Privacy Notice

For the purposes of applicable data protection law, Formiti Data International is the controller of personal data processed in connection with PathVane.

PathVane is a product owned and managed by Formiti Brand. The service is operated by Formiti Data International, with support from third-party providers who process personal data on our behalf in order to help us deliver the service.

Formiti Data International
Grosvenor House, 11 St Pauls Square, Birmingham B3 1RB
United Kingdom

Email: legal@formiti.com
VAT number: GB425157115
Company registration number: [insert company number]

If you have questions about this Privacy Notice or want to exercise your data protection rights, please contact us using the details above.

We may collect and process the following categories of personal data:

Account information

Your name, email address, encrypted or hashed authentication credentials, account settings, and any role, team, or organisation information you choose to provide.

Usage and technical information

Information about how you use PathVane, such as pages viewed, features used, browser type, device information, IP address, and approximate location derived from that IP address. We use this information to operate, secure, troubleshoot, and improve the service.

Payment and subscription information

Billing name, billing address, subscription plan, payment status, invoices, and transaction history. Payment card details are processed directly by Stripe and are not stored by us.

Content you create in PathVane

Journal entries, objectives, self-review content, drafts, attachments, and other information you create, upload, or store in the service.

Communications

Emails, support requests, feedback, and any correspondence you send us, along with our responses.

We collect personal data:

• directly from you, when you create an account, use the service, contact us, or submit content;
• automatically, through your use of the website and service, for example through server logs, authentication events, and essential technical tools;
• from payment and service providers where relevant, for example when Stripe confirms a successful payment or subscription event.

We use personal data to:

• provide, operate, and maintain PathVane;
• create and manage your account;
• process subscriptions, payments, renewals, and related administration;
• generate self-review drafts and related outputs from the content you choose to create and organise in the service;
• send transactional messages such as account confirmations, password resets, billing notices, and security alerts;
• respond to support requests and communicate with you about the service;
• monitor service performance, reliability, and security;
• improve PathVane and develop new features;
• comply with legal, tax, accounting, and regulatory obligations.

Under applicable data protection law, we rely on the following lawful bases:

Contract

We process personal data where necessary to provide PathVane to you and to perform our obligations under our Terms and any subscription arrangement.

Legitimate interests

We process personal data where necessary for our legitimate interests in operating, securing, maintaining, improving, and supporting the service, provided those interests are not overridden by your rights and interests.

Legal obligation

We process personal data where necessary to comply with legal or regulatory obligations, including accounting, tax, fraud prevention, and record-keeping requirements.

Consent

Where required, we rely on your consent, for example for optional marketing communications or for non-essential cookies and similar technologies. Where we rely on consent, you can withdraw it at any time.

We share personal data only where necessary and appropriate, including with service providers who help us run PathVane. These currently include:

• Stripe, which processes payments, subscription events, and related billing data under its own terms and privacy notice;
• Cloudflare Pages, which helps deliver and secure the PathVane marketing site and may process technical request data such as IP address and browser information;
• Postmark, which sends transactional emails such as sign-up confirmations, password resets, and account notifications.

We may also disclose personal data where necessary to comply with legal obligations, enforce our rights, protect users, or respond to lawful requests from regulators, courts, or public authorities.

Some of our service providers may process personal data outside the United Kingdom. Where personal data is transferred internationally, we take steps to ensure that appropriate safeguards are in place, such as the UK International Data Transfer Agreement, an approved addendum, or Standard Contractual Clauses where appropriate.

You can contact us if you would like more information about the safeguards we rely on for international transfers.

We keep personal data only for as long as necessary for the purposes described in this Privacy Notice, including to provide the service, meet legal and accounting obligations, resolve disputes, and enforce our agreements.

In practice, this means:

• account data is generally kept while your account remains active;
• if you close your account, we will delete or anonymise personal data associated with it within a reasonable period, unless we need to keep certain information for legal, tax, fraud-prevention, security, or legitimate operational reasons;
• some limited records, such as invoices, payment records, and legal correspondence, may be retained for longer where required by law or necessary for compliance and record-keeping.

Subject to applicable law, you may have the right to:

• access the personal data we hold about you;
• request correction of inaccurate or incomplete personal data;
• request deletion of your personal data;
• request restriction of processing in certain circumstances;
• object to certain processing based on legitimate interests;
• receive a portable copy of certain personal data you have provided to us;
• withdraw consent where processing is based on consent;
• complain to the Information Commissioner's Office or another relevant supervisory authority.

To exercise any of these rights, contact us at legal@formiti.com.

PathVane currently uses only cookies or similar technologies that are strictly necessary to operate the website and service, such as those used for authentication, session management, and security.

If we introduce analytics, advertising, or other non-essential cookies in future, we will update this Privacy Notice and provide a separate cookie notice and consent mechanism where required by law.

PathVane may link to or rely on third-party services. Those providers process personal data under their own terms and privacy notices where they act as independent controllers, including in relation to payment processing and certain infrastructure services.

We encourage you to review the privacy information provided by any third-party services you interact with through or alongside PathVane.

We may update this Privacy Notice from time to time to reflect changes to the service, our data practices, or legal requirements. Where changes are material, we will take reasonable steps to notify you, for example through the service or by email.

The "Last updated" date at the top of this page shows when this notice was most recently revised.