Privacy policy

Last updated: 23 October 2026

This is a translation for convenience. If there is any difference, the Spanish version prevails.

Who is responsible

Andrés Rodríguez, owner of Pathing (pathing.app). Contact: [email protected].

This applies to your account. The data a business stores in Pathing (its customers, suppliers and jobs) belongs to the business, and Pathing processes it on the business's behalf: see “Data your business enters”.

What data we process

• Your account: email address, name and, if you sign in with Google, the identifier and photo Google shares.
• Your account's security: if you turn them on, two-step verification, passkeys and recovery codes (we only keep a fingerprint of each code, never the code). And your account's security log: sign-ins, sessions and changes, with the device and IP address, so you can see where your account has been used and we can warn you about a new device.
• What your business stores in Pathing: orders or jobs, customers, products or services, suppliers and partners, appointments, messages and attachments.
• Technical data: access and error logs needed for the service to work and stay secure, and the log of who changed what within each business.
• If you write to us (from the form on pathing.app or to [email protected]): your name, your business, your email, how many of you there are, what your business does, what you would like to solve and what you tell us. From the form, also the IP address it is sent from, which is used to stop mass submissions and is deleted within 48 hours at most.
• New template notices: if you leave us your email on a free template on pathing.app, your email and which template you came from.
• Free trial: that your account has already used the trial or is or has been part of a business, because there is one per person. We keep a fingerprint of the email (not the email) to know it has already used its trial.
• If you subscribe: billing details (name or company name and tax ID). Card details are handled by Stripe and never reach Pathing.

You must be at least 18 to have an account: Pathing is a professional tool.

Why, and on what basis

• To give you access and provide the service (performance of the contract).
• To send you the emails you need: confirming your account, signing in without a password, resetting your password, codes to confirm it's you, warnings about a sign-in from a new device, invitations and notices from your team and, to whoever runs a business, that it is ready or that its plan has been activated and until when (performance of the contract).
• While you try Pathing, whoever manages the business receives five automatic emails: a welcome with where to start, how to connect Claude, how to invite your team, that the trial ends in 7 days and, if you have not subscribed, that it has ended. A blind copy goes to [email protected] so we can see what is sent. Others we write by hand, from [email protected]: the welcome with your sign-up code (if you wrote to us from the website), that your business is ready, that your plan has been activated and, when it is about to end, how to renew it. If you ask us not to receive any more emails (for example, by replying “unsubscribe”), we will stop (legitimate interest).
• If you ask not to receive any more emails, we keep your address on a suppression list so we do not write to you again (legal obligation and legitimate interest in respecting your request).
• To keep the service secure and prevent abuse: the security log, new-device warnings and the anti-spam check shown when signing in, creating an account, asking for a sign-in link and resetting your password (legitimate interest).
• To keep one free trial per person: we record that your account has used it and keep a fingerprint of the email to know it has already used its trial (performance of the contract and legitimate interest in preventing abuse).
• To charge and invoice the paid plan, if you subscribe (performance of the contract and legal obligations).
• To reply to people who write to us, including with the code to create their business if they ask for it (legitimate interest in replying to you).
• To tell you about new free templates, if you leave us your email for that, and nothing else (consent: you give it by ticking the box and can withdraw it at any time by unsubscribing). Your email is kept in our database and also reaches us in an internal notice by email, through the email provider listed below; nobody else sees it. Nothing is sent automatically: we write and send each new template notice ourselves.

We don't sell data, we don't advertise and we don't use analytics or third-party cookies.

On the free templates we count how many times the Excel file is downloaded, the Google sheet is copied and the website is opened from the sheet's link: just one number per day, without storing your IP, without anything about you and without cookies (technical access logs are the ones under “Technical data”, above).

You need an email address to have an account: without it we cannot give you access; to subscribe, we also need your billing details. Everything else is optional. We do not make automated decisions about you.

Data your business enters

The customer, supplier and partner data a business stores in Pathing is that business's responsibility. Pathing processes it only on the business's behalf and to provide the service, as a data processor, under the terms of the data processing agreement. When a business sends a customer a message, an appointment or a notice to a partner from Pathing, it is the business that sends it: the email goes out in its name (“business via Pathing”). If you are a customer of a business and want to exercise your rights, contact that business; we will help if they ask us to.

If you connect Claude

If someone in the business connects Claude to their account (Settings → Connect to Claude), Claude can read and change, at most, the same things that person can in Pathing, with their permission and when they ask. Claude does not touch the account, the platform or who sees what.

What Claude reads from Pathing reaches Anthropic (United States) under the terms of the Claude account being used. We recommend business accounts with a data processing agreement. Anthropic is not a Pathing provider: the business chooses it, and can turn it off in Settings (“Allow connecting Claude”, on by default).

Who it is shared with

You can ask us for a copy of those safeguards at [email protected]. Apart from the anti-spam check on those screens and any photos your business links from another website, the app loads nothing from third parties in your browser: no fonts, no analytics, no advertising.

How long

• Your account: for as long as you keep it. To delete it, write to us and we will delete it within a month.
• Your business's data: for as long as the business uses the service, including in view-only mode (when the trial or the paid period ends and it does not subscribe). If it stays view-only for 90 days, we notify whoever manages it and, if it does not subscribe within at least 30 days, it may be deleted (and from backups within 90 days). If it leaves, there is a 30-day transition period and then at least 30 days to download it; after that it is deleted within 30 days at most, and from backups within 90. If the business deletes it from Settings (“Delete the business”), it is deleted straight away, and from backups within 90 days. Anything a law requires to be kept is handed to the business: we don't keep it. More in the terms of use (“Leaving and switching provider”).
• Each business's activity log (who changed what): 18 months.
• That your account has used the trial: for as long as the account exists. The email fingerprint used to know it has already used its trial is also kept afterwards, so it is not repeated with a new account.
• Your account's security log, new-device sign-in warnings and the log of who each email was sent to: 90 days.
• The copy of each email at the sending provider (Resend): 30 days.
• Your address on the suppression list: until you ask us otherwise.
• Your email for new template notices: until you unsubscribe, by replying “unsubscribe” to any of those emails or by writing to [email protected]. Two years at most from when you left it. If you unsubscribe, it is removed from that list and moved to the suppression list.
• Invitations that expire unused: 90 days after they expire.
• Open sessions (device and IP, so you can see where you are signed in): until they are closed.
• Backups: they are of the database, daily and encrypted, and kept for 90 days; after that, anything deleted also disappears from them. Photos and attachments have no separate backup.
• What you write to us (from the form or to [email protected]): deleted after one year. The form's IP address, within 48 hours at most.
• Invoices and their data: the years required by commercial and tax law (up to six).

Your rights

You can ask for access, rectification, erasure, objection, restriction and portability by writing to [email protected]. If you think we haven't handled your request properly, you can complain to the Spanish Data Protection Agency (aepd.es) or to the authority in your country.

Storage in your browser

Pathing only stores in your browser what it needs to work: your session, preferences such as visible columns or your language, and the draft of a new record you haven't saved yet (24 hours). There are no tracking cookies.