Pathly Legal
Trust and Legal Center
Everything that governs how Pathly works and how it handles data, in one place. Written to be read by the person it affects, not only by a lawyer. If you are evaluating Pathly for a school, a district, or a practice, start with the data inventory and the subprocessor list.
- Documents
- 9 published
- Last change
- September 17, 2026
- Entity
- Pathly Labs, Inc.
- Questions
- legal@pathly.com
Where to start
- Using Pathly as a student? The Privacy Policy is the one that matters, especially Section 10 on what your counselor can and cannot see.
- Evaluating Pathly for a school? The Partner School Terms and the Partner School DPA are the agreement, in full. The data inventory and the subprocessor list answer most of the rest of a security review before you have to ask.
- Subscribing as a counselor? The Subscription Terms cover billing and cancellation. The DPA covers data.
01 For everyone
| Document | What it covers | Version |
|---|---|---|
| Terms of Service | The agreement between you and Pathly. Eligibility, accounts, your content, AI guidance, acceptable use, liability, disputes. | 2.0 |
| Privacy Policy | What we collect, why, who sees it, how long we keep it, and your rights. | 2.0 |
| Cookie Notice | What the website and the app set, and how to turn it off. | 1.0 |
| Data Inventory | Every field the platform collects, field by field, with retention periods. | 1.0 |
| Subprocessor List | Every third party that touches platform data, what each one sees, and where to verify its security posture. | 1.1 |
02 For counselors
Independent educational consultants, private counselors, coaches, and advising practices on a paid Counselor plan.
| Document | What it covers | Version |
|---|---|---|
| Counselor Subscription Terms | Plans, pricing, seats, student capacity, free trial, billing, renewal, cancellation, refunds. | 1.0 |
| Counselor Data Processing Addendum | Data roles, how a connection works, what you can see and enter, your obligations, security, incidents. | 1.0 |
Both documents take effect when you accept them at checkout. No signature is required or offered. Pathly records the version you accepted with the date and time, and an executed copy is available in your account under Legal.
03 For schools and districts
A school signs a short Order Form. It carries the commercial terms and nothing else: the parties, the subscription term, the covered students, the enrollment tier, and the fee. Everything else is published here, in full, and is incorporated into that Order Form by reference.
That means a district can read the entire agreement, and route it through counsel and procurement, before anyone signs anything or asks us for a copy.
| Document | What it covers | Version |
|---|---|---|
| Partner School Terms | Scope of service, what is and is not included, term and renewal, termination and data transition, liability, indemnification, publicity, and the version lock. | 1.0 |
| Partner School Data Processing Addendum | Data roles, what the school provides, counselor visibility, AI processing, subprocessors, retention and deletion, breach notification, compliance and audit rights. | 1.0 |
Three more documents on this site apply to a school relationship and answer most of what a security review asks:
- The data inventory, which is the same for every channel and is incorporated into the Partner School DPA
- The subprocessor list, also incorporated into the Partner School DPA, with a verification link for every provider
- The Privacy Policy, which governs the student accounts underneath any school agreement
The Terms of Service, Section 12, covers institution-linked accounts and sits at the bottom of the order of precedence. That order is set out in Section 2 of the Partner School Terms.
These documents are published, which means they can be updated. A published change does not reach back into a signed agreement. The version in force on the day you sign applies for your initial term, and a change reaches you at renewal with at least 30 days' notice, ahead of your non-renewal deadline. Section 11 of the Partner School Terms sets this out, and your Order Form records the version numbers that were in force when you signed.
Student accounts are not school property. They belong to students and survive the end of a school agreement. Schools license counselor and analytics tools, not student access.
Counselors never see conversations. Not transcripts, not excerpts, not topics. That holds for school counselors exactly as it holds for independent counselors.
To request a sample Order Form, or the full agreement package for review, write to partnerships@pathly.com.
04 For students and families
The whole point of Pathly is that a student can use it without anyone paying for it and without giving up control of their own information. The three things worth knowing:
- Your conversations are yours. No counselor, school, or parent can read them through Pathly. See Privacy Section 10.
- Your account is yours. It does not belong to your school or your counselor, and it stays with you when either goes away. See Privacy Section 11.
- You can leave with your data. Export or delete everything from account settings, any time. See Privacy Section 12.
Parents and guardians: Privacy Section 13 covers your rights, and the one exception where we will disclose more than usual.
05 Standing commitments
These appear across the documents above. They are collected here so they are easy to find and easy to hold us to.
