Pathizer Privacy Policy

Pathizer may collect account identity information such as name, email address, user ID, authentication status, organization membership, role assignments, profile details, phone number if provided, and login or security metadata.

Pathizer may collect uploaded schedule and project data, including XER files, schedule logic, activities, relationships, calendars, WBS information, update history, contractor coding references, turnover selections, liquidated damage inputs, project documents, generated operational state, analysis outputs, reports, diagrams, simulations, and related project metadata.

Pathizer may collect support ticket content, support category, message text, user and organization context, project context, timestamps, transactional email metadata, billing metadata, usage activity, onboarding progress, feature interactions, device/browser information, logs, diagnostics, and security telemetry.

Pathizer uses information to authenticate users, provision organizations and projects, manage roles and permissions, process uploaded schedules, generate XER workspace summaries, create operations workspace state, run analysis, generate reports, support onboarding, send notifications, provide support, administer billing, enforce access controls, secure the platform, prevent abuse, debug issues, and improve reliability.

Pathizer may use operational telemetry, logs, and administrative metadata to understand whether setup steps are complete, whether required generated state exists, whether tools should show guidance, and whether support or maintenance action is needed.

Pathizer also uses records of how signed-in users use the Services (which tools are opened, on which project and organization, when, and for how long) to understand how the Services are used and to decide which parts to improve or expand. These records contain no schedule content.

You own the project data you upload. Pathizer processes it to provide the Services and claims no ownership of it, and no license to it beyond what is necessary to operate the Services for you.

Uploaded project data may include commercially sensitive schedule and project-control information. Pathizer processes this information to provide forensic schedule intelligence and supporting outputs to authorized users within the applicable organization and project.

Derived outputs, generated workspaces, reset state, cache records, report drafts, and analysis artifacts may be stored with the project so authorized users can review, reproduce, refresh, audit, or support the workflow.

When users submit in-app support tickets or contact Pathizer, Pathizer may process the submitted message, selected category, user identity, user email, display name, phone number if available, organization and project context if available, timestamps, and related diagnostics needed to respond.

Support tickets may be emailed to support@pathizer.com and handled by Pathizer personnel or service providers. Billing-related support may use billing@pathizer.com. Legal and privacy communications may use legal@pathizer.com and privacy@pathizer.com.

When you ask Pathizer to call you, for example through the schedule review request form on the Pathizer website, Pathizer collects your name, company, role, work email address, phone number, state, and preferred time to call. Pathizer also keeps a record of your consent: the date and time of your request, the page and form version you used, the exact consent wording you were shown and its version, whether you checked the consent box, the phone number exactly as you entered it, your IP address, and your browser's user agent.

Pathizer uses this information to call you about your request and about Pathizer's schedule software, to arrange a walkthrough or a schedule review, to send you related email, and to keep evidence of your consent. Pathizer calls only people who have asked to be called. Calls may be placed by an AI or artificial voice assistant, and calls may be recorded and transcribed. If you ask whether you are speaking with an AI, the assistant will tell you. Pathizer uses recordings, transcripts, and call notes to follow up on your request, to keep an accurate record of what was said, and to honor requests to stop calling.

You can withdraw your consent at any time by saying "stop" on a call, replying to any Pathizer email, or writing to angel@pathizer.com. Pathizer records each withdrawal as a separate record and stops calling the number it applies to. Withdrawing consent to calls does not affect your use of the Pathizer Services.

Pathizer keeps each consent record, and each withdrawal record, for five (5) years from the date it was made, so that Pathizer can show when and how consent was given or withdrawn. Consent and withdrawal records are not edited once made. Call recordings and transcripts are kept for up to twelve (12) months from the call.

Pathizer shares the contact details from your request, and the version of the consent you gave, with the internal system and the service provider that place and record the call. Pathizer does not share your IP address or browser user agent with them.

If you agree to receive text messages from Pathizer, for example by checking the consent box on the schedule review request form, Pathizer uses your mobile number only to send messages about your request, such as asking for the email address to send a calendar invitation to. Telnyx sends and receives these messages for Pathizer. Message frequency varies, and message and data rates may apply.

You can stop text messages at any time by replying STOP. Pathizer sends one confirmation, records the withdrawal as described in section 4A, and sends no further texts to that number. Reply HELP for help. Withdrawing consent to texts does not affect your use of the Pathizer Services.

Pathizer does not sell, rent, or share mobile numbers or text messaging opt-in data and consent with third parties or affiliates for their marketing or promotional purposes. Text messaging originator opt-in data and consent will not be shared with any third parties, excluding aggregators and providers of the text message services.

