Pattern
Pricing

Privacy Policy

Last updated: 6/21/2025

1. Introduction

CBAP LLC ("we," "our," or "us") operates within the United States and is committed to protecting your privacy. This Privacy Policy describes how we collect, use, disclose, and safeguard your personal data when you use our website and services.

Our services are currently intended for users located in the United States only. By accessing or using our services, you confirm that you are located in the United States and agree to the collection and use of your information as outlined in this policy.

2. Information We Collect

We collect the following types of information to operate and improve our services:

2.1. Account Information

  • Name, email address, and any other details you provide when creating an account.

2.2. Business Information

  • Publicly available business data from the Google Places API, including business name, location, and images.

2.3. Payment Information

  • We use Stripe to process payments securely. CBAP LLC does not store or process your financial information directly.

2.4. Usage Data & Analytics

  • We collect anonymized or aggregated data about your interactions with our services, including IP addresses, device information, browser type, pages visited, and time spent on pages.
  • We use third-party analytics services (e.g., Google Analytics) to track usage patterns and improve our services.

2.5. Cookies & Tracking Technologies

  • We use cookies and similar tracking technologies to enhance your experience, analyze site performance, and support marketing efforts.
  • Users can control cookie preferences through browser settings.

2.6. AI Chat Communications

  • Instructions, requests, and conversations you have with our AI assistant when building your website.
  • Personal data you may voluntarily include in chat messages when describing your business, services, or website requirements.
  • Chat history, interaction patterns, and usage of AI features.
  • We do not use your chat conversations to train or improve AI models.

2.7. Session & Technical Data

  • Server logs, access logs, and error logs for troubleshooting and security purposes.
  • Session tokens, authentication data, and login timestamps.
  • Diagnostic data and performance metrics to maintain service quality.

3. Legal Basis for Processing

We process your personal data based on the following legal grounds:

  • Contract Performance: To provide our website building and hosting services as agreed in our Terms of Service.
  • Legitimate Interests: To improve our services, ensure security, prevent fraud, and analyze usage patterns.
  • Consent: For marketing communications and optional features (you may withdraw consent at any time).
  • Legal Compliance: To meet our legal obligations, including tax and financial reporting requirements.

4. How We Use Your Information

We use the information we collect for the following purposes:

  • To provide and improve our services – including troubleshooting, analytics, and service enhancements.
  • To manage accounts and process transactions – including subscription management and payment processing.
  • To operate our AI chat assistant and generate website content based on your instructions.
  • To communicate with you – including customer support, administrative updates, and promotional emails (you can opt-out at any time).
  • To enforce legal terms and policies – ensuring compliance with applicable laws and agreements.
  • To enhance security and prevent fraud – monitoring for suspicious activities and unauthorized access.

5. Data Sharing & Third-Party Services

We do not sell your personal data. However, we may share information in the following circumstances:

  • Service Providers & Vendors: We use trusted third-party service providers (such as Stripe for payments and Google for business data) to facilitate our services.
  • AI Service Providers: Your chat conversations and instructions are processed by OpenAI to power our AI assistant. OpenAI's use of this data is governed by their privacy policy and terms of service.
  • Legal Compliance: We may disclose information if required by law, legal process, or governmental request.
  • Business Transfers: In the event of a merger, acquisition, or sale of assets, user information may be part of the transferred assets.

6. International Data Transfers

While our services are intended for US-based users, some of our service providers may transfer your data outside the United States for technical operations:

  • OpenAI (AI services) may process data in various jurisdictions in accordance with their privacy practices.
  • Cloud infrastructure providers may store data in multiple regions for performance and redundancy.
  • We ensure appropriate safeguards are in place through contractual protections and industry-standard security measures.

7. Data Security & Protection

We implement industry-standard security measures to safeguard your personal data, including encryption, access controls, and secure infrastructure. However, no online service is entirely risk-free. You are responsible for maintaining the confidentiality of your account credentials.

In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected users within 72 hours of discovery and provide information about the nature of the breach and steps we are taking to address it.

8. Data Retention

We retain personal data for the following periods:

  • Account Data: Until account deletion, then 30 days for backup recovery purposes.
  • AI Chat Conversations: Retained indefinitely unless you request deletion (this policy is subject to change with advance notice).
  • Payment Records: 7 years for tax and financial reporting requirements.
  • Usage Analytics: Raw data for 12 months, then aggregated and anonymized.
  • Server Logs: 90 days for security and troubleshooting purposes.
  • Website Content: Until subscription cancellation, then deleted immediately unless you export your data.

9. Your Rights & User Controls

You have the following rights regarding your personal data:

  • Right to Access: Request a copy of the personal data we hold about you.
  • Right to Rectification: Request correction of inaccurate or incomplete personal data.
  • Right to Erasure: Request deletion of your personal data (subject to legal obligations and legitimate interests).
  • Right to Data Portability: Request your data in a structured, machine-readable format.
  • Right to Object: Object to processing based on legitimate interests or for direct marketing purposes.
  • Right to Restrict Processing: Request limitation of processing in certain circumstances.
  • Right to Withdraw Consent: Withdraw consent for processing that requires your consent.

To exercise these rights, contact us at support@pattern.site. We will respond within 30 days of receiving your request.

  • Marketing Opt-Out: Unsubscribe from marketing emails using the link in communications or contact us directly.
  • Account Management: Update your account information through your account settings or contact support.

10. Children's Privacy

Our services are not intended for individuals under the age of 13. If we learn that we have collected personal data from a child without verification of parental consent, we will take steps to delete the information immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be posted on this page with an updated revision date and, where appropriate, we will notify users via email. Continued use of our services after modifications constitute acceptance of the updated policy.

12. Contact Information

For any privacy-related inquiries, to exercise your rights, or to report privacy concerns, please contact us at support@pattern.site.