Aviso breve en español. El responsable es HERMAD Technology Services LLC, constituida en Wyoming, USA. Usamos los datos que envías para evaluar tu solicitud, responderte y administrar la lista de espera o cohorte. El formulario prepara un correo; recibimos tus respuestas cuando tú lo envías. El alojamiento procesa datos técnicos y usamos proveedores de correo y, cuando sea necesario, Google Drive/Sheets para organizar solicitudes. Puede haber tratamiento en El Salvador, Estados Unidos y otros países donde operan estos proveedores. No solicitamos datos sensibles, financieros, documentos de identidad ni datos privados de terceros. Esta solicitud no te suscribe a publicidad ni autoriza grabaciones o entrenamiento de modelos de IA. Puedes pedir acceso, corrección, eliminación, oposición o retiro del consentimiento, y los demás derechos aplicables, escribiendo a hello@path-metry.com. Los detalles, proveedores y procedimiento aparecen a continuación.
1. Controller and current scope
HERMAD Technology Services LLC (“HERMAD,” “we”) operates PathMetry and is responsible for information covered by this Policy. Our jurisdiction of formation is Wyoming, USA. Privacy and support: hello@path-metry.com.
This Policy covers the public website, beta access requests, related correspondence, and manual administration of a waitlist or cohort. It applies from September 19, 2026.
Submitting this form does not create an application account. This release does not collect in-app opportunity records, contacts, interviews, application histories, Path Checks or Next Best Action records through the website. Before inviting you to an application that processes those records, we will provide application-specific disclosures about its data, purposes, AI providers where used, hosting, retention and choices, and obtain any required permissions. The present authorization is limited to website and enrollment purposes.
2. Information we receive
| Category | Information and source |
|---|---|
| Contact and location | Name or preferred name, email, country and time zone that you enter or include in correspondence. |
| Career context for selection | Professional area, experience range, current career situation, counts of active processes and serious opportunities, whether a decision is expected soon, organization tools used, and a short description of an organizational difficulty. |
| Cohort context | Your stated relationship with the founder or HERMAD, correspondence, invitation or waitlist status, and manual selection notes. |
| Authorization evidence | Affirmative choices, document versions and links, language, consent scope, a request reference and browser-generated timestamps included in your email. We also receive normal email headers and receipt timestamps. A browser timestamp is not independent proof of identity. |
| Campaign information | Campaign parameters present in the page URL, such as source and campaign, included in the draft email. We do not need a cross-site advertising profile to evaluate a request. |
| Technical and security information | Website delivery and email providers may process IP addresses, request time, browser/device information, delivery or error records, and anti-abuse information. We do not add an IP-address field to the application consent record. |
Form values stay in the page until you choose to send the prepared email. They are not submitted to an enrollment database by this website. Your email provider may store a draft under its own practices. When you send it, HERMAD receives and stores the message and may organize a limited selection record in Google Drive/Sheets.
Please do not include sensitive information, salary or financial details, identification documents, health data, immigration documents, confidential employer information or another person’s private information. We do not require those details. If you accidentally send unnecessary information, contact us so we can address or delete it where possible.
3. Purposes and legal grounds
We use access-request information to assess whether the available beta fits your situation, respond, manage limited places and invitations, and communicate practical cohort matters. We also handle support and privacy requests, keep proportionate permission records, secure the website and communications, and comply with applicable legal obligations.
We request express authorization for the enrollment processing described here where consent is required. Depending on the applicable law and activity, necessary steps requested by you before participation, the service relationship, legal obligations, or a legally available and proportionate interest in security and administration may also provide a basis. We do not assume that a legal basis recognized in one country applies everywhere.
Enrollment processing is necessary to handle the application you choose to send. You may browse notices or ask a general question without joining the beta. If you withdraw consent, we will stop that consent-based activity and close the request where it cannot be handled without the necessary data.
This form does not subscribe you to marketing, enroll you in optional research, authorize recordings, or authorize AI model training. A future optional activity requires a separate explanation and choice. We do not sell access-request information, rent it to recruiters, or use it for cross-context behavioral advertising.
4. AI, human review and providers
The website form does not run a Path Check or send answers to an AI model. Access requests are reviewed manually. We do not use AI to make an automated admission decision through this flow. No employer hiring decision is made through it.
| Provider / service | Role and information involved |
|---|---|
| OpenAI Sites and its hosting infrastructure, including Cloudflare | Website publication, delivery and security; technical request and operational information. Using Sites as a host does not mean form answers are sent to ChatGPT for analysis. |
| GoDaddy email services | Routing and delivery for our contact mailbox; messages, attachments you send and mail metadata. |
| Google Drive / Google Sheets | Limited internal organization of received applications, selection status and related administration records when needed. |
| Your chosen email provider | Creates and sends the message at your instruction, under its own terms. |
Providers’ corporate disclosures are available from OpenAI, Cloudflare, GoDaddy and Google. They explain those providers’ practices and do not replace HERMAD’s responsibilities. A provider may act on our instructions for service data and separately control information collected for its own lawful operational purposes.
We may disclose information to authorized personnel or professional advisers as needed, or where required by law, a valid legal process, or protection of lawful rights. We limit disclosure to its purpose. We do not publish applications or share them with prospective employers as part of selection.
5. International processing
HERMAD administers requests from El Salvador. Website, email and document services may process information in the United States and other countries where they operate. This workflow does not promise storage exclusively in one country or a dedicated cloud region.