When you visit pathizer.com, Pathizer derives your approximate location (such as country, region, city, postal code, time zone, and an approximate latitude and longitude at roughly city level) and your network provider from your IP address, and records the pages you view, how you arrived (the referring site and any campaign tags), and your device type and browser family. Pathizer uses this to understand where its visitors come from, to improve its site and marketing, and to time any call you request. If you ask Pathizer to call you, your visit history is linked to that request. Pathizer does not store your IP address for this purpose and does not use your device's precise location.

Where the advertising consent controls permit it, a random identifier stored in your browser links your visits over time. Where they do not, including when you decline in Cookie Settings, when your browser sends a Global Privacy Control signal, and in the European Economic Area, the United Kingdom and Switzerland unless you opt in, the identifier lasts only for your current visit. Visit records are kept for thirteen (13) months after your last visit, and Pathizer does not sell them.

Pathizer may share information with service providers that help operate the platform, including cloud infrastructure and storage providers, Firebase or other authentication providers, Stripe or payment processors, Resend or email delivery providers, logging, monitoring, analytics, security, support, and administrative tooling providers.

Pathizer may also share information with organization administrators and authorized project users according to workspace roles, with professional advisers where appropriate, in connection with business transfers, or when required for legal, safety, compliance, billing, or security purposes. Pathizer does not sell customer project data.

You can connect an AI assistant of your choice, for example Claude or ChatGPT, to your Pathizer account through Pathizer's connector. Nothing is shared with it until you sign in to Pathizer and authorize the connection. Once you do, the assistant can read the project information you can see in Pathizer, under your own project permissions, such as the projects you can access, Health Scores, schedule narratives, Delay Analyzer findings, and the list of files in a project's PDF Reports that you can see. It can also ask Pathizer for download links to files you can see.

You can also connect an AI app on your computer through the P7 Connector: after you sign in to Pathizer through it, it passes the assistant's requests to Pathizer and the results back as this section describes, and keeps its sign-in token on your computer until you sign out.

When you ask it to, the assistant can also make changes in Pathizer for you, but only the changes your Pathizer permissions allow: invite people to your projects, change their roles or remove them; create a project, change its name, number or address, archive it or bring it back, or permanently delete a project that has been archived for at least sixty (60) days; and add schedule files to a project's File Storage or remove schedule updates from it. To do that, the assistant sends Pathizer what the change needs, such as the names, email addresses and project roles you give it, or the schedule file you want added. Pathizer first shows the assistant what would change, and the assistant asks you in your conversation with it. Pathizer makes the change only after you confirm it there, sends any invitation emails itself, and records each change with your name. Adding a schedule file starts Pathizer's analysis of the project's schedules, as publishing an update does, and Pathizer emails you when it finishes. A schedule file the assistant adds is kept in the project's File Storage like any other upload, and a removed schedule update stays in the project's storage as a record. The assistant can also choose which of a project's Controllers receive the schedule file emailed when an update is sent to the scheduler. That change takes effect straight away, without the confirmation step above, and Pathizer records it with your name. With your confirmation in the same way, the assistant can also choose a project's phase milestones and their daily risk rates, and set the Schedule Updater's due date and update cycle; a new due date may lead Pathizer to email the project's field team a calendar invitation. When you ask it to, the assistant can also run a Monte Carlo simulation on a project's latest schedule update with the settings you give it; Pathizer stores the run in the project, emails you when it finishes, and can give the assistant a download link to a copy of the schedule with the run's contingency added. A simulation does not change your schedules. With your permission, a connected AI app can also make changes you could make yourself in Pathizer: enter progress in the Schedule Updater, create and edit change orders and delay events, update the risk register and submit field notes. Pathizer records each change in the project's AI change log, and a change that cannot be undone, such as executing or deleting a change order, is made only after you confirm it in the conversation. The assistant cannot make payments or delete your organization.

What the assistant reads, including any document it downloads, goes to the provider of that assistant and is handled under your own agreement with that provider, not under this Privacy Policy. When it receives information through a connection you authorize, that provider acts under your agreement with it and not as a Pathizer subprocessor. Pathizer does not control what the assistant or its provider does with that information. If your organization has rules about which AI services may receive project information, follow them before you connect one.

A download link works for anyone who has it until it expires or reaches its download limit. A standard link expires after fifteen (15) minutes. If your role on a project allows it, you can also ask for a share link to send to other people, which works for up to thirty (30) days and a limited number of downloads, and which you, or an administrator of your organization, can revoke at any time. A link stops working if you lose access to the project or the document, or disconnect the assistant. Pathizer records each link it creates, each download, and each revocation in the project's records.

