Privacy Policy
Controller: Benic Oy · Y-tunnus 2204104-9
Tehtaankatu 8 A 6, 00140 Helsinki · hello@pathfin.fi
Last updated: 25 May 2026
1. What data we collect
| Data | Purpose | Legal basis |
|---|---|---|
| Email address | Authentication, transactional email | Contract (Art. 6(1)(b) GDPR) |
| Name, work history, education, skills | Generating your CV and cover letters | Contract |
| Job postings you add | Generating cover letters, tracking applications | Contract |
| Subscription and billing info (via Stripe) | Processing payments | Contract |
| Usage statistics (PostHog) | Improving the product | Legitimate interest |
We do not collect payment card numbers — Stripe handles those directly.
2. How long we keep it
- Account data: for as long as your account is active, plus 30 days after deletion.
- Billing records: 7 years (Finnish Accounting Act requirement).
- Usage analytics: 12 months rolling.
3. Who we share it with
We share data only with the sub-processors below, under GDPR-compliant data processing agreements:
| Sub-processor | Purpose | Location |
|---|---|---|
| Supabase | Database and authentication | EU (AWS eu-north-1) |
| Anthropic | AI text generation | USA (SCCs in place) |
| Stripe | Payment processing | USA/EU (SCCs in place) |
| Vercel | Hosting | USA/EU (SCCs in place) |
| Resend | Transactional email | USA (SCCs in place) |
| PostHog | Product analytics | EU (EU Cloud) |
| Sentry | Error tracking | USA (SCCs in place) |
We do not sell your data.
4. Your rights
Under GDPR you have the right to:
- Access your personal data
- Rectify incorrect data
- Erase your data ("right to be forgotten")
- Restrict or object to processing
- Data portability — export your data via Settings → Export
To exercise any right, email hello@pathfin.fi. We respond within 30 days.
You can also lodge a complaint with the Finnish Data Protection Ombudsman (tietosuoja.fi).
5. Cookies
We use one functional cookie (Supabase session) and one analytics cookie (PostHog). No advertising cookies. You can opt out of analytics in your browser settings.
6. Changes
We will notify you by email if we make material changes to this policy.