We remain responsible for a lawful cross-border processing arrangement where required. Depending on the law and relationship, this may require provider obligations, contractual safeguards, a recognized legal exception or specific authorization. Acceptance of the Terms or this Policy is not a blanket waiver of transfer restrictions. Where a separate transfer authorization is required, we must obtain it before making that transfer.
Contact us for information about recipients or safeguards relevant to your request, or concerns about international processing.
6. Retention, security and cookies
Our retention rule for an unselected, closed or inactive application is deletion or effective de-identification within six months after the last substantive contact, unless you ask us to continue considering you and we confirm that purpose. For a selected participant, necessary enrollment records may be retained through participation and for up to six months afterward. A separate application notice will govern in-app records.
We may retain a restricted, minimized record of permissions, a privacy request or a dispute as long as necessary to meet an applicable legal obligation or establish, exercise or defend a legal claim. We do not use it for marketing or to reopen a withdrawn application. We will explain a relevant retention exception when responding to deletion. Provider backups may persist under the provider’s retention cycle after active copies are removed.
We handle applications as internal records and limit access to people who need them for the stated purposes. No internet service, email system or storage method can promise absolute security. We will assess incidents and make legally required notifications. Report suspected incidents to our contact email without passwords or unnecessary sensitive information.
This website version does not install advertising pixels, optional analytics scripts, session replay or browser storage for its form. Infrastructure may use mechanisms necessary for delivery, security or abuse prevention. Campaign values are read from the current URL and placed in the email draft; they are not a cross-site tracking cookie. If we introduce optional tracking, we will explain it and obtain any required prior consent.
7. Your choices and privacy requests
Email hello@path-metry.com with the subject “Privacy request — PathMetry”. Tell us the email associated with your request, the country whose rights you invoke if relevant, what you want us to do, and enough detail to locate the information. You may write in English or Spanish.
You may request access or a copy; correction; deletion or cancellation; withdrawal of consent; opposition or objection; and, where applicable, portability or restriction/limitation of processing. You may ask for proof of authorization and information about use. You can withdraw a beta application without giving a reason.
We may ask for proportionate verification or proof of authority for a representative. We will not routinely require a government ID by ordinary email. We will explain any additional information needed, legal exception, refusal or extension and available review route. Requests are generally free, subject only to legally permitted exceptions. We will respond within the deadline applicable to your request; no single deadline replaces local law.
Withdrawal operates prospectively and does not invalidate lawful prior processing. Deletion may be subject to legal retention, others’ rights or another applicable exception. Where required, retained data will be restricted or blocked. Necessary security and legal recordkeeping may continue on a valid basis. You may complain to the competent authority and exercise rights without retaliation.
8. Country-specific information
These provisions apply only when the relevant law applies to HERMAD and the processing concerned. They do not suggest that every national law automatically applies to every request.
United States and California. Applicable state laws may provide access, correction, deletion, portability, appeal and opt-out rights. California Consumer Privacy Act coverage depends on its requirements and thresholds; this Policy does not assert that HERMAD meets them. If it applies, the categories, purposes, sources, recipients and retention practices here also serve as notice at collection for this limited workflow. We do not sell or share requests for cross-context behavioral advertising or use sensitive personal information for advertising. We will honor applicable opt-out preference signals and statutory requests when legally required.
Mexico. HERMAD is the responsible party identified above. Contact us at the email in section 7. Enrollment and its administration are the necessary purposes; this form has no secondary marketing purpose. Use section 7 for access, rectification, cancellation and opposition (ARCO), revocation, and limits on use or disclosure. Where Mexican law governs, we communicate an ARCO determination within 20 business days and, if granted, carry it out within the following 15 business days, subject to lawful extensions and verification rules. Sensitive information is not required and should not be supplied. This general checkbox is not the special written authorization for sensitive data or express authorization for financial or patrimonial processing.
Colombia. Where Colombian rules apply, affirmative authorization covers only the specified enrollment purposes and information. You may know, update and correct your data, obtain proof of authorization, ask about use, access data free of charge, and seek revocation or deletion subject to legal or contractual duties. Answering sensitive-data questions is voluntary; this form does not request it. Use section 7 for consultations and claims. Applicable consultation periods are 10 business days, with a permitted extension of up to 5; claim periods are 15 business days, with a permitted extension of up to 8, when legal conditions are met and notice is given. You may complain to the Superintendencia de Industria y Comercio after the required direct consultation or claim process.
El Salvador. Where Salvadoran personal-data rules apply, you may exercise applicable rights of access, rectification, cancellation or erasure, opposition, portability, limitation and withdrawal through section 7, subject to legal conditions. You may seek review by the competent Salvadoran data-protection authority. We will use the procedural periods and safeguards legally applicable at the time of the request.
Nothing in these summaries reduces a statutory right, deadline or remedy.
9. Adults, changes and contact
Beta enrollment is for adults aged 18 or older. We do not knowingly solicit children’s applications. If you believe a child submitted information, contact us so we can address it and delete it where required.
We will publish dated updates here. Material changes affecting existing requests will be communicated as required, and new consent sought before a new use that requires it. An update cannot silently expand an earlier authorization.
Questions, withdrawal, deletion, other rights and incidents all reach HERMAD at hello@path-metry.com as described in section 1.