You can disconnect an assistant at any time on the Talk to your schedule page in Pathizer, which lists the apps you have authorized. Disconnecting ends the assistant's access and stops every link it requested from working. It does not delete information the assistant or its provider already received; ask that provider about deleting it.

For the organization-wide Demo, Pathizer records the verified owner, organization creation time, eligibility, storage classification, Demo end, and related audit events. No payment card or recurring-payment authorization is required to start the Demo.

If an administrator elects Enterprise after the Demo, billing workflows process organization name, activity-based estimate, subscription and invoice metadata, payment-provider identifiers, affirmative recurring authorization, cancellation or reactivation events, and administrator contact information. Payment details are processed by the payment provider rather than stored directly by Pathizer.

Transactional emails may include account, invitation, legal acceptance, support, billing, engine completion, project setup, security, and administrative messages. Email delivery metadata may be retained to troubleshoot delivery and maintain records.

Pathizer personnel and verified Platform Super Admins may access customer environments, project metadata, support records, billing records, logs, and uploaded or derived data when needed for support, security, legal compliance, abuse prevention, maintenance, debugging, migration, demo reset, incident response, or service operation.

Administrative access is intended to be limited to legitimate operational purposes and may be logged, audited, reviewed, or restricted by internal controls.

If you ask us to connect your organization with an independent scheduling services company, we share with that company your contact details and the project information and files you choose, or give it access to the projects you choose, only as you ask; that company handles them under its own agreement with you and its own privacy terms.

Pathizer does not use your uploaded schedule or project data, or content derived from it, to train, fine-tune, or otherwise improve any machine-learning model. This applies to models of every kind, public or private, and to Pathizer's own models as well as any third party's. It does not depend on your plan or subscription tier, and it will not change for data you have already uploaded.

This commitment covers de-identified and aggregated derivatives of your data as well. Pathizer does measure its own operations (counts of files processed, run durations, error rates and similar service telemetry), but those measurements contain no customer schedule content and are not derived from the substance of your project.

Some AI-assisted features send a limited, purpose-built extract of your project data to a third-party model provider so the feature can generate an explanation. Those providers are named in the Subprocessors section. Pathizer selects providers whose terms for business API use do not permit training on submitted content, but Pathizer does not control and cannot warrant a third party's own practices; the provider's terms govern its handling. If you would rather no project content leave Pathizer's infrastructure, AI-assisted features can be disabled for your organization on request to privacy@pathizer.com.

For organization-wide Demos, data, generated workspace state, and exports are available for one calendar month after the Demo ends. Pathizer keeps schedule files (XER files imported, filed in Documents, or generated by Pathizer for a project) for as long as it provides the Services, unless the project or organization is deleted at your request. Analysis results, filed reports and other derived outputs are kept while your organization holds a paid subscription and for six (6) calendar months after the end of its last paid billing period (twenty-four (24) calendar months for a billing period that ended before November 11, 2026), then may be permanently deleted. For an organization that has never paid, that period runs from the end of its Demo or, if it had no Demo, from its last activity in Pathizer. Resubscribing within that period keeps them. Removing an import from analysis retires it without deleting the file.

Forensic delay reports in a project's Delay Analysis folder are kept only until the next update is published. When it is, Pathizer generates new reports and permanently deletes the earlier ones, including their earlier versions.

Pathizer retains account, project, uploaded, derived, audit, billing, support, legal acceptance, operational, and security records for as long as needed to provide the Services, meet legal or contractual obligations, maintain backups, resolve disputes, enforce agreements, and protect platform security.

Records of in-app tool use (which tools signed-in users open, when, and for how long) are kept for twenty-four (24) months and then deleted.

When you delete a project or your organization requests deletion, Pathizer removes the data from active systems within thirty (30) days. Encrypted backups are retained on a rolling basis and are overwritten within a further sixty (60) days, so deleted data may persist in backups for up to ninety (90) days from your request. Backups are not used to restore individual deleted records and are readable only in a full system-recovery scenario.

LITIGATION HOLD. Because Pathizer is used on projects that are in or may enter dispute, an organization administrator may place a litigation hold on a project by written request to legal@pathizer.com. While a hold is in place Pathizer will suspend the applicable inactivity deletion and will not action deletion requests for the held data, including requests from your own users, until the hold is released in writing. Pathizer may also preserve data on its own initiative where it reasonably believes preservation is legally required.

