Privacy Policy

1. Introduction

PathMatch LLC ("we", "us", or "our") operates hwbanana.com (the "Service"). This Privacy Policy informs you of our policies regarding the collection, use, and disclosure of personal data when you use our Service and the choices you have associated with that data.

We are committed to protecting your privacy and ensuring transparency about how we collect, use, and share your information. This Privacy Policy complies with the General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).

2. Information We Collect

Personal Information

When you use our Service, we may collect the following types of personal information:

• Account Information: Email address, password (hashed), and authentication tokens
• Profile Information: Name or username if you choose to provide it
• Payment Information: Payment card details are processed by Stripe and not stored on our servers. We receive transaction IDs and billing information necessary to process payments.
• Usage Data: Information about how you access and use the Service, including IP address, browser type, device information, pages visited, and time spent on pages

Content You Upload

We collect and store content you upload to our Service, including:

• Images of homework problems and solutions
• Resume text and documents
• Any other files or content you submit through the Service

This content is processed by our AI services to provide the requested functionality and is stored securely in our database.

3. How We Use Your Information

We use the information we collect for the following purposes:

• To Provide and Maintain the Service: Process your requests, analyze homework problems, optimize resumes, and deliver AI-generated solutions
• To Process Payments: Facilitate subscription purchases and one-time payments through Stripe
• To Manage Your Account: Create and manage user accounts, authenticate users, and provide account features
• To Communicate with You: Send service-related notifications, respond to your inquiries, and provide customer support
• To Improve the Service: Analyze usage patterns, diagnose technical problems, and enhance functionality
• To Ensure Security: Detect, prevent, and address fraud, abuse, security threats, and other harmful activities
• To Comply with Legal Obligations: Meet legal requirements, respond to legal processes, and enforce our terms

4. Third-Party Services and Data Sharing

AI Service Providers

We use third-party AI services to process your content and generate solutions:

• Google Gemini: We use Google's Gemini API (including gemini-3-pro-image-preview and flash models) to analyze homework problems and generate solutions. Your uploaded images and problem text are sent to Google's servers for processing. Please review Google's Privacy Policy.
• OpenAI: We may use OpenAI's services for resume analysis and optimization. Your resume content may be processed by OpenAI's servers. Please review OpenAI's Privacy Policy.

Authentication and Database Services

• Supabase: We use Supabase for user authentication, database storage, and file storage. Your account information, content, and usage data are stored on Supabase's infrastructure. Please review Supabase's Privacy Policy.

Payment Processing

• Stripe: We use Stripe to process payments. Payment card information is handled directly by Stripe and never stored on our servers. We receive transaction information necessary to complete purchases. Please review Stripe's Privacy Policy.

Hosting and Infrastructure

• Vercel: Our Service is hosted on Vercel's infrastructure. Please review Vercel's Privacy Policy.

We do not sell your personal information to third parties. We only share your information with service providers who help us operate the Service and are bound by confidentiality obligations.

5. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to track activity on our Service and hold certain information. Types of cookies we use:

Essential Cookies

These cookies are necessary for the Service to function and cannot be switched off in our systems:

• Authentication cookies to maintain your login session
• Security cookies to protect against fraudulent activity
• Session cookies to remember your preferences during your visit

Third-Party Cookies

We may use third-party cookies from our service providers:

• Stripe cookies for payment processing
• Supabase cookies for authentication

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent. However, if you do not accept cookies, you may not be able to use some portions of our Service.

6. Data Retention

We retain your personal information for as long as necessary to:

• Provide the Service to you
• Comply with legal obligations
• Resolve disputes and enforce our agreements
• Maintain security and prevent fraud

When you delete your account, we will delete or anonymize your personal information, except where we are required to retain it for legal purposes. Some data may remain in backups for a limited period before being permanently deleted.

7. Your Privacy Rights

GDPR Rights (EU Residents)

If you are located in the European Economic Area (EEA), you have certain data protection rights:

• Right to Access: Request copies of your personal data
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data ("right to be forgotten")
• Right to Restrict Processing: Request restriction of processing of your personal data
• Right to Data Portability: Request transfer of your data to another service
• Right to Object: Object to processing of your personal data
• Right to Withdraw Consent: Withdraw consent where processing is based on consent

CCPA Rights (California Residents)

If you are a California resident, you have the following rights under the California Consumer Privacy Act:

• Right to Know: Request disclosure of the categories and specific pieces of personal information we collect
• Right to Delete: Request deletion of personal information we have collected
• Right to Opt-Out: Opt-out of the sale of personal information (we do not sell personal information)
• Right to Non-Discrimination: Not be discriminated against for exercising your privacy rights

How to Exercise Your Rights

To exercise any of these rights, please contact us at support@pathfindr.app. We will respond to your request within 30 days. We may need to verify your identity before processing your request.

8. Children's Privacy

Our Service is not intended for children under the age of 13. We do not knowingly collect personal information from children under 13. If you are a parent or guardian and believe your child has provided us with personal information, please contact us immediately.

If we discover that we have collected personal information from a child under 13, we will delete that information promptly. For users between 13 and 18, we recommend parental supervision when using our Service.

9. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• Encryption of data in transit using SSL/TLS
• Encryption of sensitive data at rest
• Secure password hashing
• Regular security assessments and updates
• Access controls and authentication mechanisms

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially acceptable means to protect your personal information, we cannot guarantee its absolute security.

10. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country. By using our Service, you consent to the transfer of your information to these countries. We ensure that appropriate safeguards are in place to protect your data in accordance with this Privacy Policy.

11. Changes to This Privacy Policy

We may update our Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. We may also notify you via email or through a prominent notice on our Service. You are advised to review this Privacy Policy periodically for any changes.

12. Contact Information

If you have any questions about this Privacy Policy or wish to exercise your privacy rights, please contact us: