Services privacy policy

Pathful, Inc. ("Pathful," "we," "us," or "our") provides K–16 college, career, and workforce readiness solutions (the "Services") to schools and districts ("Customers"). This Services Privacy Policy explains what Personal Information we collect from users of the Services — typically educators, students, parents, and the industry professionals who volunteer their expertise — and how we use, share, and protect it.

This policy covers the Services only. A separate Website Privacy Policy governs your use of pathful.com. By accessing or using the Services, you're also bound by the Customer Agreement between Pathful and your school or district. Security and compliance documentation — including SOC 2 Type 2, FERPA, and COPPA attestations — is available on the Pathful Trust Center.

1. Personal information we collect

We build user rosters through the Customer's single sign-on vendor. The Customer decides what Personal Information it provides to us, whether by bulk upload, manual entry, or a third-party vendor.

Required

• Students: first and last name, username and password, school and class information.
• Educators: first and last name, email address, username and password, school and class information.

Optional, at the district's discretion

• Students: SIS/state/other unique identifiers, date of birth, grade level, ethnicity, gender, email address, IEP status, 504 accommodation status, photo, address.
• Educators: photo, address.

Authentication

For Customers using SSO, we also receive an authentication token, a unique identifier, and the username/password set by the SSO provider.

Live streaming sessions

When educators or other users join a live streaming session, we collect a recording of it — which may include audio, video, names, and chat history of everyone who participated.

SMS text messaging

If you voluntarily give us a phone number, you consent to receive SMS messages related to the Services (message and data rates may apply). Reply STOP to opt out. We don't share text-messaging opt-in data or your mobile information with third parties for marketing purposes.

2. Information collected from students

Students' use of the Services generates Personal Information in the form of assignments — assessments, essays, survey results, resumes, cover letters, and educator feedback — which is shared with their educator to support them. If a Customer allows post-graduation access, we'll collect an email address to enable that. As noted above, Live Session recordings may also include student audio, video, names, and chat.

Industry professionals who volunteer as Presenters provide us their name, resume, references, and information sufficient for a background check, under a separate agreement with us. Presenter sessions are also recorded.

3. Automatically collected information

As you use the Services we automatically collect device and usage information — IP address, browser and OS, device identifiers, network information, activity logs, language, pages viewed, and time on page — to understand usage, diagnose issues, remember preferences, improve the Services, and support security. We use rostering/SSO integrations, cookies, and clicktracking to do this, and in some cases third parties help us collect and interpret it. Most browsers let you manage or reject cookies, though that may affect your ability to use the Services.

4. FERPA

Where a Customer is subject to the Family Educational Rights and Privacy Act ("FERPA"), it designates Pathful a "school official" with a "legitimate educational interest" under 34 CFR §§99.31(a)(1). We remain under the Customer's direction with respect to FERPA-protected education records and use student Personal Information only as our agreement with the Customer and applicable law allow.

5. Children under 13 & COPPA

If a Customer uses the Services with students under 13, the Customer contractually agrees to provide parental consent on our behalf before we collect that child's Personal Information, and we meet our own direct obligations under COPPA. If we learn we've collected such information without the required consent, we delete it promptly. Parents of children under 13 should contact the Customer to review or request deletion of their child's information, or to stop further contact — we'll work with the Customer to fulfill the request. See our Children's Privacy Notice for more detail.

6. How we use information

We don't sell or rent your Personal Information, and we don't use it for advertising. Generally, we use it to:

• Provide and maintain the Services — create and authenticate accounts, let educators build assignments and students complete them, share progress reports and feedback, and power educator/Presenter profiles.
• Match educators with Presenters for video sessions, including Live Sessions, and let each view the other's profile.
• Deliver Presenter webinars, where participant name, video, audio, or chat may be visible to the Presenter and other attendees.
• Let educators contact outside organizations — employers, schools, scholarship providers — on a student's behalf.
• Provide customer support, maintain security, communicate about the Services, and process payments where applicable.
• Handle a reorganization, merger, sale, or similar business change, an investigation, or a legal or safety matter — and where lawful, we'll direct legal requests to you first.
• Send existing Customers marketing updates about our Services; unsubscribe anytime via the link in any such email or by contacting support@pathful.com.

7. How we share information

We share certain Personal Information with third-party providers who help us host data, secure it, run analytics, deliver content and email, and power video — never for their own marketing use if you've opted out of ours. Our current subprocessor list is available here.

Presenters and educators can view each other's profiles once they connect to schedule a session. During a scheduled session, student names, images, and comments may be visible to the Presenter; Presenters sign non-disclosure agreements, and a Pathful or Customer representative attends every session.

8. Third-party links

The Services may link to third-party sites — including, if a Customer chooses, student-facing links to internships, scholarships, or activities. Linking isn't an endorsement, and we don't control or take responsibility for those sites' content or privacy practices. Review their policies before you use them.

9. Security

We use industry-standard physical, administrative, and technical safeguards to protect your Personal Information, though no method of transmission over the internet is perfectly secure. If you suspect a security incident or that your credentials have been compromised, contact us promptly at support@pathful.com. Independent verification of our security program is available on the Pathful Trust Center.

10. Data retention

We retain Live Session recordings for 180 days, and delete student and other user Personal Information within 30 days of a Customer's written request. We may retain deidentified data for lawful purposes.

11. Opt-out policy

We may email Customers about products and services we think they'll want to know about. Unsubscribe via the link at the bottom of any such email, or by contacting support@pathful.com — you may still receive service-related emails. We never send marketing emails to students.

12. Your rights

Depending on where you live, US state privacy laws may give you the right to know and access, correct, delete, or port your Personal Information, or to restrict how we process it. We don't sell Personal Information under any US state privacy law's definition of "sale." We verify your identity before fulfilling a rights request, and some requests are subject to legal exemptions we'll explain if they apply. Where the law allows, an authorized agent may exercise these rights on your behalf if they can demonstrate that authorization.

To exercise a right, contact the education institution Customer or reach us at the details below — we'll work with the Customer to respond within the time the law requires. We don't discriminate against anyone for exercising these rights.

13. California residents

California residents may have additional rights described in the California Supplement, incorporated into this policy by reference.

14. Changes to this policy

We may update this policy as required by changes in law. If a legal change requires a material update, we'll notify the Customer and seek consent where the law requires it. The "last updated" date above reflects the most recent revision.

15. Contact

To exercise your rights, ask about our privacy practices, or request this policy in an alternate format, contact:

Pathful, Inc.
5540 Centerview Dr, Ste 204 PMB 63880
Raleigh, NC 27606-8012
support@pathful.com