The short version
- We collect what you give us (account details, your resume, job preferences and applications) and basic technical data needed to run the service securely.
- To produce match scores and tailored resumes, we send your resume and the job text to our AI provider. Under our agreement with that provider, this data is not used to train its models.
- We don't sell your personal information, and we don't share it with employers.
- We use one essential sign-in cookie. No advertising or tracking cookies.
- Your data is stored on servers in the United States.
- You can download all your data or delete your account from inside the app. Deleted accounts are permanently erased 30 days after deletion.
1. Who we are
Path is a service operated by 13113779 Canada Inc. (“Path”, “we”, “us”), a Canadian corporation. Our mailing address is 6-2160 Highway 7, Suite 128, Vaughan, ON L4K 1W6, Canada. We are responsible for the personal information described in this policy.
We have designated a Privacy Officer who is accountable for our compliance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and other applicable privacy laws. You can reach the Privacy Officer at info@pathapp.dev.
If another privacy law applies because of where you live or how Path is offered to you, you may have additional rights under that law. Nothing in this policy limits rights that cannot legally be waived.
2. Information we collect
Information you give us
| Category | What it includes |
|---|---|
| Account and authentication | Your name, email address, account identifiers and sign-in status. Path authenticates you with email and password. An invite code may be required when you create an account. We store a one-way hash of your password, not the password itself, and use secure session cookies after you sign in. |
| Profile | Optional details such as headline, phone number, city, province, country and LinkedIn URL. |
| Resume | The file you upload (PDF or Word) and the content we extract from it: contact details, work history, education, skills, certifications, and an ATS readability score. |
| Job preferences | Target job titles, experience level, location and radius, work arrangement, job types, salary expectations, work authorization and sponsorship needs, industries, company sizes and companies you've hidden. |
| Applications | Jobs you save or track, their status, your notes, next steps, deadlines and interview details. |
| Analyses | Job descriptions you paste or select, the match analyses we generate, and any tailored resumes you create. |
| Path AI and interview practice | Prompts and messages you send to Path AI; the job or application context you choose; mock-interview questions, typed answers, voice transcripts when voice is enabled, session settings, and feedback generated for you. |
| Searches and alerts | Saved searches, alert settings and notification preferences. |
| Support messages | Anything you send us when you contact support. |
Please don't include sensitive information we don't need (for example, health information, social insurance number, or photos) in your resume or notes. If your resume contains it, it will be processed along with the rest of the file.
Information collected automatically
| Category | What it includes |
|---|---|
| Sessions and security | When you sign in: IP address, a description of your device and browser, sign-in times, and sign-in attempts (used to detect and block abuse). You can see and end your active sessions in the app. |
| Usage and AI logs | Which features you use and when, credit balance and transactions, and a log of each AI request (feature used, time, size of the request and response, and its cost to us). These logs help us enforce fair-use limits, bill correctly and fix problems. |
| Server logs | Our hosting provider records standard request information (such as IP address, URL, time and browser type) for security and reliability. |
Payment information
Payments are handled by Stripe. When you buy a plan or credit pack, you enter your card details directly with Stripe; we never see or store your full card number. We receive limited information from Stripe, such as your customer and subscription identifiers, what you bought, the amount, payment status and billing period.
3. How we use your information
We use personal information only for the purposes below, and we ask for your consent where the law requires it.
- To provide the service: create your account, parse your resume, rank job listings, run match analyses, generate tailored resumes, provide Path AI and mock-interview practice, track applications and send the alerts you've turned on.
- To communicate with you: verification codes, password resets, receipts, service and security notices, and replies to support requests. Product news is sent only if you've opted in, and you can turn it off any time.
- To process payments and manage credits and subscriptions.
- To keep Path safe: prevent fraud and abuse, enforce our Terms, and secure accounts.
- To improve the service: understand which features are used and fix errors, using aggregated or minimal data where possible.
- To meet legal obligations, such as tax and accounting requirements.
Legal bases (GDPR / UK GDPR). We process your data to perform our contract with you (providing the service), for our legitimate interests (security, fraud prevention and improving the service, balanced against your rights), to comply with legal obligations, and with your consent where required (for example, optional marketing emails). You can withdraw consent at any time.
No selling. We do not sell your personal information, and we do not “share” it for cross-context behavioural advertising as defined by California law.
4. How AI processing works
Path uses artificial-intelligence models to provide resume, job-search, assistant and mock-interview features. The information sent depends on the feature you choose and may include your resume content, job descriptions, saved application context, prompts, interview answers and voice transcripts when voice is enabled.
- Resume parsing and analysis. Resume text and relevant job-posting text may be sent to our AI provider to extract structured information, identify strengths and gaps, and generate suggestions.
- Tailored resumes. Your resume content, job details and selected keywords may be sent to generate a draft for you to review.
- Path AI. Messages you send, recent conversation context and any job, application or resume context you deliberately attach may be sent to the AI provider to generate a response.
