Privacy notice
What we collect, why we use it, and how you can manage your information.
Who operates PathTend
Effective October 13, 2026. PathTend is operated by Vpulance LLC, a Minnesota limited liability company. This notice covers the PathTend website and hosted service, including RepeatFix. Email getpathtend@gmail.com for privacy questions or requests. It describes current practices; it does not cover independent websites you choose to monitor or a provider’s own services.
Information you provide
Account records include your name, email address, password hash, workspace membership and preferences. We also retain the Terms and Acceptable use version you affirmatively accept, a reference to its preserved text, the acceptance time and whether you accepted during signup or from your account. This helps administer the agreement and resolve disputes; it is separate from optional analytics consent. Business profiles may include a business name, contact details, industry, timezone and goals. Support conversations, account requests, supplied website addresses and information you enter into the workspace are stored to provide the requested service. Do not put confidential customer records or payment-card details in free-text fields.
Google sign-in and email verification
If you choose Google sign-in, PathTend requests only openid, email and profile permissions. Google supplies an account identifier, email address, verification status and, when available, your name. PathTend validates the identity response and stores the identifier linked to your account, name and email address. A new Google account is marked verified when Google confirms the email, so PathTend does not send a separate verification email or weekly verification reminders. This does not grant access to your Gmail messages, contacts or Drive files. Your Google password stays with Google. A temporary browser cookie and authorization record protect sign-in; PathTend does not request offline access or retain Google access or refresh tokens. Google account information is used for sign-in, account administration and support, not sold or used for advertising or AI training. Existing password accounts are not automatically linked by matching email addresses. Accounts created with email and password can receive a verification link and weekly reminders while unverified; verification is optional for payment and paid use but required for incident emails, account-data downloads and accepting team invitations.
Website checks and operational records
Requested checks can store public website URLs, discovered paths, HTTP responses, findings, timestamps and evidence. Screenshots may be captured when browser checking is enabled. Public pages can contain personal information, so choose sites and paths carefully. Activity and security records include approvals, account actions, job status, abuse-control identifiers and delivery status. Publicly available contact details are not automatically permission to send marketing.
How we use and share information
We use information to operate accounts and workspaces, run requested checks, explain findings, provide support, administer subscriptions, send service messages and protect the service. Workspace members can see information allowed by their role; the operator can access records for service administration, support and privacy requests. We share information with providers as needed for those functions and may disclose it when legally required or to address fraud, abuse or security incidents. PathTend does not sell personal information or share it for cross-site targeted advertising. Optional analytics and marketing-email choices are separate from necessary account and service processing.
Cookies and analytics choices
Necessary cookies support sign-in, security and saved privacy choices. The landing-page counter stores daily counts rather than individual visitor records. Optional first-party analytics starts only after you choose it in Privacy choices. It stores a hashed browser identifier, selected activity such as page and plan views, timestamps and broad referral categories. Linking future activity to a signed-in account is a separate choice; earlier anonymous activity is not joined. Global Privacy Control disables optional analytics. No advertising pixels or cross-site advertising trackers are included. Turning optional analytics off stops future collection for that browser and removes events linked to its current analytics identifier from the active database. This does not erase older backup copies. Security controls separately process network-address information to limit abuse.
Providers and processing locations
Render hosts the application, database and service files. Brevo receives recipient addresses, message content and related delivery information for transactional email. Sendcorex is used separately for Scout business offers and receives the business contact address, offer content and associated delivery information. Stripe handles checkout and subscription management, including payment and billing-address information you submit to it; PathTend stores provider references, subscription status and invoice amounts, not full card numbers or security codes. Google supplies the sign-in information described above when you choose it. Our support inbox is hosted by Gmail. Resend was used for an earlier email-delivery setup and may retain those historical provider records; it is not the current transactional sender. Providers may process information in countries outside your location under their own terms and privacy notices. PathTend does not promise that all processing stays in your state or country. Offer Studio and an AI provider are not active in this release; RepeatFix records are not sent to an AI service.
Storage and retention
Account, workspace, billing-reference, support and operational records are stored in the hosted service database; evidence and backups can be separate files. Account and workspace records remain while you use the service and after cancellation until reviewed removal. Other than the expiry rules described here, these records and backups do not have a fixed automatic deletion period. Removal is reviewed against ongoing service needs, account authority, security, dispute and legal recordkeeping requirements. Expired sessions and account-action tokens are cleaned up; sessions last up to seven days, verification links 24 hours and password-reset links 30 minutes. Optional analytics events older than 90 days and consent records after 180 days are removed by scheduled cleanup. Queued transactional email bodies are encrypted and cleared after provider acknowledgement or when canceled or expired; recipient, subject and delivery metadata can remain. Backups may contain older records until manually removed and are not instantly erased by an account request. Plan history limits and archiving are not promises that all copies have been deleted.
Access, correction and deletion requests
Use Account & data to update supported profile fields, download available account information or request access, correction or deletion. Account-data downloads require a verified email; the export covers specified account records and is not necessarily every record relevant to a broader request. You may also email getpathtend@gmail.com without creating an account. We may ask for reasonable information to confirm your identity or authority, but do not send passwords or full payment-card details. Requests are handled through operator review; submitting one or changing its case status does not itself erase data. We explain the outcome and any applicable exceptions. Accounting, security, dispute or minimal no-contact records may need to be retained. Rights and response deadlines depend on applicable law; to challenge a decision, reply to the response or email the same address with “Privacy appeal.” Billing cancellation is separate, so cancel your subscription through Plans & billing if you also want to stop renewal.
RepeatFix records
RepeatFix stores mapped incident fields, recorded costs and time, source labels, category rules, import history and improvement notes within your workspace. Original CSV files and unmapped columns are not retained by RepeatFix. Avoid including customer names, contact details, health information or other unnecessary personal data in mapped fields. An import undo archives its records rather than deleting them. Workspace exports include RepeatFix records, and removal requests use the existing reviewed privacy-request process. RepeatFix does not send records to an AI service or automatically connect to external business tools.
Security and notice updates
PathTend uses workspace access controls, hashed passwords and account tokens, HTTPS in the production service and encryption for queued transactional email bodies. These measures do not guarantee that every incident can be prevented. Avoid uploading unnecessary sensitive information and report suspected exposure to getpathtend@gmail.com. We update this notice when our practices change, display its effective date and communicate material changes as required by applicable law.