1. Introduction
Hidden Pattern (“we”, “us”, “our”) operates the website hiddenpattern.ai. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our service. We are committed to protecting your personal data and your right to privacy in compliance with applicable data protection regulations including the General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA), and other applicable privacy laws.
2. Information We Collect
Personal Information: When you create an account, we may collect your name, email address, and authentication credentials (including OAuth tokens from Google or Facebook).
Uploaded Images: We collect images you voluntarily upload for analysis (handwriting samples, palm photos, or face photos). These images are processed to assign a personality archetype.
Payment Information: Payment processing is handled by third-party providers (PayPal). We do not store your credit card or payment details on our servers.
Usage Data: We automatically collect information about your device, browser type, IP address, pages visited, and timestamps for analytics and security purposes.
3. How We Use Your Information
- To provide, maintain, and improve our personality analysis service
- To process your uploaded images and generate personality reports
- To process payments and fulfill orders
- To communicate with you about your account and service updates
- To detect, prevent, and address technical issues and security threats
- To comply with legal obligations
4. Data Storage and Security
We implement industry-standard security measures to protect your personal data, including encrypted data transmission (TLS/SSL), secure server infrastructure, and access controls.
Uploaded images are stored on secure servers and are not shared with third parties. Images are used solely for the purpose of generating your personality analysis.
We retain your data only for as long as necessary to provide our services or as required by law.
5. Data Sharing and Disclosure
We do not sell, trade, or rent your personal information to third parties. We may share information only in the following circumstances:
- Service Providers: With trusted third-party services that assist in operating our platform (payment processors, hosting providers)
- Legal Requirements: When required by law, court order, or governmental authority
- Safety: To protect the rights, property, or safety of Hidden Pattern, our users, or the public
6. Your Rights (GDPR / CCPA)
You have the following rights regarding your personal data:
- Right to Access: Request a copy of the personal data we hold about you
- Right to Rectification: Request correction of inaccurate personal data
- Right to Erasure: Request deletion of your personal data (“right to be forgotten”)
- Right to Restrict Processing: Request limitation of how we process your data
- Right to Data Portability: Request transfer of your data in a structured format
- Right to Object: Object to processing of your data for certain purposes
- Right to Withdraw Consent: Withdraw previously given consent at any time
To exercise any of these rights, please use the account deletion page or contact us at [email protected].
7. Cookies and Tracking
We use essential cookies for authentication and session management. We do not use advertising cookies or third-party tracking pixels.
You can control cookie settings through your browser preferences.
8. Children's Privacy
Our service is not directed to individuals under the age of 16. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child without parental consent, we will take steps to delete that information.
9. International Data Transfers
Your data may be transferred to and processed in countries outside your country of residence. We ensure appropriate safeguards are in place to protect your data in compliance with applicable data protection laws.
10. Data Breach Notification
In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected users and relevant authorities within 72 hours of becoming aware of the breach, as required by GDPR.
11. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on this page with a revised “Last updated” date. Your continued use of the service after changes constitutes acceptance of the updated policy.
12. Contact Us
If you have questions about this Privacy Policy or wish to exercise your data protection rights, contact us at:
[email protected]