Data processing

This page shows section 14 of the Privacy Policy. The Privacy Policy governs.

Privacy Policy

14. GDPR, CCPA, and Data Processing Addendum

Where the European Union General Data Protection Regulation (GDPR), the United Kingdom GDPR, or similar laws apply, Pathizer generally acts as a processor of customer project data on behalf of the customer, who acts as the controller, and processes that data according to the customer's instructions and these terms. Where Pathizer determines the purposes and means of processing account, billing, and operational data, it acts as a controller for that data. Personal data may be transferred to and processed in the United States and other jurisdictions; where required, Pathizer relies on appropriate safeguards, such as standard contractual clauses.

Where the California Consumer Privacy Act, as amended by the California Privacy Rights Act (CCPA/CPRA), or similar United States state privacy laws apply, you may have rights to know about, access, correct, delete, and limit the use of personal information, to opt out of the sale of personal information and of its sharing for cross-context behavioral advertising, and to not be discriminated against for exercising those rights. Pathizer does not sell personal information.

On its public marketing pages, Pathizer uses advertising tags from Google (Google Ads), Meta (the Meta Pixel), and OpenAI (the ChatGPT Ads measurement pixel). Meta can receive the public pages you view and whether you requested a call or signed up; Google can receive whether you signed up, completed a free report, or opened P7 Free Scheduling from a marketing page, and, if you used P7 Free Scheduling while advertising cookies were allowed for you, the advertising click ID and the time of your first use of P7 in a visit, which Pathizer sends as the P7 Free Scheduling Privacy Notice describes; OpenAI can receive whether you requested a call or signed up. Under some state laws this is sharing for cross-context behavioral advertising. These tags never run inside the signed-in application, and they never receive schedule contents, project data, or what you type into a form. You can opt out at any time through Cookie Settings, and Pathizer treats a Global Privacy Control signal from your browser as an opt-out. In the European Economic Area, the United Kingdom, Switzerland, and where your region cannot be determined, the tags load only after you opt in.

If you allow advertising cookies and request a call or sign up, Pathizer's server also tells OpenAI about that action, together with the click reference OpenAI's link or cookie gave your browser, so OpenAI can measure its ads. Pathizer does not send your name, email address, or anything you typed.

Enterprise customers who require a Data Processing Addendum (DPA) may request one by contacting legal@pathizer.com. Where a DPA is signed by Pathizer and the customer, it supplements this Privacy Policy for that customer.

Read in the full Privacy Policy