Your information stays yours.

01Who we are

PathPilot is operated by Guru-Link Inc., doing business as PathPilot ("PathPilot", "we", "us"), at 11 Strickland Ave, Toronto, Ontario M6K 3E6, Canada.

This policy explains how we handle personal information when you use the PathPilot app at app.pathpilot.ai, visit pathpilot.ai, or contact us. We follow Canada's Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws, including Quebec's Law 25, and the laws of the other regions where our clients operate.

02If you use PathPilot through an organization

Many people use PathPilot through an organization, such as a workforce or community organization, a college or university, or an outplacement provider. In that case:

• The organization decides how PathPilot is used in its programs, under its agreement with us.
• Practitioners in that organization (for example, your career advisor or coach) can see your profile, plans and progress so they can support you.
• The organization sees reporting on engagement and progress across its programs.
• We handle your information on the organization's behalf and follow their instructions as well as this policy. For questions about how an organization uses your information, you can contact them or us.

If you signed up for PathPilot yourself, we are responsible for your information as described in this policy.

03What we collect

When you use the PathPilot app

• Account information: your name, email address, the organization you joined through (if any), your language and other preferences, and your password, which is stored encrypted.
• Career information you share: your experience, education, skills, goals, resumes, job preferences and anything else you choose to tell PathPilot.
• Conversations: your conversations with PathPilot, including voice practice interviews, and any feedback you give.
• Notes and activity: notes, tasks and plans created by you or your practitioner, and your activity and progress in the app.
• Technical information: device and browser type, IP address, general location and how you use the app, so we can keep it secure and working well.

When you visit pathpilot.ai

• Forms: if you book a demo or contact us, the information you enter, such as your name, work email, organization, role and message.
• Booking: when you book a time, Google Calendar collects the details you enter to schedule the meeting.
• Analytics: aggregate visit statistics, such as which pages are viewed. Our analytics do not use cookies or identify you personally.

Please don't share sensitive information you don't need to, such as health details or government ID numbers. PathPilot does not need them to help you.

04How we use it

• To provide PathPilot: guidance, career plans, job matches, resume help, interview practice and reminders.
• To let your practitioner and organization support you, if you joined through one.
• To give organizations reporting on their programs.
• To improve PathPilot, using aggregated and de-identified information.
• To keep PathPilot secure, prevent misuse and meet our legal obligations.
• To reply to you, schedule demos and send service updates. We send marketing emails only with your consent, and you can unsubscribe at any time.

05How we use AI

PathPilot uses AI models to understand what you share and to draft guidance, summaries, notes and matches. We are certified to ISO/IEC 42001, the international standard for managing AI responsibly.

• We only work with AI providers that have zero data retention. They process what you share to answer in the moment, do not store it, and do not use it to train their models.
• Job matches come with the reasons behind them, so you can judge them yourself.
• AI supports people's judgment. It does not make decisions about you on its own. Where a practitioner is involved, they review and decide.

06Who we share it with

We do not sell personal information, and we do not share it for advertising. We share it only:

• With your organization and practitioners, if you use PathPilot through an organization, as described above.
• With employers, only with your consent. We never share your information with an employer unless you choose to.
• With service providers who help us run PathPilot, such as cloud hosting, AI model providers, our website host (Netlify), our customer relationship management system (Lightfield) and Google (for booking demos). They may use your information only to provide their service to us, under contract. Our current list of service providers is available on request.
• When required by law, or to protect the rights, safety and security of people or PathPilot.
• In a business transfer, such as a merger or sale, where the new owner must protect your information as this policy describes.

07Where your information is stored

We store the information in the PathPilot app in our client's region: in Canada for Canadian clients, in the United States for U.S. clients and in the European Union for EU clients.

Some service providers, such as those that run this website, may process information in other countries. Information processed outside your country may be subject to the laws of that country, including access by its courts and authorities.

08How long we keep it

• We keep your account information while your account is active, or for as long as your organization's agreement with us requires.
• When you delete your account, we delete your personal information within 30 days, unless the law requires us to keep it longer.
• We keep demo and contact requests for as long as we have a business relationship with you or your organization, then delete them.
• We may keep aggregated, de-identified information that can no longer identify you.

09Your rights and choices

You can ask to:

• access the personal information we hold about you;
• correct information that is wrong or incomplete;
• export your information in a portable format;
• delete your information and your account;
• withdraw your consent, or object to or restrict some uses of your information.

Email privacy@pathpilot.ai. We may need to confirm your identity first. We reply within 30 days and there is usually no cost. If you use PathPilot through an organization, we may work with them to respond.

If you live in the European Union or another region with its own privacy law, you have the rights that law gives you, and we will honour them.

10How we protect it

• Encryption of data in transit and at rest.
• Role-based access, so people see only what their role needs.
• Multi-factor authentication for our staff, audit logging and regular access reviews.
• An AI management system certified to ISO/IEC 42001. ISO 27001 and SOC 2 are in progress.

No system is perfectly secure. If a breach affects your personal information and creates a real risk of significant harm, we will notify you and the authorities as the law requires.

11Minimum age

You must be at least 16 to create a PathPilot account yourself. We do not knowingly collect personal information from anyone younger. If you believe someone under 16 has signed up, email privacy@pathpilot.ai and we will delete their information.

Organizations that offer PathPilot to young people are responsible for getting any consent the law requires.

12Cookies and similar technologies

• The PathPilot app uses essential cookies to keep you signed in and secure. They cannot be turned off.
• This website does not use advertising or tracking cookies. It stores your light or dark mode choice in your browser, and briefly remembers your first name between the demo form and the booking page.
• Embedded content: the booking calendar is provided by Google, and demo videos by YouTube in privacy-enhanced mode. These services follow their own privacy policies.

13Changes to this policy

We may update this policy as PathPilot changes. We will change the date at the top and, for significant changes, tell you by email or in the app before they take effect.

14Contact us

For privacy questions or requests, email privacy@pathpilot.ai, or write to Privacy, Guru-Link Inc. (PathPilot), 11 Strickland Ave, Toronto, Ontario M6K 3E6, Canada.

If you're not satisfied with our response, you can complain to the Office of the Privacy Commissioner of Canada, or to the privacy regulator where you live.