- AI Interview. The role or job description you select, relevant resume information, your practice answers and the conversation needed for follow-up questions may be processed to run the mock interview and generate feedback. A mock interview is practice only and is not shared with employers.
We transmit AI inputs and outputs over encrypted connections and use them to provide the feature you requested, protect the service, enforce usage limits and troubleshoot problems. Our commercial AI providers process data under their business terms and data-protection commitments. We do not permit Path user content to be used by us to train a general-purpose AI model.
No employment decision. Path's AI does not make hiring, firing or other employment decisions about you. Match scores, interview feedback and other outputs are tools for your own job search. They can be inaccurate or incomplete, so review them before relying on them or sending anything to an employer.
6. Job listings and applying
Job listings come from third-party job boards and aggregators. When you click to apply, you leave Path and go to the employer's or job board's site. Anything you submit there is governed by their privacy policy, not ours. Path does not send your resume to employers on your behalf.
8. International transfers
Path is based in Canada, but our servers and most of our service providers are in the United States. Your information will be stored and processed there and may be accessible to courts, law-enforcement and national-security authorities of that country under its laws.
We use contractual, technical and organizational safeguards appropriate to the service and applicable law. Where a law requires an assessment before information is communicated outside a jurisdiction, including Quebec requirements that may apply to transfers outside Quebec, we apply the required assessment and safeguards before that transfer.
9. How long we keep data
- While your account is open, we keep your information so the service works as expected. You can delete individual items (such as a resume or an application) at any time.
- When you delete your account, you are signed out everywhere immediately and your account is deactivated. Your personal information is permanently erased 30 days after deletion. During those 30 days, contact us if you deleted it by mistake.
- Backups made by our hosting or database providers may contain deleted data for a limited period under their backup and disaster-recovery schedules. Deleted data is not restored to active use except where needed for recovery, security or legal obligations and is removed as backups expire or are overwritten.
- Security records: expired sessions are removed about a week after they expire, and sign-in attempt records after 30 days.
- Billing records (such as invoices and payment records) are kept as long as tax and accounting laws require, which in Canada is generally six years. These are kept separately from your profile.
10. Your rights and choices
Depending on where you live, you have some or all of the following rights. We give them to all users wherever practical.
- Access and portability: download a copy of your data in a machine-readable format from Account › Security › Download my data.
- Correction: edit your profile, resume details and preferences in the app, or ask us to correct anything you can't change yourself.
- Deletion: delete your account from Account › Security. You can also ask us to delete specific information.
- Withdraw consent / opt out: turn off alerts and product emails in your notification settings, or withdraw any consent you've given (this may limit what the service can do).
- Canadian privacy rights: subject to applicable law, you may request access to personal information we hold about you, challenge its accuracy, withdraw consent where consent is the basis for processing, and ask questions or make a complaint to our Privacy Officer.
- U.S. state privacy rights: where an applicable state privacy law gives you rights such as access, correction, deletion, portability, or an appeal after a denied request, you may exercise those rights by contacting us. We do not sell personal information or use it for cross-context behavioural advertising.
- California residents: if the CCPA applies to Path and to your information, you may have rights to know/access, delete, correct, receive information about categories of data and recipients, and opt out of sale or sharing. We do not sell or share personal information as those terms are used for cross-context behavioural advertising, and we do not discriminate against you for exercising applicable rights. You may use an authorized agent.
To make a request we can't handle through the app, email info@pathapp.dev. We may need to verify your identity first. We respond within 30 days, or tell you if we need more time as allowed by law.
If you're not satisfied with our response, you may be able to complain to the Office of the Privacy Commissioner of Canada, the privacy regulator in your province or territory, or the U.S. state authority that enforces a privacy law applicable to you.
11. Security
We use safeguards appropriate to the sensitivity of the information, including:
- Encryption in transit (HTTPS) for all traffic, and encryption at rest provided by our hosting and database providers.
- Authentication and session security use hashed passwords, secure HTTP-only cookies, and controls designed to prevent unauthorized access.
- Controls for sign-in security, session management, rate limiting where appropriate, and restricted internal access on a need-to-know basis.
No system is perfectly secure. If a breach of security safeguards creates a real risk of significant harm to you, we will notify you and report it to the Privacy Commissioner of Canada and other authorities as required by law.
Please use a strong, unique password and keep it private.
12. Children
Path is not intended for anyone under 16, and you must be at least 16 to create an account. We don't knowingly collect personal information from children under 16. If you believe a child has given us information, contact us and we'll delete it.
13. Changes to this policy
We may update this policy as Path changes. We'll post the new version here with a new “Last updated” date and, for significant changes, notify you by email or in the app before they take effect.
14. Contact us
Questions, requests or complaints about privacy:
- Email: info@pathapp.dev
- Mail: Privacy Officer, 13113779 Canada Inc. (Path), 6-2160 Highway 7, Suite 128, Vaughan, ON L4K 1W6, Canada
Signed-in users can also send us a message from Account › Help & support.