Privacy policy
This policy explains how Pathfinder Career Coach handles personal data on our website path-finder.me and in our coaching app app.path-finder.me. We wrote it to be read, not skimmed past: if something is unclear, ask us at info@path-finder.me.
The short version: we collect what we need to coach you and run your account. Your data is stored and processed by AI models in the European Union. We don't sell it, we don't use it for advertising, and we don't use your coaching conversations to train AI models. You can ask us to export or delete everything at any time.
Who is responsible for your data
Pathfinder Career Coach is operated by a company registered with the Netherlands Chamber of Commerce (KvK) under number 52978141. We are the controller for the personal data described here.
Contact for anything about privacy, including requests to use your rights: info@path-finder.me.
What we collect, why, and on what legal basis
| Data | Why we use it | Legal basis (GDPR) |
|---|---|---|
| Account details: name, email address, password (stored only as a secure hash), or the name and email Google or Apple share when you sign in with them | Create and secure your account, let you sign in | Contract (Art. 6(1)(b)) |
| Coaching content: your messages, the coach's replies, goals, notes the coach keeps between sessions, files you upload, session history | Provide the coaching you signed up for, and continuity between sessions | Contract |
| Collaboration Scorecard answers and results | Show your profile and tailor your coaching | Contract |
| Your public LinkedIn profile (only if you choose the LinkedIn coach and give us your profile URL) | Give the LinkedIn coach context about your experience | Contract — at your request; you can remove it |
| Subscription and payment status, order and customer references from our payment provider | Run your subscription, invoicing | Contract; legal obligation for financial records (Art. 6(1)(c)) |
| Feedback you give (ratings, short surveys during your trial) | Improve the coach | Legitimate interest (Art. 6(1)(f)) |
| Technical data: IP address, browser type, timestamps, error and security logs | Keep the service running and secure, prevent abuse | Legitimate interest |
| Emails you send us | Answer you | Legitimate interest, or contract if it's about your account |
We don't need anything beyond your email address to create an account. Everything else you share is your choice; without it, the coaching is simply less personal.
Sensitive information in coaching conversations
Career conversations sometimes touch on health, family or other personal matters. We don't ask for this kind of information and you don't need to share it to get good coaching. If you do mention it, it's handled like the rest of your coaching content: used only to coach you, never shared for other purposes, and deleted when you ask.
Pathfinder is a coaching tool, not a medical, psychological or legal service.
How AI processes your data
Your coach is an AI. You choose between two coach types:
- Private coach — runs on Amazon Bedrock in the AWS Frankfurt region (Germany).
- Frontier coach — runs on Google Gemini through Google Cloud in a European Union region.
Documents you upload are converted into search indexes (embeddings) by the same EU-based services so the coach can refer to them.
These providers process your data only to answer your request. Under their business terms they don't use it to train their models. We don't use your coaching conversations to train AI models either.
If we ever add a model that processes data outside the EU, we'll update this policy first and tell you in the app.
AI can be wrong. Treat the coach's suggestions as input for your own decisions. We don't make decisions about you that have legal or similarly significant effects based solely on automated processing.
Free tools
Some pages on path-finder.me are free tools (for example a development-plan builder). When you use a tool, the text you enter is sent to an AI model hosted in the EU to produce your result. We do not store what you enter or what the tool returns: it is processed in memory and returned to your browser. We do keep technical usage data for 13 months: which tool, language, how long the input was, whether the run succeeded, how long it took, which campaign link you came from, and a one-way hash of your IP address that cannot be traced back to you after the day ends. We use this to keep the tools running, to limit abuse, and to see which tools help people.
Results are generated by AI. Check them before you use them. They are general information, not legal, tax or HR advice.
Email follow-ups
If you tick the box and enter your email address, we send you one email to confirm it, and after you confirm, three short follow-up emails about the same topic. Confirming means pressing a button on a page we link to, not just opening the link. After the third email we delete your address within about 30 days. You can unsubscribe with one click in any email. If you do not confirm within 30 days, we delete your address. If you unsubscribe, we keep only a one-way hash of your address on a suppression list so that we do not email you again by mistake. We keep a record of your consent (the wording you agreed to and when). Our legal basis is your consent, which you can withdraw at any time.