We will
- Keep the student experience free to students
- Give 30 days' notice before a material change or a new subprocessor
- Publish every version and every change on this page
- Link every security claim to a source you can check
- Tell you plainly what we do not have, including certifications
We will not
- Sell personal information
- Show advertising to students
- Accept payment for placement or ranking in recommendations
- Let AI providers train on platform data
- Show a student's conversations to a counselor, school, or parent
06 Version history
Every document carries a version and an effective date. Prior versions are retained. To request a specific prior version, or a copy of the version in force on a particular date, write to legal@pathly.com and we will send it.
| Document | Version | Effective |
|---|---|---|
| Terms of Service | 2.0 | July 30, 2026 |
| Privacy Policy | 2.0 | July 30, 2026 |
| Cookie Notice | 1.0 | July 30, 2026 |
| Counselor Subscription Terms | 1.0 | July 30, 2026 |
| Counselor Data Processing Addendum | 1.0 | July 30, 2026 |
| Partner School Terms | 1.0 | July 30, 2026 |
| Partner School Data Processing Addendum | 1.0 | July 30, 2026 |
| Data Inventory | 1.0 | July 30, 2026 |
| Subprocessor List | 1.1 | July 30, 2026 |
07 Changelog
Every substantive change to any document on this page, newest first.
September 17, 2026
Partner School Terms 1.0 and Partner School Data Processing Addendum 1.0. The standard terms behind a school agreement are now published rather than attached to a signed package on request. A school signs a short Order Form carrying the commercial terms, and these two documents are incorporated into it by reference.
- Moved the scope of service, term and renewal, termination and data transition, liability, indemnification, and general terms out of the Order Form and the Founding Partner Addendum and onto the Partner School Terms page. No pricing is published; pricing stays in the signed Order Form.
- Added an order of precedence: the Partner School DPA, then the Order Form and any addendum signed with it, then the Partner School Terms, then the Terms of Service.
- Added a version lock. The version in force on the day a school signs applies for its initial term, and a published change reaches an existing school at renewal with at least 30 days' notice, ahead of the non-renewal deadline.
- Added a default publicity clause. Pathly may use a school's name and logo in a customer list; anything beyond that needs written approval, and a school can withdraw the default permission at any time without affecting the rest of the agreement.
- The Partner School DPA now points to the live data inventory and subprocessor list in place of the static Exhibit A and Exhibit B, so what a district reviews is the current record rather than a snapshot.
- Reconciled the Partner School DPA against the July 30 Terms and Privacy Policy. Separated School-Provided Data from Student Account Data and stated who controls each, replacing a blanket statement that the school retained all rights. Itemized the narrow set of data Pathly receives from a school and stated plainly that there is no SIS feed, no transcripts, and no verified score reports. Added that all academic data is self-reported and that a student's correction stands. Added the SOC 2 disclaimer that appears elsewhere on this site: Pathly's subprocessors hold attestations, Pathly does not hold one of its own and does not claim one. Removed pilot-period gating on the counselor detail view. Added small-count suppression to institution analytics. Set out who notifies whom after a security incident, for each data category.
- Operating entity confirmed throughout as Pathly Labs, Inc., a Delaware corporation.
July 30, 2026
Terms of Service 2.0 and Privacy Policy 2.0. Rewritten and restructured. The Terms become a universal baseline that plan-specific terms sit on top of.
- Operating entity updated to Pathly Labs, Inc., a Delaware corporation, with address and contact details corrected throughout.
- Added Section 6 of the Terms covering free and paid plans, including a commitment not to begin charging for anything a user already has for free.
- Added Section 7 of the Terms, how Pathly makes money, including a commitment that recommendations are never paid placement.
- Removed all references to sponsored content and sponsored quizzes. Pathly does not run them.
- Removed claims of GDPR and CCPA compliance. Pathly is directed to users in the United States, and now extends access, correction, portability, and deletion rights to every user as a matter of policy rather than by statute.
- Corrected the description of academic data. Pathly holds self-reported GPA and test scores only, never official transcripts or verified score reports.
- Corrected the statement on IP addresses, which are logged briefly for rate limiting and security.
- Added an explicit safety exception to the parental rights section.
- Narrowed the content licence granted to Pathly, and removed transferability.
- Removed indemnification obligations for students.
- Moved liability disclaimers out of the Privacy Policy and into the Terms.
New documents. Cookie Notice 1.0, Counselor Subscription Terms 1.0, Counselor Data Processing Addendum 1.0, Data Inventory 1.0, Subprocessor List 1.1.
Subprocessor List 1.1. Added Stripe for subscription billing. Added a column showing whether each data processing agreement is separately executed or incorporated into accepted terms, with verification links for every provider.
08 In progress
Published here when ready, with notice under the usual process:
- Family Subscription Terms, at launch of the family plan
- Security overview, consolidating the controls described across these documents
- Privacy request form, as a self-serve alternative to email
- Accessibility statement, expanding on Section 21.5 of the Terms
09 Contact
| Privacy requests and questions | privacy@pathly.com |
|---|---|
| Legal notices and these documents | legal@pathly.com |
| Security and vulnerability reports | security@pathly.com |
| Billing and subscriptions | billing@pathly.com |
| Schools and districts | partnerships@pathly.com |
| Everything else | hello@pathly.com |
| Pathly Labs, Inc. 885 Gold Hill Rd #3142 Fort Mill, SC 29708 |