privacy

Pattern Owl is not intended for use by individuals under the age of 18. We do not knowingly collect information from children.

10. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any material changes by posting the updated policy on this page with a revised "Last updated" date.

11. Contact Us

If you have questions about this privacy policy or your data, contact us at:

TrustSpot Acquisitions Co, Inc.
Email: wade@patternowl.com