Privacy Policy

Effective May 6, 2026

This Privacy Policy explains what information Letter Box Digital, LLC ("we", "us") collects when you use Pathway, and what we do with it. We've tried to keep this short and in plain English.

1. What we collect

• Account information: your name, email address, and password (stored hashed).
• Sign-in information: if you sign in with Google, we receive your Google email and a unique account identifier — nothing else.
• Listing content: the listings, points of interest, addresses, and notes you create. This content is yours; we host and display it on your behalf.
• Payment information: handled entirely by Stripe. We never see or store your full card number. We retain billing metadata (subscription state, invoice history, last four digits of the card on file).
• Usage data: standard server logs (IP address, browser type, pages visited, timestamps). We use these for security and debugging.
• Cookies: a login session cookie, plus Google Analytics cookies on our public marketing pages (home, sign-in, and legal pages) to understand how visitors find the site. We do not set advertising cookies, and we do not use analytics cookies inside your dashboard or on your published maps.

2. How we use your information

• To provide and improve the service.
• To process payments and send transactional emails (receipts, password resets, account notifications).
• To detect and prevent fraud or abuse.
• To comply with legal obligations.

We do not sell your personal information. We do not share it with advertisers. We do not use your listing content to train AI models.

3. Service providers we use

We rely on a small number of third-party services to operate Pathway. These providers process your data on our behalf, under contracts that require them to protect it.

• Stripe — payment processing and subscription management.
• SendGrid — transactional email delivery.
• Google — sign-in (only if you choose Google sign-in), and Google Analytics on our public marketing pages.
• MapTiler — map tiles. Map requests are proxied through our servers, so MapTiler does not see your IP address.
• Google Cloud — hosting and infrastructure.

4. Your rights

You can:

• Access the personal information we hold about you.
• Correct inaccurate information directly in your account settings, or by emailing us.
• Delete your account from your account settings. After deletion, we keep your data for up to 30 days in case you change your mind, then permanently remove it.
• Export a copy of your data by emailing us. We aim to respond within 30 days.
• Object to specific uses of your information, or withdraw consent where we rely on it.

To exercise any of these rights, email [email protected].

5. How long we keep your data

• Active accounts: we keep your data while your account is active.
• Canceled subscriptions: account data remains until you delete the account.
• Deleted accounts: data is recoverable for 30 days, then permanently removed.
• Financial records: retained for 7 years to meet tax and accounting requirements.
• Server logs: retained for up to 90 days for security and debugging.

6. Security

We use industry-standard practices to protect your data: encrypted connections (HTTPS), encrypted storage at rest, hashed passwords, scoped access controls, and audit logging of administrative actions. No system is perfectly secure — if we ever suffer a breach affecting your data, we will notify you within 72 hours of discovery.

7. Children

Pathway is not directed at children under 13, and we do not knowingly collect information from them. If you believe a child has provided us with information, please contact us and we will delete it.

8. International users

Pathway is operated from the United States. If you use Pathway from outside the U.S., your information will be transferred to and processed in the U.S. By using Pathway, you consent to this transfer.

9. Changes to this policy

We may update this policy from time to time. If we make material changes, we'll notify you by email and update the "Effective" date above. Continued use of Pathway after changes means you accept the updated policy.

10. Contact

Questions about this policy or your data? Email [email protected].