Privacy Policy

1. Introduction

Welcome to Pathway ("Pathway", "we", "our", or "us"). We are committed to protecting your privacy and personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our AI-powered video interview platform designed for college students and early-career professionals.

2. Information We Collect

Personal Information

• Name, email address, and phone number
• Educational background (university, major, graduation year)
• Resume and professional background
• Video recordings of interview responses
• GitHub account information (if connected)
• Google account information (if connected for Gmail or Calendar)

Information from Third-Party Services

When you connect third-party accounts, we may collect the following:

• GitHub: Public profile, public repositories, and contribution statistics
• Google Gmail: Read-only access to email messages solely to retrieve job application verification codes sent by employers (e.g., Greenhouse ATS security codes). We do not read, store, or process any other email content.
• Google Calendar: Calendar events and availability for interview scheduling

Automatically Collected Information

• Device information and browser type
• IP address and location data
• Usage data and interaction patterns

3. How We Use Your Information

We use the collected information to:

• Provide and maintain our interview services
• Process and analyze video interviews using AI technology
• Track your progress and growth over time
• Match candidates with potential employers
• Improve our platform and user experience
• Communicate with you about our services
• Comply with legal obligations

4. AI Processing

Our platform uses AI technology to analyze interview responses. This includes:

• Speech-to-text transcription of video responses
• Assessment of communication skills, problem-solving ability, and domain knowledge
• Resume parsing and analysis
• Progress tracking across multiple interviews

AI assessments are provided to assist employers in their hiring decisions but are not the sole determining factor. We believe in showing your growth trajectory, not just a single snapshot.

5. Information Sharing

We may share your information with:

• Employers: Interview results, profile information, and progress history for job matching
• Service Providers: Cloud storage, AI processing, and analytics services
• Legal Requirements: When required by law or to protect our rights

We do not sell your personal information to third parties.

6. Third-Party Integrations

GitHub Integration

If you choose to connect your GitHub account, we access your public profile information, public repositories, and contribution statistics. We use this information to showcase your coding activity and projects to potential employers. You can disconnect your GitHub account at any time from your profile settings.

Google Gmail Integration

Pathway offers an optional Gmail integration to streamline job applications. When you connect your Gmail account, we request read-only access (gmail.readonly scope) for the sole purpose of retrieving job application verification codes sent by applicant tracking systems (such as Greenhouse). Specifically:

• We only search for and read emails from known ATS senders (e.g., "no-reply@greenhouse.io") that contain verification codes
• We extract the numeric verification code from the email body and use it to confirm your job application
• We do not read, store, index, or process any other emails in your inbox
• We do not send emails on your behalf
• We do not share any email content with third parties
• Gmail access tokens are encrypted at rest using Fernet symmetric encryption
• You can disconnect Gmail at any time from your account settings, which immediately revokes our access

Google Calendar Integration

If you connect your Google Calendar, we access your calendar to check availability and create interview events with Google Meet links. We only read and write events related to Pathway interviews. You can disconnect Google Calendar at any time from your settings.

7. Google API Services User Data Policy

Pathway's use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. Specifically:

• We only use Google user data for the purposes described in this privacy policy and as explicitly consented to by the user
• We do not use Google user data to serve advertisements
• We do not allow humans to read Google user data unless: (a) we have your explicit consent, (b) it is necessary for security purposes (e.g., investigating abuse), (c) it is necessary to comply with applicable law, or (d) our use is limited to internal operations and the data has been aggregated and anonymized
• We do not transfer or sell Google user data to third parties
• We limit our use of Google user data to providing and improving the specific user-facing features described in this policy (verification code retrieval and calendar scheduling)

8. Automated Job Applications

Pathway offers an auto-apply feature that submits job applications on your behalf to employer career pages. When you use this feature:

• We use your profile information (name, email, resume, education) to fill out application forms
• AI generates a tailored cover letter for each application based on your profile and the job description
• Applications are only submitted to jobs you explicitly select or approve
• We capture a screenshot of each submitted application as proof of submission, stored securely in our cloud storage
• Your application preferences (e.g., work authorization, EEO responses) are used only for completing required application fields

9. Data Security

We implement appropriate technical and organizational security measures to protect your personal information, including:

• Encryption of data in transit and at rest
• Secure cloud storage infrastructure
• Access controls and authentication
• Regular security assessments

10. Data Retention

We retain your personal information for as long as necessary to provide our services and fulfill the purposes described in this policy. Interview recordings are typically retained for 24 months to track your progress over time, unless you request earlier deletion.

11. Your Rights

You have the right to:

• Access your personal information
• Correct inaccurate information
• Request deletion of your data
• Withdraw consent for data processing
• Export your data in a portable format
• Disconnect third-party integrations (GitHub, Gmail, Google Calendar) at any time from your account settings
• Revoke Google data access — disconnecting Gmail or Calendar immediately deletes stored OAuth tokens and stops all data access

To exercise these rights, please contact us at the email address below. For Google data specifically, you can also revoke access at any time via your Google Account permissions page.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last Updated" date.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us: