How Pathfinder handles your data

As you use Pathfinder we collect:

• Your conversations with the AI guide, including questions, answers, and the structured ideas, opportunity, and deliverable data extracted from them.
• Account metadata, including your name, email, and timestamps.

Inside the app we do not collect device fingerprints, analytics tracking, or third-party cookies. Our public marketing pages use advertising cookies, and only if you allow them.

Your data is stored in a Supabase Postgres database, encrypted in transit and at rest, hosted in the United States (Amazon Web Services, region us-east-1). Access is restricted to Tiny Bottle AI personnel, enforced by row-level security policies in the database and role-based access for staff.

If we confirm any unauthorized access to your data, we will notify you without undue delay and within 72 hours of confirmation.

We share your data only with the service providers (sub-processors) required to run Pathfinder:

• Anthropic, to run the AI guide. Conversation content is sent to Anthropic's Claude API under Anthropic's commercial terms, which prohibit training on customer inputs.
• Supabase and Amazon Web Services, to host the database and application infrastructure in the United States.
• Vercel, to host and serve the application.
• Resend, to deliver email, such as account, sign-in, and support messages, and, if you opt in, our marketing mail. You can unsubscribe from marketing at any time without affecting account email.

We do not sell, license, or share your content with anyone else. We do not use your content for marketing without your written consent.

Advertising cookies load only if you allow them, and never inside the app. You can change your choice at any time here.

Your conversations and the data extracted from them are not used to train any AI modelfor use outside your engagement with Tiny Bottle AI. We do not currently train on your content for any purpose. We process your data through subscriptions that contractually prohibit training on inputs (Anthropic's commercial API).

Your conversations, opportunities, and the deliverables produced from them are retained in your account so you can pick your work back up and so we can support you with follow-up questions. You can request deletion at any time and we will permanently remove your data within 30 days.

To request deletion of your data, ask a question about how a specific piece of information is handled, or report a concern, contact support. Formal legal notices should be sent to legal@tinybottleai.com.

Tiny Bottle AI, LLC is a Minnesota limited liability company. If your organization has a Master Services Agreement with us, that agreement governs the handling of your data and controls in any conflict with this page.