Who processes your data for us
We use a small number of service providers. They act on our instructions under data processing agreements, unless marked as independent.
| Provider | What for | Where |
|---|---|---|
| Amazon Web Services | Hosting the app and website, Private coach and the free tools (Amazon Bedrock), sending email (Amazon SES), our workflow server | EU — Frankfurt |
| Supabase | Database and authentication | EU — Ireland |
| GitHub | Our content repository (website and blog content) | See transfers below |
| Google Cloud | Frontier coach and document indexing | EU region |
| Apify | Retrieving your public LinkedIn profile — only if you use the LinkedIn coach | EU company; see transfers below |
| Revolut | Payment processing — Revolut handles your card details; we never see or store them | Independent controller for payment data |
| Google, Apple | Sign-in, only if you choose “Sign in with Google/Apple” | Independent controllers |
| Microsoft | Our email (when you write to us) | EU data boundary where available |
We don't sell personal data and we don't share it with advertisers or data brokers. We only disclose data to authorities when the law requires it.
Transfers outside the European Economic Area
We choose EU locations for storing and processing your data. Some of our providers are part of groups based outside the EEA, mostly the United States, and may access data for support or security, or route limited data through other regions. Where that happens, transfers are covered by the EU Standard Contractual Clauses and, where applicable, the EU–US Data Privacy Framework. Ask us for a copy of the relevant safeguards at info@path-finder.me.
How long we keep it
- Account and coaching data — as long as your account exists. When you ask us to delete your account, we delete it from our live systems within 30 days; backups that contain it expire within a further 30 days.
- Inactive accounts — if you haven't signed in for 24 months, we email you, and delete the account 30 days later unless you sign in.
- LinkedIn profile data — refreshed periodically while you use the LinkedIn coach; deleted when you switch it off or delete your account.
- Payment and invoice records — 7 years, because Dutch tax law requires it.
- Technical and security logs — up to 90 days.
- Free-tool usage data — 13 months. What you enter in a tool and what it returns are not stored at all.
- Email follow-up addresses — unconfirmed: 30 days. Confirmed: about 30 days after the third email, or 24 months without activity if the sequence is not finished. After you unsubscribe, only a one-way hash of the address is kept, on a suppression list.
- Emails with us — up to 2 years after our last contact, unless they relate to a contract or dispute.
Your rights
Under the GDPR you can ask us to:
- give you a copy of your personal data (access), in a portable format if you want (portability);
- correct data that is wrong (rectification);
- delete your data (erasure);
- limit how we use it (restriction), or stop using it where we rely on legitimate interest (objection);
- withdraw a consent you gave, at any time.
Email info@path-finder.me from the address linked to your account. We'll answer within one month, and may ask you to confirm your identity first. Using your rights is free.
If you're not happy with how we handle your data, please tell us. You also have the right to complain to the Dutch Data Protection Authority, the Autoriteit Persoonsgegevens.
Security
All traffic is encrypted (HTTPS). Data is stored in the EU with access limited to the people and systems that need it, and database rules ensure each user can only reach their own data. No system is perfectly secure; if a breach affects your data, we'll inform you and the authority as the law requires.
Our LinkedIn page
We publish posts on our LinkedIn company page, Pathfinder Career Coach, through LinkedIn's official API. We don't use that connection to collect data about LinkedIn members. LinkedIn shows us aggregated statistics about our page. When you interact with our page on LinkedIn, LinkedIn's own privacy policy applies.
Age
Pathfinder is meant for working professionals and is not intended for anyone under 16.
Changes to this policy
When we change how we handle personal data, we update this page and the date below first. For significant changes we'll also tell you in the app or by email before they take effect.
- Last updated:
- 5 November 2026