Privacy Policy

PathPilot is operated by Guru-Link Inc. (operating as PathPilot), a company based in Toronto, Ontario, Canada. We are the organization responsible for the personal information described in this policy.

We handle personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy legislation. Where we serve people or institutions outside Canada, we apply the same standards and will meet additional local requirements agreed with those institutions.

Questions, requests, and complaints go to our Privacy Officer, whose contact details are at the end of this policy. You also have the right to complain to the Office of the Privacy Commissioner of Canada.

We collect information to provide and improve our career guidance services. The types of information we collect include:

Account Information

• Name and email address
• Organization affiliation (if applicable)
• Account preferences and settings
• Password (stored securely using industry-standard encryption)

Career Profile Data

• Skills, experience, and education history
• Career goals and preferences
• Resume and portfolio information
• Activity completion and progress tracking

Usage Data

• Feature usage and interaction patterns
• Session duration and frequency
• Device and browser information
• IP address and general location data

Conversation Data

• AI coaching conversations and interactions
• Feedback and ratings you provide
• Support interactions and inquiries

We use the information we collect for the following purposes:

Personalized Career Coaching

We use your profile and conversation data to provide tailored career guidance, job recommendations, and skill development activities that match your goals and experience.

Service Improvement

Aggregated, anonymized usage data helps us improve our AI models, add new features, and enhance the overall user experience for everyone.

Analytics and Reporting

For organizational customers, we provide aggregated analytics on user engagement, outcomes, and program effectiveness. Individual user data is never shared without explicit consent.

Communication

We may send you service updates, feature announcements, and educational content. You can opt out of marketing communications at any time while still receiving essential service notifications.

We are committed to protecting your privacy. Here's how we handle information sharing:

What We Share

• Service Providers: Cloud hosting, product analytics, and AI model providers who help us operate the service. Each is bound by contract to protect your information and use it only for us. See Service Providers and Data Location for details and how to request the current list.
• Organizational Administrators: If you access PathPilot through an organization, administrators may see aggregated usage data but not your personal conversations or detailed profile information.
• Legal Requirements: We may disclose information when required by law or to protect our rights, safety, or the safety of others.

What We Don't Do

We retain your data only as long as necessary to provide our services and fulfill the purposes described in this policy:

• Active Accounts: Your data is retained while your account remains active.
• Account Deletion: When you delete your account, we remove your personal data within 30 days, except where retention is required by law.
• Anonymized Data: We may retain anonymized, aggregated data for analytics and service improvement purposes.
• Legal Requirements: Some data may be retained longer if required for legal, tax, or regulatory purposes.

Under PIPEDA you have rights over your personal information. We respond to requests within 30 days, at no cost in ordinary cases, and will tell you if we need more time and why:

To exercise any of these rights, please contact us at hello@pathpilot.ai.

We use cookies and similar technologies to enhance your experience:

Essential Cookies

Required for the website to function properly. These cannot be disabled and include authentication and security cookies.

Analytics Cookies

Help us understand how visitors interact with our website. This data is aggregated and anonymized.

Preference Cookies

Remember your settings and preferences to provide a personalized experience.

You can manage cookie preferences through your browser settings. Note that disabling certain cookies may affect website functionality.

We implement strong security practices measures to protect your data:

• Encryption: All data is encrypted in transit and at rest.
• Access Controls: Strict role-based access controls limit who can access your data.
• Monitoring: 24/7 security monitoring and incident response capabilities.
• Certifications: ISO 42001 certified (responsible AI management); ISO 27001 and SOC 2 in progress.
• Regular Audits: Third-party security audits and penetration testing.

While we implement robust security measures, no system is completely secure. We encourage you to use strong passwords and protect your account credentials.

We use a small number of service providers to run PathPilot, for example cloud hosting, product analytics, and the AI models that power parts of the experience. Each is bound by contract to protect personal information and to use it only to provide services to us.

Some of these providers process information outside Canada. While information is in another country, it may be accessible to courts and law enforcement in that country under its laws. We take this into account when selecting providers and when agreeing data terms with institutional customers.

Current list on request. Institutional customers and prospective customers can request our current list of service providers, including what each one processes and where. Email our Privacy Officer and we will send it.

We notify institutional customers of material changes to this list under the terms of their agreement.

When a college, workforce organization, employer, or other institution provides PathPilot to the people it serves, that institution decides what information is shared with us and for what purpose. We process that information on the institution's behalf and under our agreement with them.

If you use PathPilot through an institution and want to know what it can see, ask the institution first. Administrators see engagement and progress information for the people in their programs. They do not see private conversation content that is not part of the program record.

Institutions that require a data processing agreement, security review, or specific retention terms should contact our Privacy Officer. We are ISO 42001 certified for responsible AI management, with ISO 27001 and SOC 2 in progress.

PathPilot is designed for users aged 13 and older. We do not knowingly collect personal information from children under 13.

For users between 13 and 18, we recommend parental guidance when using our services. Educational institutions using PathPilot for students under 18 must ensure appropriate consent and supervision.

If you believe we have inadvertently collected information from a child under 13, please contact us immediately at hello@pathpilot.ai, and we will promptly delete the information.

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons.

When we make significant changes, we will:

• Update the "Last updated" date at the top of this policy
• Notify you via email or through a prominent notice on our website
• Provide a summary of key changes

We encourage you to review this policy periodically to stay informed about how we protect your information.

If you have questions about this Privacy Policy or our data practices, please contact us: