Privacy Policy

Table of contents

1. Information we collect

We collect information you provide directly (name, email, password) and information generated through your use of Pathio (learning paths created, videos watched, AI chat messages, progress data). We also collect technical data (IP address, browser type, device type) through standard web analytics via PostHog.

2. How we use your data

We do not sell your personal data. We use your information to: provide and personalise your learning experience; generate AI-powered learning paths and tutor responses; send transactional emails (registration, billing receipts) via Resend; analyse platform usage to improve the product; process payments securely via Stripe.

3. Information sharing & disclosure

We share data only with the following processors, each under a Data Processing Agreement:

• Supabase — authentication and database hosting (EU region available)
• Stripe — secure payment processing (we never store card details)
• Google (Gemini) — AI path generation for free users
• Anthropic (Claude) — AI tutor and path generation for Pro users
• Resend — transactional email delivery
• PostHog — product analytics (anonymized)

We share with authorities only when required by applicable law, and only to the extent legally required.

4. Data retention

Account data is retained as long as your account exists. After deletion, data is removed within 30 days except where legally required. AI chat messages are stored per video session. You may request deletion at any time.

5. Your rights & choices

• Access: Request a copy of all data we hold about you
• Correction: Update your profile from Account Settings at any time
• Deletion: Account → Settings → Delete account (processed within 30 days)
• Portability: Export your path history and AI chat history in JSON format
• Opt-out: Unsubscribe from marketing emails via any email footer link

Contact: privacy@pathio.ai — we respond within 30 days. EU/EEA users may also lodge a complaint with their local data protection authority.

6. Cookies & tracking

We use essential cookies for authentication (Supabase session cookies) and analytics cookies via PostHog to understand how users interact with the platform. See our Cookie Policy for full details and opt-out instructions.

7. Children's privacy

Pathio is not directed at children under 13 (or under 16 in the EU/EEA). We do not knowingly collect personal data from children. If you believe a child has provided us data, contact privacy@pathio.ai and we will delete it promptly.

8. Changes to this policy

We may update this policy from time to time. We will notify you of material changes via email or a prominent notice on the Service at least 14 days before the change takes effect. Continued use of the Service after the effective date constitutes acceptance of the updated policy.

9. Contact us

Pathio, Inc. · privacy@pathio.ai · San Francisco, CA, USA