Privacy Policy

This Privacy Policy explains how Patterns AI Inc. ("Patterns," "we," "us") collects, uses, shares, and protects information in connection with our process discovery and task mining platform, offered in two deployment models: Patterns Cloud and Patterns Enterprise. It applies to our website, our applications, and both product tiers.

1. Scope — Cloud vs. Enterprise

The two deployment models handle data differently, so this policy is explicit about which section applies where:

• Patterns Enterprise is deployed inside your organization's own cloud tenant (e.g., your AWS or Azure account) and uses AI models you've already configured there (e.g., Amazon Bedrock, Azure AI Foundry). We do not host, receive, or process this data ourselves.
• Patterns Cloud is hosted by us, on infrastructure described in Section 5, and is the model this policy primarily governs from a "what does Patterns itself do with your data" standpoint.

If you're an Enterprise customer, your organization's own privacy policy and internal controls govern your end users' data — this document describes the Patterns application layer, not your infrastructure.

2. Information We Collect

Workflow and process data (Cloud only). When you use Patterns Cloud, our software records activity to build a process map. You choose the capture mode:

• Metadata-only capture — records that an interaction occurred and what kind of element it occurred on. It does not record what was typed, displayed, or copied.
• Full capture — additionally records field values, on-screen text, and clipboard content needed to reconstruct the steps of a task.

Account and contact information. Name, work email, company name, and similar details you provide when creating an account, requesting a demo, or contacting us.

Billing information. If you're a paying customer, billing details are collected and processed by Stripe, our payment processor; we don't store full payment card numbers ourselves.

Website usage data. Standard web analytics and cookies when you visit processfinder.ai — see Section 9.

We do not knowingly collect any of the above from individuals under 16. See Section 10.

3. How We Use Information

We use the information described above to:

• Generate process maps, summaries, and documentation from captured workflow data
• Operate, maintain, and improve the Patterns platform
• Provide customer support and respond to inquiries
• Send account, billing, and service-related communications
• Meet legal, security, and contractual obligations

We do not sell personal information, and we do not use captured workflow data to train any AI model on behalf of anyone other than the customer whose data it is.

4. Anonymization (Patterns Cloud)

Log data stored on Patterns Cloud is anonymized before it's written to storage — we do not attach account or user identifiers to it, so a stored log cannot be traced back to the specific person or company that generated it.

Raw capture data (which may include on-screen content in full-capture mode) is deleted the next time it passes through our summarization process, which runs on a recurring cycle — typically every 7 days. What remains after that point is the structured, summarized output.

5. How We Share Information

We share information with the following categories of service providers, each acting under contract and only to the extent necessary to provide the service:

• Amazon Web Services — Patterns Cloud log data is stored on Amazon S3, in AWS's us-east-1 region.
• Google (Gemini API) — Cloud's summarization step sends workflow data to Google's Gemini API under Google's paid API terms, under which Google does not use submitted prompts or outputs to train its models.
• Stripe — for billing and payment processing.
• Google Analytics, Google Tag Manager, and Hotjar — website analytics tools used on processfinder.ai. See Section 9. Customer support is handled directly by our team by email and our contact form; we don't currently route support through a separate CRM or helpdesk platform.

We do not sell personal information to third parties, and we do not share captured workflow data across customers.

We may also disclose information if required by law, to enforce our agreements, or to protect the rights, property, or safety of Patterns, our customers, or others.

6. Data Retention

• Raw capture data (Cloud): retained only until the next summarization cycle (typically within 7 days), then deleted.
• Summarized outputs (Cloud): retained for the life of your account, or until you request deletion.
• Enterprise data: retained according to your own organization's policies, since it resides in your own tenant.
• Account and billing information: retained as long as needed to provide the service and meet legal/tax obligations.

7. Security

We maintain administrative, technical, and physical safeguards appropriate to the sensitivity of the information we handle, including encryption in transit and at rest, multi-factor authentication and social sign-on for admin access, and access logging. Full technical detail is available on our Cloud Security and Enterprise Security pages.

No method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

8. International Data Transfers

Patterns Cloud infrastructure is located in the United States (AWS us-east-1). If you're accessing Patterns Cloud from Canada, the EU/UK, or elsewhere, your information will be transferred to and processed in the United States.

9. Cookies and Tracking (Website)

Our website (processfinder.ai) uses the following cookies and similar technologies:

• Google Analytics & Google Tag Manager — used to understand how visitors use our site (pages visited, general traffic patterns) and to manage the tags that run other tracking scripts.
• Hotjar — used to understand on-site behavior, such as scrolling and click patterns, to help us improve the site.

These tools may set cookies or use similar technologies in your browser. You can control cookies through your browser settings; disabling them may affect how parts of the site function.

10. Children's Privacy

Patterns is intended for business use and is not directed at individuals under 16. We do not knowingly collect personal information from children.

11. Your Rights and Choices

Depending on where you're located, you may have rights to access, correct, delete, or receive a copy of your personal information, and to object to or restrict certain processing.

• Canada (PIPEDA / Quebec's Law 25): you may request access to, or correction of, your personal information.
• EU/UK (GDPR), if applicable: you have rights of access, rectification, erasure, restriction, portability, and objection, and the right to lodge a complaint with your local supervisory authority.
• California (CCPA/CPRA), if applicable: you have the right to know, delete, and correct your personal information, and to opt out of any "sale" or "sharing" as those terms are defined by California law. We do not sell or share personal information as defined under CCPA/CPRA.

To exercise any of these rights, contact us at malek@processfinder.ai or through our contact form. We will respond within the timeframe required by applicable law.

12. Changes to This Policy

We may update this Privacy Policy from time to time. If we make material changes, we'll notify customers by email or through the platform, and update the effective date above.

13. Contact Us

Questions about this policy or your data can be sent to malek@processfinder.ai or through our contact form.

This document governs data practices. Provisions relating to limitation of liability, warranties, indemnification, and dispute resolution are contained in our Terms of Service, not this Privacy Policy.