Privacy Policy

Foundpath (https://foundpath.app) is a self-discovery interview product operated by Ryan Winzenburg ("we," "us," or "Foundpath"). This policy explains what information we collect, how we use it, and the choices you have. By using Foundpath, you agree to this policy.

What we collect

Account information

When you sign up, we collect your email address and, if you choose to provide it, your name. You may sign in with Google OAuth (we receive your Google profile email and display name) or create an account with email and password (passwords are stored as secure hashes; we never store plain-text passwords).

Interview content

During the guided interview, you provide written answers to career and life-direction questions. You may also answer by voice: short audio recordings are sent to our transcription provider to convert speech to text. We store the resulting text transcripts and AI-generated reflections on your answers in our database. We do not retain your raw audio recordings after transcription.

When you complete the interview, we generate a personalized Career Discovery Report (HTML and plain text) from your answers using AI. This report is saved to your account.

Payment information

Foundpath uses Stripe for one-time checkout. Stripe processes your payment card and billing details (we do not store full card numbers on our servers). We store Stripe customer and checkout session identifiers and a record of when your account was paid.

Sharing you control

If you click "Share my report," we generate a unique link that allows anyone with the URL to view your report without signing in. You choose when to create that link; reports are private by default.

Technical and usage data

We use a session cookie to keep you signed in. We may collect basic server logs (IP address, browser type, timestamps) for security and debugging. When configured, we use Sentry for error reporting (session replay is disabled because interview content is sensitive). Rate limiting may use Upstash Redis with anonymized identifiers.

How we use your information

• Authenticate you and save interview progress across sessions
• Generate AI reflections during the interview and your synthesis report at the end
• Read interview questions aloud via text-to-speech (ElevenLabs, with browser fallback)
• Transcribe voice answers to text (ElevenLabs speech-to-text)
• Process your one-time payment through Stripe
• Email you your completed report and occasional progress reminders (via Resend)
• Operate, secure, and improve the service

Third-party services

We share data with service providers only as needed to run Foundpath:

• Google: OAuth sign-in (profile email and name)
• Stripe: payment processing
• Anthropic: AI reflections and synthesis report generation
• ElevenLabs: text-to-speech for the coach voice and speech-to-text for voice answers
• Resend: transactional email delivery
• TiDB (MySQL-compatible database): persistent storage of account, interview, and report data
• Vercel: application hosting
• Sentry: error monitoring (no session replay)
• Upstash: rate limiting (when configured)

These providers process data under their own privacy policies and, where applicable, data processing agreements.

Data retention

Your interview answers, reflections, and synthesis report are retained with your account so you can return to them. If you request account deletion, we will delete or anonymize your personal data within a reasonable period, except where we must retain information for legal, tax, or fraud-prevention purposes (e.g., payment records via Stripe).

Security

We use HTTPS, hashed passwords, signed session tokens, and access controls to protect your data. No method of transmission or storage is 100% secure; we work to apply reasonable safeguards appropriate for a solo-operated SaaS product handling personal reflections.

Your rights and choices

You can request access to, correction of, or deletion of your personal data by emailing hello@foundpath.app. You can stop using share links by not distributing them; contact us if you need a share link revoked. California and other regional privacy laws may grant additional rights. Contact us to exercise them.

Children

Foundpath is not directed at anyone under 18. We do not knowingly collect personal information from children.

Changes

We may update this policy from time to time. Material changes will be reflected by updating the date above. Continued use after changes constitutes acceptance.

Contact

Questions about privacy? Email hello@foundpath.app. See also our Terms of Service.