Privacy Policy
This Privacy Policy describes how Alexis Goncalves, an individual operating under the trade name A.G. Logik ("we," "us," or "A.G. Logik"), collects, uses, and shares information when you use Pathfinder AI (the "Service"). Our goal is to be straightforward about what data we handle and why.
1. Information we collect
Account information. When you sign up, we collect your email address (for login and delivery of job digests) and your chosen subscription tier. Authentication is managed by Supabase; we do not store passwords.
Profile and preferences. You provide job-search preferences (target titles, geographies, seniority, industries, keywords). You may also paste or upload a resume. This content is used only to match you to jobs and to generate documents on your behalf.
Billing information. Stripe handles payment processing. We receive from Stripe your customer ID, subscription status, billing date, and the last four digits of your payment method. We do not store full card numbers.
Service usage. We log how many matches are generated for you, how many LLM calls are made on your behalf, and email delivery events (sent, delivered, bounced, opened) to operate and improve the Service and to enforce per-tier usage caps.
Technical information. Standard server logs record IP address, user agent, and request path for requests to our site, retained for security and debugging purposes.
2. How we use information
- To discover and score jobs that match your preferences and deliver them to you by email.
- To generate tailored resumes and cover letters when you request them.
- To process your subscription and bill you through Stripe.
- To communicate with you about your account (welcome, billing, cancellation confirmations, required service notices).
- To enforce per-tier usage limits and detect abuse.
- To comply with legal obligations (tax, accounting, valid legal requests).
We do not sell your information. We do not use your data to train third-party language models. We do not use your data for advertising.
3. Third-party services we share data with
We rely on the following providers. Your use of the Service implies your data may be processed by them for the purposes described.
- OpenAI - scoring prompts and resume/cover-letter generation. OpenAI's API terms apply; API inputs are not used to train OpenAI's models.
- TheirStack and other job-data providers - source of the job listings scored against your profile. Your preferences and resume content are not shared with these providers; only generic search queries derived from your stated preferences are sent.
- Postmark - delivery of daily and weekly digest emails, plus account notifications.
- Stripe - billing and subscription management.
- Supabase - authentication (magic-link email).
- Cloudflare - DNS and edge traffic handling.
- Hetzner - server hosting.
4. Data retention
| Data | Retention |
|---|---|
| Active account data (profile, preferences, match history) | For as long as your account is active. |
| Canceled account data | Soft-deleted 30 days after cancellation; hard-purged at 90 days, unless you request earlier deletion. |
| Billing records (invoices, payment history) | 7 years, for tax and accounting compliance. |
| Email delivery logs (Postmark events) | 30 days. |
| Application server logs | 30 days. |
| Database backups | 7 days. |
To request early deletion of your account data, email [email protected] from the email address on your account. We will confirm within 7 business days and complete deletion within 30 days, retaining only what tax or legal obligations require.
5. Your rights
Depending on where you live, you may have the following rights regarding your data:
- Access: request a copy of the data we hold about you.
- Correction: correct inaccurate data.
- Deletion: request that we delete your data, subject to retention obligations above.
- Portability: receive your data in a machine-readable format.
- Objection: object to specific uses of your data.
To exercise any of these, email [email protected]. We aim to respond within 7 business days.
6. Security
We use standard security practices: TLS on all connections, row-level security in our database to isolate user data, SSH-key-only access to production servers, and limited access controls on third-party dashboards. No system is perfectly secure; we encourage strong, unique passwords and reasonable care with your account credentials.
7. Children
The Service is not directed to children under 18, and we do not knowingly collect personal information from anyone under 18. If we learn that we have collected data from a minor, we will delete it.
8. International users
The Service is operated from the United States. If you use the Service from outside the U.S., your data will be transferred to and processed in the U.S., where data protection laws may differ from those in your country. By using the Service, you consent to this transfer.
9. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be announced by email at least 14 days before they take effect. The "Effective" date at the top of this page always shows the most recent revision.
10. Contact
Privacy questions or requests: [email protected].