PROTECTIVE ORDERS AND CERTIFIED DESTRUCTION. Where a protective order or similar obligation requires destruction on a schedule shorter than the periods above, an organization administrator may request expedited deletion at legal@pathizer.com. Pathizer will remove the identified data from active systems within ten (10) business days and, on request, provide a written confirmation of destruction stating what was deleted and when, together with the backup-expiry date after which no copy remains. A litigation hold and an expedited-destruction request cannot both be honored for the same data; the customer is responsible for resolving that conflict before instructing Pathizer.

Deletion or export requests may otherwise be limited by organization control, legal holds, contracts, billing records, audit requirements, backups, security needs, or the rights of other authorized users. Privacy requests may be sent to privacy@pathizer.com.

Pathizer uses reasonable administrative, technical, and organizational safeguards to protect information. No system is perfectly secure, and users remain responsible for protecting credentials, reviewing workspace access, and using appropriate project-data controls.

Uploaded project files and schedule data are stored using Cloudflare R2 object storage, and account and application records are maintained using Google Cloud and Firebase services. Data is encrypted in transit using industry-standard TLS and encrypted at rest by these storage providers. Access to customer data is restricted through organization- and project-level access controls. Pathizer personnel access customer project data only where necessary to operate the Services, provide support you have requested, investigate a security or abuse concern, or comply with law.

BREACH NOTIFICATION. If Pathizer becomes aware of a security incident that has compromised the confidentiality, integrity, or availability of your data, Pathizer will notify affected organization administrators without undue delay and in any event within seventy-two (72) hours of confirming the incident. The notice will describe what is known about the nature of the incident, the categories of data involved, the steps Pathizer is taking, and what you can do, and will be supplemented as more becomes known, rather than delayed until the picture is complete. Pathizer will provide the information reasonably necessary for you to meet your own notification obligations.

Pathizer has not completed a SOC 2, ISO 27001, or comparable third-party security audit, and does not claim any such certification.

Security reports may be sent to security@pathizer.com.

Depending on applicable law, users may have rights to access, correct, export, restrict, or request deletion of certain personal information. Some requests may need to be made through an organization administrator and may be subject to legal, contractual, security, backup, audit, or operational limitations.

Pathizer and its service providers may process information in jurisdictions other than where you are located. Where required, we use appropriate safeguards designed to protect personal information consistent with applicable law.

If Pathizer receives a subpoena, court order, search warrant, discovery request, or government demand for customer project data, Pathizer will notify the affected organization administrator before producing the data, unless legally prohibited from doing so or where there is an emergency involving a risk of death or serious physical harm. Where notice is prohibited, Pathizer will give notice as soon as the prohibition lapses.

Notice is given so that you have the opportunity to seek a protective order or otherwise object before your data is produced. Pathizer will not volunteer customer project data to a third party in response to informal requests, and will narrow overbroad demands where it reasonably can.

Pathizer uses a limited set of third-party service providers, called subprocessors, to operate the Services. As of the effective date shown above these are: Google Cloud Platform and Firebase (authentication, hosting, and database services), Cloudflare (R2 object storage and related infrastructure), Stripe (payment processing), Resend (transactional email delivery), and OpenAI, Anthropic, and MiniMax (AI-assisted features such as Ask Pathizer explanations and report narratives).

Of these, Google Cloud Platform, Cloudflare, OpenAI, Anthropic, and MiniMax may receive customer schedule content: Google Cloud and Cloudflare because your uploaded files and derived analysis are stored and processed there, and OpenAI, Anthropic, and MiniMax because AI-assisted features send them a limited extract of project data to generate an explanation or a report narrative. Stripe receives billing and account identifiers only, and Resend receives the recipient address and message content of transactional email only. Neither receives uploaded schedule files or their contents.

Pathizer will publish any change to this list on this page at least thirty (30) days before a new subprocessor begins processing customer data. During that period a customer may object in writing to privacy@pathizer.com; if Pathizer cannot reasonably accommodate the objection, the customer may terminate the affected Services and receive a pro-rata refund of prepaid fees for the unused term.

If you ask Pathizer to call you, Telnyx places and records the call and runs the AI assistant that speaks on it. Deepgram transcribes the call for Telnyx. The assistant's language model is provided by OpenAI. Call and request records are stored on Google Cloud and Cloudflare, and when a walkthrough is booked, your name and email address are added to a Google Calendar invitation sent from Pathizer. When you book a call, Calendly receives the name, email address, and any other details you enter on its scheduling page, and the time you choose.

On public marketing pages, and only when the advertising consent controls permit it, Google, Meta Platforms, and OpenAI receive advertising measurement events, as described in sections 14 and 15. For P7 Free Scheduling, no advertising tag loads on the P7 page; instead, when the advertising consent controls permit it, Pathizer itself may send Google Ads the advertising click ID from the link that brought a visitor to P7 and the time of their first use of P7 in a visit, as the P7 Free Scheduling Privacy Notice at https://www.pathizer.com/p7/privacy describes. None of them receives customer schedule content or anything typed into a form.

Where the European Union General Data Protection Regulation (GDPR), the United Kingdom GDPR, or similar laws apply, Pathizer generally acts as a processor of customer project data on behalf of the customer, who acts as the controller, and processes that data according to the customer's instructions and these terms. Where Pathizer determines the purposes and means of processing account, billing, and operational data, it acts as a controller for that data. Personal data may be transferred to and processed in the United States and other jurisdictions; where required, Pathizer relies on appropriate safeguards, such as standard contractual clauses.

Where the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA/CPRA), or similar United States state privacy laws apply, you may have rights to know about, access, correct, delete, and limit the use of personal information, to opt out of the sale of personal information and of its sharing for cross-context behavioral advertising, and to not be discriminated against for exercising those rights. Pathizer does not sell personal information.

On its public marketing pages, Pathizer uses advertising tags from Google (Google Ads), Meta (the Meta Pixel), and OpenAI (the ChatGPT Ads measurement pixel). Meta can receive the public pages you view and whether you requested a call or signed up; Google can receive whether you signed up, completed a free report, or opened P7 Free Scheduling from a marketing page, and, if you used P7 Free Scheduling while advertising cookies were allowed for you, the advertising click ID and the time of your first use of P7 in a visit, which Pathizer sends as the P7 Free Scheduling Privacy Notice describes; OpenAI can receive whether you requested a call or signed up. Under some state laws this is sharing for cross-context behavioral advertising. These tags never run inside the signed-in application, and they never receive schedule contents, project data, or what you type into a form. You can opt out at any time through Cookie Settings, and Pathizer treats a Global Privacy Control signal from your browser as an opt-out. In the European Economic Area, the United Kingdom, Switzerland, and where your region cannot be determined, the tags load only after you opt in.

If you allow advertising cookies and request a call or sign up, Pathizer's server also tells OpenAI about that action, together with the click reference OpenAI's link or cookie gave your browser, so OpenAI can measure its ads. Pathizer does not send your name, email address, or anything you typed.

Enterprise customers who require a Data Processing Addendum (DPA) may request one by contacting legal@pathizer.com. Where a DPA is signed by Pathizer and the customer, it supplements this Privacy Policy for that customer.

Pathizer uses a small number of cookies and similar browser storage technologies. Most are strictly necessary or reflect a choice you made, and are used to keep you signed in, secure your session, remember language and currency preferences, and protect the Services from automated abuse. These are required for the Services to function and are not used for advertising.

Pathizer uses advertising measurement from Google Ads, the Meta Pixel, and the OpenAI (ChatGPT Ads) pixel, on public marketing pages only, and only when the consent controls permit it. The P7 Free Scheduling page loads no advertising tag; its one advertising measurement event is described in section 14 and in the P7 Free Scheduling Privacy Notice. In the EEA, United Kingdom, Switzerland, and an unknown region, these tags do not load unless the visitor grants consent. An explicit denial, or a Global Privacy Control signal from the browser, blocks them. Pathizer does not embed advertising trackers inside authenticated application workspaces, and advertising payloads do not include schedule contents or other private project fields.

You can change an advertising-consent choice from Cookie Settings or by clearing the pathizer_cookie_consent cookie for this site. Customer project data (schedules, XER files, documents, and analysis results) is never stored in cookies.

Pathizer LLC, a Florida limited liability company, is the entity responsible for the personal information described in this Privacy Policy. We may update this Privacy Policy from time to time. Acceptance of the Terms of Service is a single, standing acceptance that extends to later versions of this Privacy Policy, so you will not be asked to acknowledge each update again. The current version and its effective date are always posted at https://www.pathizer.com/privacy, and we do not send email notice of updates. By accepting the Terms of Service or continuing to use Pathizer, you agree to review this Privacy Policy regularly, and your continued use after an update means you accept the updated version. Where applicable law requires renewed consent for a particular change, we will request it.

Privacy questions or requests may be sent to privacy@pathizer.com. Support questions may be sent to support@pathizer.com. Legal notices, and any challenge to this Privacy Policy or to how we handle personal information, may be sent to legal@pathizer.com.

Pathizer's registered business address is Pathizer LLC, 17955 NW 5 Ct, Miami, Florida 33169, United States. Pathizer LLC is a Florida limited liability company (Florida document number L26000367987).